Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/03XOR51bzGL01Mab1R8XACqAIHc.roa
File: 03XOR51bzGL01Mab1R8XACqAIHc.roa (raw, json)
Hash identifier: eqEK18oCNUq2jPAu7bM3CAz7P03DdGFM4hG04qliU2o=
Subject key identifier: D3:75:CE:47:9D:5B:CC:62:F4:D4:C6:9B:D5:1F:17:00:2A:80:20:77
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 1826ACE2
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/03XOR51bzGL01Mab1R8XACqAIHc.roa
Signing time: Sat 16 Apr 2022 04:22:08 +0000
ROA not before: Sat 16 Apr 2022 04:22:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200681
IP address blocks: 2a06:a005:4a0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 405187810 (0x1826ace2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Apr 16 04:22:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d375ce479d5bcc62f4d4c69bd51f17002a802077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:61:55:05:c2:7a:de:ea:de:f9:41:c9:5a:11:
b5:f0:9b:21:ca:bf:e6:83:91:e5:37:9f:95:73:2d:
d9:bb:6c:2a:9d:19:a6:4a:f5:cb:41:ad:ef:08:01:
82:d6:46:9d:6a:3f:a9:33:70:06:8f:df:ed:da:0b:
da:5c:3c:be:e1:75:fb:4f:bb:1e:17:c8:fe:27:f6:
48:b5:53:82:f3:ce:10:01:9f:d6:c5:48:84:6b:02:
fa:99:41:0e:7b:f8:dc:95:4a:02:a5:86:ae:f0:85:
75:a6:b1:49:ba:8c:3a:36:9a:4c:86:92:75:81:02:
f4:b7:6f:eb:4e:1d:2f:37:dc:e8:c2:ed:da:6c:91:
44:c3:1c:a0:64:a3:f4:24:56:fb:85:a5:2d:88:24:
34:a9:c7:e5:d3:0e:c5:e8:5d:36:c2:3c:39:33:45:
c0:ab:7e:a7:6c:74:4e:63:6d:65:98:5e:8e:4f:99:
e9:f3:87:32:b3:8c:48:5c:bf:ac:03:53:9a:d0:f2:
e2:90:15:89:3f:b9:3f:9f:e5:50:9b:3e:5b:2d:69:
66:9c:7b:17:0e:eb:3b:6e:4c:6b:cc:80:5f:66:76:
8c:25:af:0e:b2:5c:20:12:aa:dc:22:61:ab:c0:39:
c6:e0:3b:51:9f:84:94:d3:71:fd:30:8d:7d:12:e9:
17:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:75:CE:47:9D:5B:CC:62:F4:D4:C6:9B:D5:1F:17:00:2A:80:20:77
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/03XOR51bzGL01Mab1R8XACqAIHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:4a0::/44
Signature Algorithm: sha256WithRSAEncryption
78:02:56:91:c0:6e:e6:86:0d:24:ea:ba:30:48:32:cd:3b:4c:
95:74:27:f7:c1:ce:df:c8:eb:67:ab:d6:1d:26:9e:1d:4e:1d:
53:37:5d:12:1f:2a:f3:28:44:09:1b:16:f8:18:a1:ed:b5:2b:
ac:37:62:ff:90:4e:8b:95:44:06:6c:55:5b:d0:cc:cb:b7:28:
80:68:5e:db:5d:cf:66:c6:67:7b:77:4c:90:17:01:da:ae:8c:
d0:a9:e7:38:5c:4f:1d:97:9a:fb:37:25:62:1d:43:ab:00:68:
52:ff:ae:fc:ee:f7:cc:ef:e0:83:53:71:08:b1:30:44:11:2b:
df:25:53:ea:1f:05:92:48:b7:a8:5a:f7:a7:db:52:e1:a8:c3:
0d:4e:96:03:2f:05:55:73:9f:99:4b:40:55:dc:72:f9:3f:1c:
2c:4d:b7:a5:c3:3e:03:b5:d5:16:5b:02:e6:4c:8e:9e:70:0d:
17:b0:7a:12:1c:95:88:0a:3a:78:b7:70:fb:71:a9:f6:50:bb:
0e:a6:b1:0b:fe:34:18:78:f7:56:d9:f9:a5:be:80:04:07:8d:
cd:c0:76:c6:0b:5f:9e:cf:35:0e:8d:b5:09:58:73:cf:16:0c:
25:41:6d:73:4f:2a:b4:c4:ca:b9:80:bb:26:40:4c:75:de:5b:
fd:03:df:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 09:59:27 2025 by rpki-client