Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/22E5loi_3zGKasJwIBzG8VMu1QA.roa
File: 22E5loi_3zGKasJwIBzG8VMu1QA.roa (raw, json)
Hash identifier: BjvAKEFS1GAYT2x5FYCJytQGOFPtCpT46TXn1tGU6eQ=
Subject key identifier: DB:61:39:96:88:BF:DF:31:8A:6A:C2:70:20:1C:C6:F1:53:2E:D5:00
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 1BAB4E62
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/22E5loi_3zGKasJwIBzG8VMu1QA.roa
Signing time: Sat 02 Jul 2022 02:01:26 +0000
ROA not before: Sat 02 Jul 2022 02:01:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 395332
IP address blocks: 2a06:a005:5f9::/48 maxlen: 48
2a06:a005:5e1::/48 maxlen: 48
2a06:a005:c80::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 464211554 (0x1bab4e62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jul 2 02:01:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=db61399688bfdf318a6ac270201cc6f1532ed500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:15:de:78:9e:34:47:83:37:e7:3a:59:c8:d7:
5f:6c:0a:51:41:31:cd:d5:cb:39:12:d5:7d:d0:b6:
52:47:6b:2f:2a:f8:d4:33:65:cb:ca:a2:38:53:22:
82:ab:d1:07:3f:d2:2a:8a:cc:fe:c0:d7:4d:05:1f:
09:dc:e4:57:fb:9b:4e:5f:78:84:e4:97:ef:fd:ae:
33:e6:96:bd:31:bd:2f:20:a4:38:e5:50:37:a7:57:
d6:01:71:ac:99:47:2b:8f:83:2f:4e:f2:e6:b8:f8:
67:9c:b6:06:17:c6:d7:af:45:6a:31:fc:82:fe:fb:
31:15:0d:e1:1d:31:51:cf:3f:7a:77:e9:a1:a0:5e:
08:a9:41:a7:be:20:1e:ce:79:c8:9a:ff:05:9a:a4:
90:85:63:73:46:3e:65:69:e7:5c:20:58:1f:56:32:
3d:71:f3:fa:52:c0:60:76:df:3b:f9:93:fc:b0:33:
76:11:38:70:3c:d8:6f:57:ae:74:f8:bd:9d:15:3a:
a4:4e:49:f2:df:82:cf:6a:8b:ce:2c:52:8a:59:16:
1d:47:75:0a:d0:fa:22:5d:fa:dd:10:7e:1d:4a:65:
e0:65:86:51:94:8b:2d:2f:f3:cf:2a:86:24:f5:ff:
bb:21:dc:81:55:c9:27:4e:06:97:cf:99:c5:67:94:
cf:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:61:39:96:88:BF:DF:31:8A:6A:C2:70:20:1C:C6:F1:53:2E:D5:00
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/22E5loi_3zGKasJwIBzG8VMu1QA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5e1::/48
2a06:a005:5f9::/48
2a06:a005:c80::/44
Signature Algorithm: sha256WithRSAEncryption
3e:75:3b:1c:47:53:50:3d:9f:f7:d0:67:cd:46:44:4c:3e:b5:
b0:92:c0:3a:f7:7c:49:d1:79:93:12:51:e7:89:a6:3b:5d:a1:
1a:3e:0e:4b:72:e9:ca:f4:83:9d:18:19:ed:0a:a9:e2:40:ac:
4c:1a:25:bc:66:b2:5b:c6:18:4f:a6:8b:75:d4:26:80:b3:84:
26:ff:e2:7f:2c:b3:71:47:5e:6f:18:59:92:cd:a8:9e:f3:f0:
f8:f5:5f:82:0e:98:78:f3:60:96:13:6c:04:7f:90:46:38:68:
d3:c8:19:54:c8:01:a1:3b:57:b7:59:24:17:44:cd:43:cc:be:
c5:56:eb:7c:02:f1:6b:f4:4d:ff:e7:b8:e8:c8:74:71:c1:90:
b4:f0:b6:ec:d6:5f:ff:7d:9e:b5:0e:0d:fc:28:30:59:03:3c:
b3:31:75:1d:07:27:bb:43:49:28:42:ba:c6:45:92:c9:e1:dd:
97:3d:e6:0c:0c:34:2c:0f:c7:3f:89:a0:aa:85:ec:02:cf:46:
5a:e8:d2:26:26:c7:5a:8a:2e:a0:1d:3e:1e:cc:58:07:09:f9:
d5:f9:e4:a8:0a:ee:63:5e:9c:cb:36:0a:19:ff:35:f9:eb:29:
6c:6c:ad:ab:44:60:46:83:90:c0:37:a7:bd:47:5f:ea:af:33:
16:37:f3:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:10:47 2025 by rpki-client