Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/1_bvBxB8_Jnv58F1mubjr97ihlc.roa
File: 1_bvBxB8_Jnv58F1mubjr97ihlc.roa (raw, json)
Hash identifier: /3BWyIiIOGrZUUDOLeC0wUrmyNW1YwF3kGzpHK9Iqkc=
Subject key identifier: D7:F6:EF:07:10:7C:FC:99:EF:E7:C1:75:9A:E6:E3:AF:DE:E2:86:57
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0184E8D93B4A6146BD3669B8E9F65975442E
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/1_bvBxB8_Jnv58F1mubjr97ihlc.roa
Signing time: Tue 06 Dec 2022 19:11:01 +0000
ROA not before: Tue 06 Dec 2022 19:11:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50546
IP address blocks: 2a06:a005:2560::/44 maxlen: 48
2a06:a005:e30::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e8:d9:3b:4a:61:46:bd:36:69:b8:e9:f6:59:75:44:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Dec 6 19:11:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d7f6ef07107cfc99efe7c1759ae6e3afdee28657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a8:b3:46:06:de:1c:d7:76:6e:fa:d6:6a:97:
e7:9d:ed:0d:5e:f9:08:b4:06:5f:4e:3d:e3:11:ff:
af:a1:a9:bf:ee:e0:2f:37:94:c5:d5:52:16:d9:e3:
c1:fa:fa:c2:dd:ab:71:f7:51:0b:08:46:2c:33:ce:
c2:16:de:c0:45:3a:d4:df:a9:4c:da:66:ec:1c:96:
3b:71:76:ad:5e:cc:9d:c9:b6:b0:76:0b:31:7b:90:
ee:d5:b6:f7:ae:25:2e:29:26:94:c7:dd:25:30:53:
7c:ad:38:94:4e:cd:51:ff:8b:4a:ad:16:bb:ab:98:
03:8e:43:7d:a3:c8:c9:85:cd:c9:dc:66:e1:27:75:
72:34:aa:a7:41:19:34:df:f8:5e:7c:b8:bb:8b:72:
ac:39:79:63:98:df:d6:7e:bd:20:fb:3f:db:3a:b4:
69:11:93:6c:7a:b3:eb:b8:57:d3:37:4c:f2:e1:50:
e9:f9:02:3d:38:56:6f:23:bb:91:e9:af:4f:17:50:
7c:6a:e9:b4:49:f4:89:e6:4b:2a:c7:7c:e0:91:48:
a2:4b:4b:4b:f2:62:a4:6c:12:d2:7a:c5:1e:9e:35:
3b:ee:34:68:ea:62:c1:93:04:8f:b7:fa:3a:4a:93:
f6:2b:ed:87:5e:b4:ab:0c:4d:8d:45:b2:6e:27:66:
d3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:F6:EF:07:10:7C:FC:99:EF:E7:C1:75:9A:E6:E3:AF:DE:E2:86:57
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/1_bvBxB8_Jnv58F1mubjr97ihlc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:e30::/44
2a06:a005:2560::/44
Signature Algorithm: sha256WithRSAEncryption
80:28:b4:1f:ef:13:90:97:23:e6:92:3a:84:83:da:46:13:a6:
46:8a:93:b5:4a:68:45:ca:ed:f3:89:cb:17:d8:9e:fe:c3:3f:
e3:a8:3d:01:40:c4:b8:e1:7b:4f:27:70:0e:0a:bf:d4:1a:3c:
b3:73:e8:97:df:b6:a6:c5:0e:51:8d:01:c6:fb:82:53:ec:d5:
53:00:bd:b0:b0:8b:1b:d3:c4:f2:7b:dc:2e:1c:c8:97:9d:e1:
fe:c4:08:ba:db:af:6d:4d:1a:2d:68:23:a9:68:d0:0f:39:35:
16:7f:c8:11:36:a6:56:81:09:b0:5b:ab:df:ff:13:27:66:e0:
1d:e6:24:32:91:0f:86:b2:58:ba:78:44:ec:ab:7d:c9:e9:7b:
98:d6:7e:8c:52:2e:fa:fd:5d:a7:d7:af:b0:fc:8f:7e:a5:8e:
de:d3:62:9e:54:0a:60:e8:30:89:44:21:f4:0b:4f:c5:42:be:
af:0b:b8:59:ed:b9:4b:1c:64:2e:fe:fa:3a:10:69:b6:50:c2:
6b:0f:4e:80:df:6a:d3:70:f1:2b:ec:13:df:d1:9f:14:ed:7d:
09:5d:92:4c:a8:69:a2:36:ea:ae:5b:69:47:7b:b6:8e:5e:d0:
d9:e0:bf:65:8a:ec:47:56:0e:5c:1d:22:e1:87:bb:13:9d:95:
ef:b4:92:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:52:36 2025 by rpki-client