Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/2280bCSS__XbZrBBBnW1qmFhnWY.roa
File: 2280bCSS__XbZrBBBnW1qmFhnWY.roa (raw, json)
Hash identifier: vOgfZYb1AcqLjRjKhGsyGCkuGUzKlJh3Z44NdoG0nEw=
Subject key identifier: DB:6F:34:6C:24:92:FF:F5:DB:66:B0:41:06:75:B5:AA:61:61:9D:66
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 1ABCC883
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/2280bCSS__XbZrBBBnW1qmFhnWY.roa
Signing time: Fri 10 Jun 2022 18:29:21 +0000
ROA not before: Fri 10 Jun 2022 18:29:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 137425
IP address blocks: 2a06:a005:4d8::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 448579715 (0x1abcc883)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jun 10 18:29:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=db6f346c2492fff5db66b0410675b5aa61619d66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:19:5c:0d:9f:7a:84:79:d3:83:f2:fd:f3:4e:
ef:26:20:f2:d9:1e:92:88:58:80:1a:35:4e:71:9b:
8a:f2:98:60:65:8b:2a:b9:f1:3e:99:18:b7:53:f4:
b9:c1:51:2b:73:7e:a5:42:10:38:33:bc:94:53:42:
d1:b1:e3:da:45:7c:54:94:9a:07:0d:1f:84:59:e0:
cd:ec:4a:21:49:00:31:43:89:05:66:f2:31:64:23:
87:fd:b2:a6:3d:5e:08:f7:4b:4b:43:55:a9:98:dc:
46:02:62:dc:57:da:a5:64:b9:5b:f5:28:71:73:3a:
54:33:51:1c:e0:ad:b2:9e:65:bb:26:fa:5b:1f:4f:
a4:8d:47:ae:c4:5a:8b:7e:56:85:ab:a9:e3:63:83:
e6:2f:e0:1c:a1:12:20:0a:c5:df:c1:41:ac:44:e6:
db:88:14:be:4a:a5:ba:b0:94:c1:7c:83:1f:19:12:
6e:aa:03:0b:84:d6:80:72:99:6d:25:25:a4:2c:4f:
a3:d4:b6:1e:08:1b:44:fb:f8:70:6e:92:b5:95:17:
79:de:b1:97:b6:d0:59:a2:13:dc:59:d0:49:cc:02:
71:43:38:13:ef:77:90:76:51:f6:14:aa:66:0d:71:
7f:61:29:0f:95:9c:df:98:32:a8:9c:b9:50:54:2d:
50:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:6F:34:6C:24:92:FF:F5:DB:66:B0:41:06:75:B5:AA:61:61:9D:66
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/2280bCSS__XbZrBBBnW1qmFhnWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:4d8::/48
Signature Algorithm: sha256WithRSAEncryption
7b:5d:bb:44:b7:bf:ca:ba:ce:0a:44:4d:1d:84:3a:6f:29:5f:
98:c6:45:38:04:48:d1:01:c4:70:97:0f:33:96:e7:b7:8b:db:
f1:f5:c3:e0:96:a2:7b:22:ab:eb:f1:87:dd:a8:76:a3:cd:33:
82:38:3d:b2:05:eb:cb:57:e3:ff:ba:9e:12:cf:89:c1:b8:d5:
ec:b1:af:b9:3c:c9:75:42:fa:11:70:f0:50:7f:b1:56:f4:6e:
d7:62:9d:ff:3f:68:67:d7:48:5c:8f:1f:05:94:54:d8:7c:f3:
a8:7e:12:2f:30:1b:40:45:04:22:80:56:6b:32:89:e3:b4:46:
7b:a0:e7:25:d4:45:58:b4:00:72:55:bd:9b:7c:b0:2e:e3:93:
e6:67:1a:47:98:21:86:44:81:d5:35:32:de:35:72:b1:92:4c:
29:55:0a:64:8c:bd:d4:66:82:a3:b1:3e:8e:ea:15:15:c2:39:
f7:f8:c7:36:81:09:52:e3:28:9e:58:b0:ba:3f:1a:b6:df:02:
8c:45:ad:93:a4:4c:a0:b7:8f:a5:05:f8:76:03:87:e8:8d:4f:
c2:b6:89:81:08:da:74:6e:54:90:1f:da:91:9e:ef:bb:71:a8:
e2:7f:4b:a8:0a:8d:fa:21:58:42:62:d1:65:d6:0a:70:f3:01:
3f:3a:0e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:03:34 2025 by rpki-client