Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/uEGH_3ufl9VxygD_GJ63JoOagMs.roa
File: uEGH_3ufl9VxygD_GJ63JoOagMs.roa (raw, json)
Hash identifier: vrtmDCeO2U01+9HVSGWBrOvUitkA2FJl8hXpkkp+xSM=
Subject key identifier: B8:41:87:FF:7B:9F:97:D5:71:CA:00:FF:18:9E:B7:26:83:9A:80:CB
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 018495210984257786EF5B40CB5FA5D352FF
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/uEGH_3ufl9VxygD_GJ63JoOagMs.roa
Signing time: Sun 20 Nov 2022 13:01:21 +0000
ROA not before: Sun 20 Nov 2022 13:01:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204268
IP address blocks: 2a06:a005:a12::/48 maxlen: 48
2a06:a005:15b0::/44 maxlen: 48
2a06:a005:2320::/44 maxlen: 48
2a06:a005:1000::/44 maxlen: 48
2a06:a005:a0e::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:95:21:09:84:25:77:86:ef:5b:40:cb:5f:a5:d3:52:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Nov 20 13:01:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b84187ff7b9f97d571ca00ff189eb726839a80cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b1:b4:29:20:23:46:88:ef:87:d0:b0:e1:8f:
ab:f9:f5:ca:42:80:2b:27:8e:fe:1f:43:c0:3d:cd:
ac:ed:eb:a9:ec:8c:1c:5e:1a:20:42:37:56:80:b4:
d4:cc:21:11:58:52:54:b0:9a:c2:19:46:35:7f:fd:
b1:ef:a6:41:71:40:03:88:14:46:80:0e:fb:66:80:
1c:aa:f1:6d:16:01:77:05:b3:b3:e5:4c:f6:13:1e:
21:b5:ab:ec:99:8c:4e:77:1f:5f:d3:72:f6:70:ea:
f9:31:2d:10:4a:64:0a:7a:6d:9f:00:89:e7:fa:f5:
76:0e:dd:dd:bc:c6:99:eb:32:47:8e:40:ac:cf:40:
88:83:ea:35:93:a3:4f:02:d5:72:0c:37:6c:77:7f:
b0:9a:3f:09:ad:6e:14:66:f7:08:f6:33:d5:b8:aa:
e3:24:f0:2d:5e:0d:ae:0f:46:74:a1:c7:7b:19:6f:
40:f3:f6:46:fa:83:2a:25:59:a7:a7:4b:41:45:f4:
63:6d:2b:3f:43:06:82:f9:d4:f5:e2:b3:60:27:33:
43:d4:d4:07:89:a1:af:4a:96:70:9d:81:a3:a5:82:
d4:54:0b:e9:5e:4a:f6:32:b0:0b:98:29:fe:59:b4:
14:3f:ed:b6:0d:e4:81:7b:ec:36:c5:ad:56:4b:6a:
16:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:41:87:FF:7B:9F:97:D5:71:CA:00:FF:18:9E:B7:26:83:9A:80:CB
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/uEGH_3ufl9VxygD_GJ63JoOagMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:a0e::/48
2a06:a005:a12::/48
2a06:a005:1000::/44
2a06:a005:15b0::/44
2a06:a005:2320::/44
Signature Algorithm: sha256WithRSAEncryption
87:05:51:2f:96:45:9d:ea:51:66:e6:08:35:6a:9a:4c:e5:98:
3e:f4:18:39:5b:30:0f:ec:fd:88:24:d1:f2:c9:d8:7c:8b:45:
d2:84:7b:2c:5e:11:c6:e0:15:72:89:6d:01:dd:c2:1d:4f:95:
8b:61:69:72:52:48:39:9f:06:48:84:27:69:7b:17:84:f6:0b:
44:56:bf:bf:c4:3e:4b:26:3a:c8:b8:b8:fc:61:3c:d2:e7:44:
60:d2:43:57:e7:9f:c6:9f:cd:93:bd:d1:28:03:14:b2:97:b3:
8d:04:39:53:bd:fd:2b:7d:36:5f:5e:08:7e:b6:ee:8f:4d:bc:
d9:1d:a0:e8:b9:d8:8d:3e:7b:17:7e:fc:75:23:48:b3:36:63:
9a:8e:f9:70:27:e6:39:fd:a2:23:56:a7:9f:e9:fd:c4:a4:ad:
67:1c:5c:2d:ac:28:25:ae:cb:10:e3:70:a6:cf:87:15:f4:40:
1d:25:d7:d9:0c:90:64:7a:41:82:79:d9:5b:1f:2b:5a:df:e6:
fc:1b:8b:8c:e5:ca:63:a2:93:6c:04:91:52:a0:84:f8:f5:9e:
b0:2d:d3:52:d5:7f:bb:22:f7:ad:ac:df:6f:c9:55:39:97:41:
9e:ce:98:b2:b0:03:b6:48:9d:ad:f5:9b:a5:51:26:5c:73:6e:
47:4c:89:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:05 2023 by rpki-client on console.sobornost.net