Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/1fvYm203DEC69fJY6igpCfCAphY.roa
File: 1fvYm203DEC69fJY6igpCfCAphY.roa (raw, json)
Hash identifier: oMGSK+5Bu98oJ2cnK4+JHgd5inJFqeexPPtC1dIMG4M=
Subject key identifier: D5:FB:D8:9B:6D:37:0C:40:BA:F5:F2:58:EA:28:29:09:F0:80:A6:16
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0182DA6DE069BA3C8249D75C52E9E608F3E0
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/1fvYm203DEC69fJY6igpCfCAphY.roa
Signing time: Fri 26 Aug 2022 13:53:30 +0000
ROA not before: Fri 26 Aug 2022 13:53:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211514
IP address blocks: 2a06:a005:484::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:da:6d:e0:69:ba:3c:82:49:d7:5c:52:e9:e6:08:f3:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Aug 26 13:53:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d5fbd89b6d370c40baf5f258ea282909f080a616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3d:86:9f:8f:11:c3:f7:23:5f:e5:ae:89:1c:
c0:f1:c0:36:b8:73:6d:3c:79:83:0d:ea:3b:b8:56:
90:f2:31:98:f1:5a:49:81:d2:43:39:bb:3a:1c:cb:
e7:cb:fc:e2:25:d8:58:36:5d:3c:11:8d:41:97:42:
14:cf:bb:f3:8b:01:bd:fe:5a:bd:9f:60:29:77:a8:
8b:9e:8e:14:12:a2:fb:86:ad:ae:b6:25:19:8d:41:
78:d2:fc:00:8f:f4:58:07:32:97:53:10:c9:9a:94:
36:8a:e7:88:5d:f0:fb:00:fe:9d:45:29:1f:eb:77:
79:8c:36:f0:f2:6c:b5:96:6c:44:c8:f9:3e:ce:2d:
7c:73:21:67:81:ee:fe:c5:95:fd:c3:2f:83:8a:cb:
55:d0:43:f9:5a:ca:ef:21:61:1b:72:33:f2:53:7e:
2e:3c:d4:c9:76:53:6b:55:dc:4e:39:df:0e:a3:39:
6e:e0:c3:af:c7:5e:0f:18:9d:ae:83:c8:54:f5:de:
c0:b8:60:0d:13:8f:33:7f:bc:40:ce:65:5b:db:5c:
59:81:3c:85:66:e8:15:5e:5f:b1:46:55:21:f8:48:
85:00:f0:98:25:9b:05:0e:0a:8c:bf:f1:b2:34:38:
ee:c0:f9:75:4d:56:02:ae:a8:e1:57:56:a9:84:b8:
f6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:FB:D8:9B:6D:37:0C:40:BA:F5:F2:58:EA:28:29:09:F0:80:A6:16
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/1fvYm203DEC69fJY6igpCfCAphY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:484::/48
Signature Algorithm: sha256WithRSAEncryption
97:89:b4:e6:c8:95:4e:30:fd:92:74:0c:ba:f0:58:06:d9:81:
e5:ee:cd:b4:dc:82:d0:c8:23:3e:31:b6:71:72:18:7b:9b:d3:
5f:c3:a3:d6:2c:7e:5f:cb:07:38:5f:0b:c1:20:dd:cb:f4:ca:
42:44:97:da:91:a0:3d:58:d3:7e:1b:b9:80:d8:ad:5a:d0:41:
32:10:fd:2d:7f:de:fe:97:13:cf:f9:9f:31:ea:eb:84:8a:ab:
a4:af:72:2c:af:99:09:51:78:89:0f:4c:30:e0:f7:30:80:b8:
a9:88:42:9a:d5:6b:b5:8c:38:8a:23:bb:64:64:0e:23:0b:01:
92:c3:f7:66:4f:87:ce:e6:46:c9:46:50:c9:b1:7a:0d:14:aa:
65:f8:fe:3d:84:63:30:f9:75:17:18:1a:fd:28:f5:e7:3c:8b:
57:47:84:fc:b3:0a:53:36:63:99:fd:9c:e3:7c:c9:99:6b:13:
c0:36:00:62:d6:ea:0c:d4:c9:26:55:38:83:ab:16:e9:12:7a:
69:a5:42:6e:d8:81:77:fb:7f:6e:83:48:70:3b:54:57:fe:1e:
c9:5e:77:c2:84:06:d4:d4:22:f3:79:f6:48:5e:61:1f:c9:6b:
f2:eb:7e:b5:c8:0a:d8:bf:fb:6b:55:93:23:23:93:bf:37:a4:
b7:79:da:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 09:58:18 2025 by rpki-client