Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/n401Ow1Z3rHp0RSfvp67Rbn6wNI.roa
File: n401Ow1Z3rHp0RSfvp67Rbn6wNI.roa (raw, json)
Hash identifier: T84C54yQSq42hPf/Bs664n2GnnqC1m5ag+INedq+MkQ=
Subject key identifier: 9F:8D:35:3B:0D:59:DE:B1:E9:D1:14:9F:BE:9E:BB:45:B9:FA:C0:D2
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0183D3D5089416B801AED0190A360D378487
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/n401Ow1Z3rHp0RSfvp67Rbn6wNI.roa
Signing time: Fri 14 Oct 2022 00:11:37 +0000
ROA not before: Fri 14 Oct 2022 00:11:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44570
IP address blocks: 2a06:a004::/32 maxlen: 48
2a06:a000::/32 maxlen: 48
2a06:1280:1000::/36 maxlen: 48
2a06:a003::/32 maxlen: 48
2a06:a005::/32 maxlen: 48
2a06:a005:1a70::/44 maxlen: 48
2a07:54c2:b00b::/48 maxlen: 48
2a05:dfc7:1300::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d3:d5:08:94:16:b8:01:ae:d0:19:0a:36:0d:37:84:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Oct 14 00:11:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9f8d353b0d59deb1e9d1149fbe9ebb45b9fac0d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a9:8b:9c:2b:3d:e7:1e:9f:39:b9:f8:b4:5c:
1d:27:61:89:18:5b:37:00:a0:39:56:37:09:ac:f3:
a5:a6:6d:d1:89:30:5b:40:cd:1c:a0:cb:d4:9a:03:
23:74:07:99:3b:14:b9:85:89:23:c6:16:e0:f6:a9:
bd:1b:52:93:85:6d:48:e4:1d:79:d4:7e:ff:f0:f2:
bc:32:b8:a5:c0:cf:eb:36:3d:2e:f6:91:c7:e0:fb:
fd:ad:ef:d1:eb:a2:ca:cb:83:f7:f4:9c:de:58:4b:
e3:e5:dd:9c:5b:cd:1d:6e:55:fb:20:be:93:cb:a1:
fb:89:41:a7:75:45:97:6f:35:e0:9d:46:55:d8:cb:
17:43:6e:1e:12:66:e1:23:19:62:ed:e3:74:f2:aa:
15:64:fb:8d:ce:67:6a:b0:a5:98:ec:fd:70:ea:f7:
02:7f:e4:b7:e8:98:1c:7c:3c:28:d2:a8:4e:d1:70:
f0:4d:dd:2d:f8:9e:f8:f5:13:a7:66:38:83:84:97:
f2:ad:ab:8c:db:64:72:b0:30:1e:bb:df:92:68:0e:
96:00:2e:8e:51:bf:44:c5:34:65:a2:b2:9a:f5:53:
fb:b7:39:81:29:7c:cc:44:40:46:05:6a:9d:69:67:
ac:a0:d9:bd:14:b1:be:26:e3:79:c7:58:a5:2d:87:
e6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:8D:35:3B:0D:59:DE:B1:E9:D1:14:9F:BE:9E:BB:45:B9:FA:C0:D2
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/n401Ow1Z3rHp0RSfvp67Rbn6wNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc7:1300::/40
2a06:1280:1000::/36
2a06:a000::/32
2a06:a003::-2a06:a005:ffff:ffff:ffff:ffff:ffff:ffff
2a07:54c2:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
a3:66:8f:02:f8:85:dc:a4:72:95:e1:30:9a:1c:69:a2:d3:b0:
ba:39:3c:f1:cb:44:f3:18:10:9a:c8:1b:83:5c:6b:1d:c9:bd:
b8:47:3d:c1:67:d9:3c:8c:45:1d:05:d2:7f:ab:35:8d:8b:99:
fc:99:45:a1:da:0d:73:d5:df:19:c6:3b:99:48:8b:b2:8d:73:
0c:04:2c:e4:9c:28:16:86:c3:bf:7f:89:33:45:a9:4d:e9:9d:
3c:c6:ea:13:e6:ff:86:aa:5a:91:5f:e2:2a:cf:56:28:44:0c:
b8:5a:34:10:b0:77:18:5c:94:b7:60:1d:86:98:87:68:6e:50:
bb:e5:7b:cd:ab:a2:72:08:94:68:6d:82:50:a7:3e:df:c4:7a:
0e:f6:0d:e7:a8:b0:7f:92:bb:1e:4f:89:e4:ee:24:4f:c5:a3:
37:77:27:c3:27:bc:ba:a4:ae:dc:d0:a6:19:dc:c0:66:a0:67:
0f:b4:81:cf:c4:4d:4b:ac:b4:64:af:60:2b:5f:03:89:21:be:
97:8e:6b:91:78:e8:ea:07:75:92:2a:b5:7b:a5:17:5a:39:d6:
7d:82:33:52:3e:60:9a:11:6c:d9:55:71:e9:78:ed:bd:62:8d:
91:a5:64:04:90:69:7a:ce:5a:49:19:56:e9:69:49:a2:03:4d:
79:8b:d4:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:05 2023 by rpki-client on console.sobornost.net