Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/19dU-h5vjWTVACYeOnuy99epHqA.roa
File: 19dU-h5vjWTVACYeOnuy99epHqA.roa (raw, json)
Hash identifier: rZiFhapRv7LQAQsKZPaaWfEcW8Rum/dyzZSkBTNGceg=
Subject key identifier: D7:D7:54:FA:1E:6F:8D:64:D5:00:26:1E:3A:7B:B2:F7:D7:A9:1E:A0
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 1AF5C837
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/19dU-h5vjWTVACYeOnuy99epHqA.roa
Signing time: Fri 17 Jun 2022 02:37:45 +0000
ROA not before: Fri 17 Jun 2022 02:37:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 140731
IP address blocks: 2a06:a005:d40::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 452315191 (0x1af5c837)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jun 17 02:37:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d7d754fa1e6f8d64d500261e3a7bb2f7d7a91ea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:96:fe:28:10:45:b0:14:f6:9e:48:66:99:80:
19:ae:3a:31:7b:ed:81:f5:11:0a:94:9e:a7:58:3c:
2e:96:2d:4b:8b:1e:57:a7:b7:d1:80:3f:23:a6:59:
ee:82:ed:07:31:b8:e1:c5:84:96:aa:57:f7:f4:89:
98:7c:d9:38:39:d6:56:19:55:d4:dd:b3:ee:bd:28:
3f:8a:36:cc:74:64:89:72:9d:a1:34:6e:6c:1b:9f:
1e:a4:56:e6:b1:95:f2:cf:8d:a8:c2:5e:ad:cf:f4:
6b:04:f8:07:c4:6f:d1:cc:0d:c3:a7:8e:d1:87:8d:
2c:93:2b:46:a1:21:d1:8b:80:dd:f5:70:6b:28:3e:
d6:a7:81:70:fe:59:73:4c:8a:77:e5:3c:3d:46:26:
d9:10:cd:b2:60:1e:7f:8a:b0:a2:94:69:f2:6b:63:
6f:49:d2:70:55:c8:da:a5:67:b9:53:d8:ac:09:09:
53:85:ef:f5:6e:97:32:1a:f8:58:de:f7:95:0d:50:
6a:0a:9a:3e:0d:06:52:9f:24:33:2e:a7:8b:b3:48:
d5:93:f6:58:5d:6a:94:86:5f:44:af:1a:ca:3b:56:
6a:52:3f:0b:61:08:fe:9a:a4:5b:0d:9c:65:e1:46:
f7:a4:8e:ff:50:ff:a5:ad:15:2d:21:dc:d3:df:bb:
db:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:D7:54:FA:1E:6F:8D:64:D5:00:26:1E:3A:7B:B2:F7:D7:A9:1E:A0
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/19dU-h5vjWTVACYeOnuy99epHqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:d40::/44
Signature Algorithm: sha256WithRSAEncryption
90:12:23:65:76:ed:8a:30:d8:5a:60:75:a9:d1:0c:ab:40:55:
21:9b:60:b3:f8:aa:d9:0e:c1:11:b3:2c:5d:48:02:d9:a3:72:
66:ee:9b:ae:2c:2d:67:e3:3e:0c:47:87:fd:bc:cb:88:e6:4b:
ce:54:36:05:8b:7d:bd:da:e7:ad:5a:ec:0e:15:8b:b3:c7:34:
99:b0:1c:18:40:e8:85:2c:b4:58:bd:4b:bb:e3:55:d4:61:c2:
d3:3e:86:2f:6e:fb:19:eb:d4:9f:6c:fa:ae:ea:39:44:9f:bb:
a5:02:ae:f8:44:e3:73:e4:45:51:4c:5d:28:c5:08:82:08:77:
5f:ea:5b:24:af:df:aa:36:99:9c:e7:68:dc:98:54:8c:76:9d:
c0:72:cb:6f:37:89:2a:04:c9:16:a2:c6:d9:fb:a6:d3:59:55:
a4:7c:9b:16:98:d8:ff:cf:a3:9f:bd:be:6e:da:65:f9:bf:87:
a6:01:b9:19:e3:af:c3:93:d3:71:ab:d7:82:b9:f8:23:76:e1:
24:a6:7e:ae:dd:d3:08:29:71:f0:dd:c9:4d:04:44:00:d7:2a:
1c:73:67:59:b7:81:2d:56:af:0c:cc:fd:84:d2:5a:8a:59:63:
cd:d0:e1:fb:7e:af:98:e5:ab:21:52:0c:98:44:00:e2:b0:13:
1d:78:c9:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:27:16 2025 by rpki-client