Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/qpUYwQOar0UQ6IO8-16HegcvnQw.roa
File: qpUYwQOar0UQ6IO8-16HegcvnQw.roa (raw, json)
Hash identifier: LRniP5327BKz/cD7uQcTPcFh0NJ+pHURokkJPAITgYs=
Subject key identifier: AA:95:18:C1:03:9A:AF:45:10:E8:83:BC:FB:5E:87:7A:07:2F:9D:0C
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01824807C0DB3B4090E84F12664B57F73444
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/qpUYwQOar0UQ6IO8-16HegcvnQw.roa
Signing time: Fri 29 Jul 2022 03:37:23 +0000
ROA not before: Fri 29 Jul 2022 03:37:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203655
IP address blocks: 2a06:a005:1480::/44 maxlen: 48
2a06:a005:13f0::/44 maxlen: 48
2a06:a005:1470::/44 maxlen: 48
2a06:a005:1400::/44 maxlen: 48
2a06:a005:13e0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:48:07:c0:db:3b:40:90:e8:4f:12:66:4b:57:f7:34:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jul 29 03:37:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aa9518c1039aaf4510e883bcfb5e877a072f9d0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:75:4f:18:39:f9:00:6f:d6:61:9d:e0:85:72:
b0:4c:7d:d3:37:06:ab:d7:66:e0:62:c0:d7:40:53:
71:aa:b6:dc:52:91:0e:c1:18:04:f2:13:5b:84:a9:
12:84:c8:02:00:8b:b0:57:2e:7f:c9:e3:a9:b1:0f:
f1:06:63:ef:40:ef:14:96:2a:d1:c9:6a:b3:bd:55:
d1:17:b5:f4:50:24:0f:a3:31:2d:38:93:57:13:75:
68:5a:05:f5:39:d7:96:5c:04:67:48:7c:e8:a3:8a:
bc:63:00:f1:72:ad:f6:33:bf:9c:0e:d9:9a:cf:25:
9b:b1:90:ef:2b:92:6f:4f:29:81:1d:1d:94:6f:e8:
06:96:2a:ed:f2:84:c8:05:bf:80:bc:72:51:e9:4c:
ce:4a:85:3b:5d:90:8a:64:2f:26:2a:08:c2:85:a3:
bf:04:8f:03:24:a9:15:59:dd:fa:6e:e5:da:ce:6b:
90:2f:ec:3f:37:60:d2:8d:48:ca:b7:c6:b0:29:04:
67:53:36:36:c3:e0:cb:ed:e2:cd:43:f5:e4:1f:13:
a2:32:ab:3b:6b:b0:c0:ab:9b:9c:53:21:07:4f:ca:
c7:f5:5b:c0:ca:ae:59:bb:9a:dc:83:15:47:e2:f8:
38:d8:a6:22:60:1e:2d:48:28:41:89:c0:d4:58:3e:
6a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:95:18:C1:03:9A:AF:45:10:E8:83:BC:FB:5E:87:7A:07:2F:9D:0C
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/qpUYwQOar0UQ6IO8-16HegcvnQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:13e0::-2a06:a005:140f:ffff:ffff:ffff:ffff:ffff
2a06:a005:1470::-2a06:a005:148f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
60:89:87:4d:04:c1:b0:5f:00:17:07:84:e7:15:e5:aa:4e:2f:
8b:9a:58:8e:fc:ba:33:3c:5c:9d:e1:a4:a4:e8:29:c0:2a:8b:
cf:90:ce:1b:e3:cd:16:3a:f3:49:39:68:d1:0c:e6:5d:a7:86:
3f:9b:34:85:6e:73:6b:8a:9d:24:d6:6d:02:52:ad:01:de:2d:
9c:20:b9:93:31:88:1a:c0:5c:a0:99:0c:55:42:a2:35:2f:9b:
55:da:8b:05:bc:94:56:b7:ad:8f:18:e8:cc:d7:2e:b5:4c:f2:
f0:4c:f8:ee:3d:11:6f:8b:da:a4:1d:27:5d:6f:10:a2:a5:ce:
d8:7c:b4:7c:70:fc:65:6d:7d:7a:b3:6e:d6:d2:d5:b3:fa:51:
38:a5:d4:3b:d9:6a:a6:8b:a9:d4:7f:f0:80:26:9b:a7:82:e1:
a7:f5:e7:ae:ba:8f:bc:14:36:d6:69:b7:68:3a:e3:7c:9b:d6:
e6:bc:ac:25:fe:85:3c:ec:b0:5c:78:6b:e5:de:f6:e8:13:f0:
50:f8:ab:17:45:5a:14:16:33:43:61:b9:b4:b6:51:22:bc:6c:
25:6f:ab:24:5d:a5:fb:8d:bd:50:e9:ca:0f:66:95:40:c5:97:
f8:81:27:85:1a:af:90:54:c4:33:5e:f8:92:bd:50:c7:6b:d9:
59:44:4e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:05 2023 by rpki-client on console.sobornost.net