Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/pQvuMm7ydTA10GWpG6rcdqPWrHY.roa
File: pQvuMm7ydTA10GWpG6rcdqPWrHY.roa (raw, json)
Hash identifier: bC2vJZxbFtOqHKDLz6YU7BaQuoq7T2S3a57mZdlyTNM=
Subject key identifier: A5:0B:EE:32:6E:F2:75:30:35:D0:65:A9:1B:AA:DC:76:A3:D6:AC:76
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 018301B5033FB44FCEA688F9DA0C45959B2A
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/pQvuMm7ydTA10GWpG6rcdqPWrHY.roa
Signing time: Sat 03 Sep 2022 04:56:23 +0000
ROA not before: Sat 03 Sep 2022 04:56:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203069
IP address blocks: 2a06:a005:1b20::/44 maxlen: 48
2a06:a005:1b10::/44 maxlen: 48
2a06:a005:1b00::/44 maxlen: 48
2a06:a005:1af0::/44 maxlen: 48
2a06:a005:488::/46 maxlen: 48
2a07:54c2:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:01:b5:03:3f:b4:4f:ce:a6:88:f9:da:0c:45:95:9b:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Sep 3 04:56:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a50bee326ef2753035d065a91baadc76a3d6ac76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:be:b3:45:c9:46:9f:ff:97:a4:20:71:23:3c:
43:dd:ea:d2:cc:d2:83:eb:73:af:ac:7a:fc:df:03:
b6:af:fb:88:04:36:15:b4:0d:01:61:04:07:c9:39:
0f:b0:76:69:b6:d8:9a:56:e9:41:6c:ae:9f:17:af:
04:84:d3:b3:58:91:f6:8b:84:17:9c:77:38:51:22:
7c:40:65:de:42:56:72:b1:d0:a0:8f:97:1a:a5:c0:
96:97:8a:85:cc:c3:fb:87:0b:03:f0:cd:08:72:f6:
94:49:a9:ee:08:e4:cd:21:7b:53:e1:af:86:3e:07:
f7:e1:f9:ba:5c:36:dc:f7:30:28:9c:99:bb:42:3c:
72:84:d3:03:51:7e:53:d5:b3:73:af:2c:20:e2:ef:
d3:59:09:9c:39:c4:bb:df:b9:d2:aa:88:03:f7:4e:
36:36:ad:c6:f0:ca:0c:fb:1a:65:66:01:92:a2:1b:
09:ef:12:f9:0c:03:82:96:25:9d:ea:45:e7:51:3d:
5a:31:c0:2b:5a:1a:07:07:bf:a5:30:63:b4:da:b6:
71:41:54:74:34:c3:f8:9c:19:bc:ed:b4:39:0d:c2:
01:2c:f8:2b:fc:2a:57:b2:79:3f:0a:b3:42:6d:65:
86:15:c4:3d:fe:eb:fb:bd:58:25:8d:f6:d5:e2:59:
9b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:0B:EE:32:6E:F2:75:30:35:D0:65:A9:1B:AA:DC:76:A3:D6:AC:76
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/pQvuMm7ydTA10GWpG6rcdqPWrHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:488::/46
2a06:a005:1af0::-2a06:a005:1b2f:ffff:ffff:ffff:ffff:ffff
2a07:54c2:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
3f:65:83:e3:a8:61:6f:b4:81:98:14:62:47:9a:c1:56:6b:c6:
3c:7e:ef:35:41:d5:03:97:ca:c2:b7:ba:89:94:a0:e9:6b:79:
4b:a9:14:36:12:0e:24:1a:b3:fa:2f:05:36:fb:34:64:80:88:
bc:cb:c7:14:d7:f0:b0:d9:74:b8:14:0b:30:41:9a:ff:7b:b1:
72:3b:a7:37:f6:34:79:30:38:a3:b1:e1:bc:c0:0d:f8:3a:88:
ce:2c:c3:a0:94:e4:e5:f6:20:af:c0:2d:51:45:28:99:f4:27:
bf:ea:9e:69:59:74:71:90:84:0c:ca:f4:46:a3:14:36:6f:a2:
ef:7d:5f:3a:c9:d0:fa:c0:f0:ee:01:40:80:ef:73:81:ad:9c:
cc:d9:6e:28:0e:87:a7:58:8d:52:bd:77:de:de:be:a5:7f:e0:
ff:c0:27:99:fe:5f:e7:03:2a:ea:d6:30:af:7a:92:3e:e0:5e:
0a:8c:20:90:ad:d7:ce:e4:3d:33:a0:25:c0:e5:e9:11:07:4c:
9c:d1:82:24:ca:7e:7e:a0:4f:ed:2c:cb:f3:6e:17:47:89:cf:
11:33:3e:8e:df:0b:3d:1a:2b:37:99:12:5c:f3:47:04:fe:11:
ac:ff:34:48:a6:14:71:ea:ee:10:e8:3c:e5:1a:23:95:27:81:
ca:e6:be:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:05 2023 by rpki-client on console.sobornost.net