Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/l6p5jjieySDPQtibObO1q0Uc-ck.roa
File: l6p5jjieySDPQtibObO1q0Uc-ck.roa (raw, json)
Hash identifier: VsoMBvN1cnYSe3zFm+1GfJB/R2MQJsed43KJAjo2YAE=
Subject key identifier: 97:AA:79:8E:38:9E:C9:20:CF:42:D8:9B:39:B3:B5:AB:45:1C:F9:C9
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 018317C53AEBF3BBA44047217FF1F66CD175
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/l6p5jjieySDPQtibObO1q0Uc-ck.roa
Signing time: Wed 07 Sep 2022 11:45:44 +0000
ROA not before: Wed 07 Sep 2022 11:45:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210667
IP address blocks: 2a06:a005:1250::/44 maxlen: 48
2a06:a005:1bb0::/44 maxlen: 48
2a06:a005:ad0::/44 maxlen: 48
2a07:54c2:b00b::/48 maxlen: 48
2a06:a005:2de::/48 maxlen: 48
2a06:a005:2d3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:17:c5:3a:eb:f3:bb:a4:40:47:21:7f:f1:f6:6c:d1:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Sep 7 11:45:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=97aa798e389ec920cf42d89b39b3b5ab451cf9c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b2:28:69:16:af:5d:9a:15:c5:4a:33:a3:6f:
56:bf:6d:84:59:03:7e:f4:0c:11:36:79:41:c2:9c:
3f:06:b7:dc:f2:2d:46:da:64:f6:62:45:19:cc:1a:
15:7e:c2:51:e1:a4:b8:4f:bf:4d:d4:55:1b:06:ee:
e4:39:da:2a:ce:dc:19:f6:f2:09:ac:dd:ed:20:e6:
48:9a:07:17:8a:1a:1e:41:44:8e:1f:e3:d4:79:15:
57:b2:e5:0c:0f:c5:49:f5:5c:fc:7f:7a:12:ce:89:
96:c1:4d:e4:c9:56:49:1b:f8:5a:6c:b1:22:fc:a2:
9e:b3:45:e2:4a:58:4f:f6:72:fb:46:d2:16:a3:3d:
6c:3b:4b:dc:da:5e:19:ec:ca:c8:3e:92:02:bd:9c:
34:b9:f2:5f:13:3e:ac:31:45:7c:b5:d8:50:30:06:
be:d2:11:cf:91:2d:f4:38:42:b3:e0:49:b5:8c:5e:
04:2e:1b:86:d1:7d:a9:1e:a2:15:53:18:b8:da:dc:
3d:5a:e7:2b:bb:9b:fc:dd:4d:d1:13:44:cf:8a:07:
9e:ef:24:cd:d7:74:b5:cd:7e:2f:bf:67:a8:5c:8d:
8e:c1:7e:fc:38:d7:6a:bb:94:1a:6e:f0:c3:da:18:
ff:00:63:00:ef:e9:38:8c:65:cd:09:bd:e9:49:08:
fb:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:AA:79:8E:38:9E:C9:20:CF:42:D8:9B:39:B3:B5:AB:45:1C:F9:C9
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/l6p5jjieySDPQtibObO1q0Uc-ck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2d3::/48
2a06:a005:2de::/48
2a06:a005:ad0::/44
2a06:a005:1250::/44
2a06:a005:1bb0::/44
2a07:54c2:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
8e:61:e2:db:7a:55:ed:07:4f:76:d6:ea:c4:91:0d:ae:99:1e:
c4:8d:3b:92:69:65:bd:57:8f:5d:be:c1:2c:fa:e5:41:52:59:
d5:e1:06:d3:0e:24:93:dd:06:44:58:8b:82:16:17:f4:38:ce:
6e:e9:f6:78:1d:10:0a:c1:42:85:8d:52:1f:35:b1:03:a2:14:
24:5e:84:a2:8e:bf:af:3c:d2:9e:ba:29:8c:ea:90:9a:b4:01:
a9:e8:5c:c2:a6:92:09:b6:01:55:45:59:51:81:71:93:00:ea:
1a:f9:17:0f:ea:00:ed:b7:51:ce:d0:d9:9b:29:02:5d:48:8e:
b5:7b:a3:51:0a:c4:f1:d0:21:dd:41:c1:00:f7:e5:e0:19:5e:
9d:f0:10:20:62:c6:ee:5b:7b:db:08:be:b2:9b:b1:bd:7c:6b:
83:72:ba:e1:8f:63:ab:86:58:9f:6d:05:58:a0:3d:64:23:21:
45:e6:8a:0e:9d:f7:11:cf:ce:50:ca:99:6c:a2:88:30:a9:f7:
a9:2e:c3:a5:2c:e8:25:8a:16:fc:21:0f:71:d0:e7:c5:57:65:
c2:db:54:45:fc:75:cf:d0:7e:c5:82:1c:01:c2:b4:6a:6a:11:
9b:d7:96:0c:07:31:1f:c3:a1:59:29:f9:ad:b4:e6:29:bf:df:
04:25:0a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:05 2023 by rpki-client on console.sobornost.net