Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/5cc6e1-fe5f-4803-95f2-9f614074da2d/1/g0vcdBURZ3JgVBy_LO00Qz8o2fM.roa
File: g0vcdBURZ3JgVBy_LO00Qz8o2fM.roa (raw, json)
Hash identifier: BCDFm/41EoEEfQvWaboGgpjSPzgPAx2LhzyMf7yCzNk=
Subject key identifier: 83:4B:DC:74:15:11:67:72:60:54:1C:BF:2C:ED:34:43:3F:28:D9:F3
Certificate issuer: /CN=b71d8ba400b7e4bf4c4ae1bc307621ec2347e6de
Certificate serial: 097AE1FA
Authority key identifier: B7:1D:8B:A4:00:B7:E4:BF:4C:4A:E1:BC:30:76:21:EC:23:47:E6:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tx2LpAC35L9MSuG8MHYh7CNH5t4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/5cc6e1-fe5f-4803-95f2-9f614074da2d/1/g0vcdBURZ3JgVBy_LO00Qz8o2fM.roa
Signing time: Sat 01 Jan 2022 01:56:21 +0000
ROA not before: Sat 01 Jan 2022 01:56:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49697
IP address blocks: 2001:678:a00::/48 maxlen: 128
2001:678:974::/48 maxlen: 128
2001:678:97c::/48 maxlen: 128
2001:678:964::/48 maxlen: 128
2001:67c:1250::/48 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159048186 (0x97ae1fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b71d8ba400b7e4bf4c4ae1bc307621ec2347e6de
Validity
Not Before: Jan 1 01:56:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=834bdc741511677260541cbf2ced34433f28d9f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:57:15:cc:06:4d:01:89:8e:44:5e:b3:a2:94:
9c:d8:68:c9:fa:77:91:86:d2:98:40:2d:23:b9:46:
00:45:a8:b5:20:c2:0e:80:6a:e7:0a:12:43:24:1a:
f6:9a:9f:78:42:b3:6a:07:a7:7c:df:20:fe:67:1e:
8c:1f:b6:cd:1d:15:f8:dc:68:ce:4c:a0:fc:4b:70:
03:94:42:19:cd:17:ce:f6:fc:48:fd:56:4c:b1:90:
6c:56:74:2f:29:9e:52:fa:13:d5:c0:dd:82:66:c9:
be:75:32:7d:01:ec:07:91:0a:17:80:5e:c4:37:93:
fb:d4:f9:26:bf:0a:0c:d8:2f:e7:15:98:8b:a6:b9:
38:72:d8:65:1f:60:47:3e:3b:29:b5:33:cb:7d:1d:
90:ae:08:1d:e5:25:42:2d:e1:07:af:06:6d:58:a2:
9c:ff:6d:ae:b0:bf:d8:95:68:64:c7:0b:48:7a:bc:
2c:83:ec:1e:bb:8e:3d:b0:60:b3:a5:15:9c:2f:fe:
a8:ab:9d:d1:25:d8:f0:bb:cf:f6:97:6e:cb:93:be:
ba:fb:3b:98:42:1e:6e:c8:54:86:be:b0:95:11:cc:
45:2f:9e:52:78:26:63:13:fd:9c:3a:ab:c3:8c:f2:
07:87:17:7b:63:e9:99:d6:91:52:19:4a:71:c6:62:
c9:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:4B:DC:74:15:11:67:72:60:54:1C:BF:2C:ED:34:43:3F:28:D9:F3
X509v3 Authority Key Identifier:
keyid:B7:1D:8B:A4:00:B7:E4:BF:4C:4A:E1:BC:30:76:21:EC:23:47:E6:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tx2LpAC35L9MSuG8MHYh7CNH5t4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5cc6e1-fe5f-4803-95f2-9f614074da2d/1/g0vcdBURZ3JgVBy_LO00Qz8o2fM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5cc6e1-fe5f-4803-95f2-9f614074da2d/1/tx2LpAC35L9MSuG8MHYh7CNH5t4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:964::/48
2001:678:974::/48
2001:678:97c::/48
2001:678:a00::/48
2001:67c:1250::/48
Signature Algorithm: sha256WithRSAEncryption
76:3d:6d:a2:45:c1:c3:33:a0:f5:32:bc:c0:9d:96:7f:a1:da:
f9:e4:1c:d7:b1:d3:c6:d4:f2:68:53:4b:64:b9:ab:6d:95:f3:
88:76:a6:e2:d9:5c:c7:da:14:35:95:ec:6e:f4:8d:31:d9:20:
20:fa:7a:22:74:1a:a8:7d:ac:81:ad:57:73:64:09:b5:03:54:
dd:a8:36:92:ac:1f:c0:73:24:71:83:9f:d9:07:2a:1e:61:a4:
99:3c:ff:0d:7c:fe:31:13:28:92:87:dc:a2:7d:cd:e7:af:f7:
02:85:c4:7d:45:18:95:a6:43:bd:33:d3:db:92:16:2d:9c:34:
d3:f2:72:24:41:92:8e:9d:08:b3:5e:36:3a:df:8c:74:28:2e:
9e:38:26:30:f3:e1:9d:cf:6c:81:74:66:34:26:fd:d7:28:ef:
43:6a:d7:27:2d:b0:bb:a5:fb:f8:c5:d8:75:7b:8d:55:f7:4e:
12:1a:39:8e:0a:1a:6c:2f:d1:ab:12:33:aa:54:69:97:63:7e:
78:d4:b8:be:3f:ac:86:e2:80:f5:41:81:ab:af:74:a5:5c:bd:
3e:81:50:e9:1f:ef:d1:5b:60:e6:57:95:3a:a3:ba:dd:a7:a5:
0b:8f:5f:1c:86:cc:37:45:6f:97:80:96:af:73:1b:ca:67:da:
1a:d0:49:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:56 2023 by rpki-client on console.sobornost.net