Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/1N4weUGPT1VEgBbSJcjgClajTSo.roa
File: 1N4weUGPT1VEgBbSJcjgClajTSo.roa (raw, json)
Hash identifier: WghgPqA8R+TyRDYfuRwys8VQB9zktZ0TRPED7VLKpOQ=
Subject key identifier: D4:DE:30:79:41:8F:4F:55:44:80:16:D2:25:C8:E0:0A:56:A3:4D:2A
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 15BE6055
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/1N4weUGPT1VEgBbSJcjgClajTSo.roa
Signing time: Sat 01 Jan 2022 05:59:07 +0000
ROA not before: Sat 01 Jan 2022 05:59:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207466
IP address blocks: 2a06:a001:a080::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 364798037 (0x15be6055)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jan 1 05:59:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d4de3079418f4f55448016d225c8e00a56a34d2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:68:1f:df:b2:e7:72:e3:22:cd:e5:4d:ca:c3:
dd:6a:62:ae:6e:71:c9:81:cd:56:dc:86:00:fb:62:
11:00:45:36:79:54:df:e9:c0:7b:ec:09:7e:a2:66:
88:ee:83:ca:1f:6c:1f:28:f3:23:fc:0e:a9:e6:14:
bc:8e:64:49:0f:92:1d:b1:1e:99:da:1a:11:ad:8a:
ac:ee:d4:17:49:3f:8e:7c:53:79:c6:f2:64:b1:ec:
ec:e4:c9:3d:88:e6:53:d4:9a:aa:16:ed:29:45:da:
be:61:36:21:f5:fb:3c:94:ad:2b:32:92:1e:80:ff:
f3:af:99:a5:52:23:ae:ed:47:2e:01:85:6e:e3:ac:
0e:39:50:4f:a0:73:34:04:56:58:ee:b9:a2:0c:05:
ff:4b:6b:8e:6a:db:c7:bb:b2:84:50:9e:33:84:cd:
af:3d:fd:56:7d:c9:67:0f:ce:f2:8b:c0:34:f9:f9:
85:3e:6e:8f:88:00:82:01:32:d3:17:2e:50:70:c2:
b8:68:16:35:29:7b:b8:b4:06:ea:12:17:00:bf:b4:
8c:a3:22:42:22:a9:d7:3b:42:6d:7c:7c:8d:11:87:
a1:2a:9c:31:ee:e4:15:c3:85:2a:a6:08:c1:f2:ea:
84:5d:58:9e:7a:2b:36:c9:07:6a:34:ee:93:a2:59:
11:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:DE:30:79:41:8F:4F:55:44:80:16:D2:25:C8:E0:0A:56:A3:4D:2A
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/1N4weUGPT1VEgBbSJcjgClajTSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a001:a080::/44
Signature Algorithm: sha256WithRSAEncryption
6b:a0:f1:84:3a:bf:40:ac:1c:89:73:e3:b9:3f:6e:a6:cb:e3:
b5:6f:bb:4f:8e:d3:5b:f9:bd:c0:f6:ab:91:82:ef:5c:1e:9c:
ae:1c:25:fc:bb:31:ec:c4:90:25:b3:67:6d:2f:02:b3:87:ab:
36:9f:87:63:59:52:4f:c1:ef:f8:24:14:12:ba:3f:98:88:58:
bd:12:04:f6:6e:ef:e2:d9:bd:e7:b5:57:f0:9c:dd:35:4e:2e:
1d:1e:a8:14:03:d8:a8:f5:45:93:4e:4c:c6:64:af:58:57:08:
9b:2e:e6:3e:f6:91:c1:81:12:ea:72:f9:50:bc:9c:6d:8a:93:
19:70:a9:e6:bd:e5:c4:13:7a:35:d1:1e:ce:26:c0:2d:55:35:
87:a2:c0:36:5f:0a:0b:06:52:13:59:6e:56:f6:70:4b:69:2a:
cf:b6:35:33:5e:b5:d1:33:6f:a4:e6:ae:76:00:38:f2:05:b1:
5c:d1:48:40:6d:cd:73:89:a4:aa:33:7d:d4:16:0d:7b:28:2a:
da:09:23:ed:95:03:55:13:24:40:ac:e2:a4:2c:23:f4:83:07:
5d:15:bb:b9:98:9e:5a:aa:36:2f:39:06:21:ad:c5:25:d0:92:
3c:fe:40:c2:f3:64:14:10:5b:ca:fd:a4:50:3d:35:bf:4b:f9:
dd:f5:95:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:11:02 2025 by rpki-client