Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/1_X26GK0w-l3iYBGsr6gMzsmrPc.roa
File: 1_X26GK0w-l3iYBGsr6gMzsmrPc.roa (raw, json)
Hash identifier: sYZ9e+Uj/ZoFtcw0N9nSiF9/7SYzRmDf5iqpwpWFgtI=
Subject key identifier: D7:F5:F6:E8:62:B4:C3:E9:77:89:80:46:B2:BE:A0:33:3B:26:AC:F7
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 15B6F3D9
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/1_X26GK0w-l3iYBGsr6gMzsmrPc.roa
Signing time: Sat 01 Jan 2022 05:59:03 +0000
ROA not before: Sat 01 Jan 2022 05:59:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 135610
IP address blocks: 2a0a:6040::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 364311513 (0x15b6f3d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jan 1 05:59:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d7f5f6e862b4c3e977898046b2bea0333b26acf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7b:26:c5:9e:c8:5e:b8:e6:6e:00:39:3f:d2:
06:c1:54:dc:19:79:5b:b9:8e:f9:fc:43:2b:35:6d:
84:0b:1f:e0:a3:98:e4:c2:4c:f7:39:4f:89:ef:dd:
32:90:a2:ea:c8:e8:9d:81:d0:24:69:bb:5d:dc:cb:
c0:7d:59:4e:95:f3:be:9a:87:6b:4e:94:df:cc:70:
66:45:a0:14:26:c6:3a:5e:09:e3:91:31:33:3e:26:
1f:75:1c:13:de:cf:77:9e:37:ad:75:31:02:2b:b5:
3a:dd:a0:30:21:35:30:e2:41:f9:aa:0a:76:f6:c0:
e4:10:92:70:dc:9f:39:4f:21:10:12:c6:50:b9:f6:
7f:fb:c5:85:ff:8c:2a:4f:b2:43:de:59:3d:a4:75:
3a:1b:3a:88:63:c8:91:27:73:0b:08:af:d4:18:f6:
42:46:48:25:26:25:62:69:68:94:7f:e8:2a:ad:44:
e0:bd:a4:e6:85:03:1b:7e:be:0b:80:93:10:25:50:
c4:dc:c8:a4:d6:cc:1d:36:a6:51:59:34:c9:fa:de:
d9:fd:24:f6:a8:98:2d:03:83:2b:98:90:f8:56:a9:
4d:5b:be:33:a8:37:a6:6a:61:d0:a7:ca:47:74:c3:
d7:51:cd:ab:76:99:0f:a6:06:fa:1b:16:91:73:87:
e2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:F5:F6:E8:62:B4:C3:E9:77:89:80:46:B2:BE:A0:33:3B:26:AC:F7
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/1_X26GK0w-l3iYBGsr6gMzsmrPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040::/32
Signature Algorithm: sha256WithRSAEncryption
01:b5:15:b8:2e:77:73:21:53:ae:c9:90:60:21:48:72:4d:2f:
2f:6d:dc:8c:cf:d6:99:0d:b2:35:9d:2c:37:e7:e3:eb:3d:e6:
75:82:f3:d7:c1:09:37:93:89:59:23:f8:c4:5c:0c:c5:87:29:
3c:e9:6f:b2:44:b1:af:72:5e:75:d5:78:6e:9e:9f:e4:42:08:
a4:c2:46:97:2c:85:8c:68:87:a3:65:52:5c:c6:ef:8e:fa:5a:
fc:73:72:e7:12:eb:1b:22:59:c9:0b:9a:5f:d9:7e:33:b6:63:
61:5a:e5:92:60:4a:47:3b:92:ef:a9:cc:e2:a5:31:58:ad:15:
3c:8f:32:7e:b7:ab:42:fe:8c:0c:0f:15:b9:a9:fd:1b:de:5b:
95:3f:e4:6a:38:c0:45:4c:41:96:46:6b:9c:1c:b9:ba:7e:de:
30:75:e7:c1:ca:9f:d0:1d:70:fd:04:e9:b1:7d:10:8a:0a:fb:
ae:8e:37:f4:22:bb:d4:d7:b4:0d:81:27:a0:23:e1:c7:c3:2d:
90:56:48:7f:91:bb:b4:59:c8:99:3c:6a:c7:36:30:ff:64:63:
c4:71:ed:0d:22:3d:d1:39:3e:e0:d2:2b:15:fd:3e:89:a5:0d:
c6:2f:c4:7a:59:c6:fd:b6:c8:82:38:80:16:0e:4a:01:ef:03:
05:2d:84:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:21:16 2025 by rpki-client