Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/olroDxlGqohPzAOWvVr9dDFzdmo.roa
File: olroDxlGqohPzAOWvVr9dDFzdmo.roa (raw, json)
Hash identifier: JlfxGGF1At+Nfc2b77wWChuA3xuahpypKz8PckEHnKA=
Subject key identifier: A2:5A:E8:0F:19:46:AA:88:4F:CC:03:96:BD:5A:FD:74:31:73:76:6A
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0184EF926D734AC871BDCB6EEA4363B065A7
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/olroDxlGqohPzAOWvVr9dDFzdmo.roa
Signing time: Thu 08 Dec 2022 02:31:01 +0000
ROA not before: Thu 08 Dec 2022 02:31:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203453
IP address blocks: 2a06:a005:150d::/48 maxlen: 48
2a07:54c2:b00b::/48 maxlen: 48
2a06:a005:108e::/48 maxlen: 48
2a05:dfc7:2300::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ef:92:6d:73:4a:c8:71:bd:cb:6e:ea:43:63:b0:65:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Dec 8 02:31:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a25ae80f1946aa884fcc0396bd5afd743173766a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2f:dc:d6:2b:70:b4:dd:fb:94:89:c2:6a:8f:
12:cb:97:a8:39:11:c1:6b:69:b8:b9:3e:da:ff:ce:
93:09:d8:9e:27:33:10:27:e7:40:f7:38:bc:4d:70:
4b:82:05:7b:c0:dc:0d:41:a9:3a:6b:c2:c2:89:1b:
fb:75:9b:29:5c:86:6a:c0:0e:15:21:dd:dd:fe:bf:
91:e0:5e:83:f3:9c:2b:07:b9:56:ea:a4:96:fa:da:
d6:f9:b1:7b:b8:b7:5b:1c:83:3e:9a:14:c8:e3:12:
5d:0a:1a:49:26:b5:ce:d6:55:7d:eb:39:0d:a2:db:
e5:22:42:6c:ea:7e:3d:f8:7f:0d:2d:64:cf:6e:a2:
32:d3:8c:ec:bc:29:aa:07:4d:6c:bc:b8:6d:f9:d5:
86:7f:4e:93:b1:54:52:86:bd:cb:8f:e2:3d:e5:fc:
74:51:0e:70:97:57:87:e7:d1:dc:45:19:5e:6c:9c:
5e:dd:53:23:a3:b9:06:71:54:55:92:59:30:f3:79:
a0:f0:1e:ec:cf:fa:b8:98:05:37:fa:b6:e7:43:72:
2c:cd:4d:e9:53:a1:b1:ef:79:c8:84:8d:00:ad:f6:
98:c2:b0:fd:fd:2d:0c:10:1e:d7:b0:f2:b2:db:55:
98:8a:0a:32:be:f5:84:5e:80:6b:5b:38:15:ae:97:
03:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:5A:E8:0F:19:46:AA:88:4F:CC:03:96:BD:5A:FD:74:31:73:76:6A
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/olroDxlGqohPzAOWvVr9dDFzdmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc7:2300::/40
2a06:a005:108e::/48
2a06:a005:150d::/48
2a07:54c2:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
44:fc:95:39:9c:9d:14:31:39:42:0b:36:6e:7f:b2:69:01:a2:
6b:b8:78:2e:c4:7d:cb:30:16:f8:bf:28:2b:47:f5:b6:bf:93:
c5:87:3e:d2:b4:52:59:59:55:7c:5d:0d:28:5e:0f:17:e3:55:
bf:17:72:ad:5d:d6:3f:ba:68:03:b9:c4:81:12:1d:71:8a:fa:
4a:a9:ec:b8:b1:12:49:15:45:63:e6:68:f5:6d:19:ce:49:e5:
c2:32:87:09:65:db:72:a5:e3:a9:01:d9:4a:05:13:82:e4:6c:
a3:31:5b:3f:47:a0:5a:ec:c3:a5:5f:14:f9:d6:61:34:fc:6a:
25:73:4a:e5:27:74:f8:22:7a:fd:9e:bf:1a:2e:ed:ab:9e:72:
71:86:a7:9d:b1:81:bf:b9:e3:0f:a0:89:33:3f:c2:52:a5:1f:
a7:81:91:82:ce:28:80:c9:cc:b3:af:0c:13:2a:cb:03:20:fe:
15:e0:ff:11:31:af:48:cb:26:8c:e5:58:f6:0a:28:68:2b:dd:
86:e5:9a:b2:35:82:33:ab:ae:1c:c5:73:b2:25:68:71:36:b6:
18:5b:bd:15:df:27:c9:a7:f5:0e:27:b2:46:b6:6b:2e:93:08:
fe:76:93:87:09:d0:58:24:bc:70:88:0d:ee:27:fa:3f:4b:61:
28:84:02:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:05 2023 by rpki-client on console.sobornost.net