Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/3EfT4W26NUUPgGq9lH-of_tfwG8.roa
File: 3EfT4W26NUUPgGq9lH-of_tfwG8.roa (raw, json)
Hash identifier: 8P6i03o7LXipevTYeEObp7/smk5IeNrTBc0uTjA/yXo=
Subject key identifier: DC:47:D3:E1:6D:BA:35:45:0F:80:6A:BD:94:7F:A8:7F:FB:5F:C0:6F
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 1B8EC136
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/3EfT4W26NUUPgGq9lH-of_tfwG8.roa
Signing time: Wed 29 Jun 2022 10:20:10 +0000
ROA not before: Wed 29 Jun 2022 10:20:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 136591
IP address blocks: 2a06:a005:fe0::/44 maxlen: 48
2a06:a005:ff0::/44 maxlen: 48
2a06:a005:fd0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 462340406 (0x1b8ec136)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jun 29 10:20:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dc47d3e16dba35450f806abd947fa87ffb5fc06f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:43:93:c5:e8:48:33:57:30:83:b4:c3:18:a7:
00:96:60:76:29:67:a1:01:4f:0d:94:4b:73:35:93:
42:32:a1:70:db:6c:55:26:0b:4c:69:0a:55:7e:34:
9c:c8:8f:4d:00:d5:ad:a2:69:fd:e0:f6:5d:54:c4:
f1:87:c0:1f:37:6f:bc:8e:93:37:4e:7d:6d:24:5b:
7d:eb:d4:b8:5c:d3:71:d1:b2:43:56:ab:33:1e:fc:
66:42:d6:1d:e5:24:4c:9b:db:2d:24:39:e8:aa:07:
fc:de:5c:d7:a9:b7:33:10:54:6a:06:5f:48:db:77:
85:36:25:53:c8:c9:59:0a:e8:27:8d:ec:54:e9:53:
98:ba:53:1c:d4:34:65:00:7d:a3:81:f3:f2:8f:b3:
b1:56:72:c7:ee:7a:9d:09:ce:15:e3:4f:83:e3:88:
d9:64:96:b5:ba:e5:83:53:c7:f1:0c:3c:77:c5:53:
f9:3f:18:b3:71:f8:03:17:68:3b:a6:ae:b4:1f:95:
ae:8a:62:35:7d:0b:e9:74:e3:e8:ba:52:fd:aa:1d:
ba:65:79:52:d8:21:ef:f9:32:a7:eb:fc:24:ae:e1:
48:eb:45:41:96:20:ac:3e:c5:43:c9:d3:57:e5:34:
fe:8b:a2:5e:54:1f:9f:0f:38:8b:ab:9e:34:23:9a:
16:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:47:D3:E1:6D:BA:35:45:0F:80:6A:BD:94:7F:A8:7F:FB:5F:C0:6F
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/3EfT4W26NUUPgGq9lH-of_tfwG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:fd0::-2a06:a005:fff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
37:33:46:4e:ee:8a:12:eb:9c:13:0e:f8:bd:41:6a:84:3d:cb:
59:40:e6:ee:8b:62:3b:6f:7e:d7:0d:89:b2:b6:0b:8d:54:c4:
4d:9c:79:0a:92:36:f2:a0:5f:63:3f:ea:2f:a6:5a:0f:bd:a7:
3e:6b:94:1d:1d:c8:60:83:ce:81:3a:7c:27:eb:e7:1a:20:fc:
e2:88:02:7e:bf:c4:4d:e2:86:7c:60:80:22:b3:a1:63:58:64:
27:94:7f:2f:a0:7e:de:98:32:98:36:b9:d0:c7:e9:53:4e:3e:
71:12:42:d3:7e:6b:66:4b:01:93:9b:f7:b2:db:54:0e:41:a8:
a8:74:40:f1:e9:0e:16:0a:4b:62:19:e0:6f:b9:e7:98:bb:2e:
4c:a4:44:3b:a2:0b:29:b2:c2:71:01:7c:a0:2e:b5:d5:64:01:
89:59:d8:01:15:60:0f:a7:2d:97:94:69:08:4c:38:aa:98:97:
6a:ea:45:b8:af:b5:60:a0:00:dc:1a:92:a1:a9:e7:21:51:b0:
2b:f5:84:49:11:b5:f9:b2:33:45:90:f6:1d:4b:65:8c:b1:23:
45:42:3e:28:4d:50:14:ee:0f:72:8f:b5:6b:d5:4d:1f:b4:70:
be:1b:4f:7c:4e:93:63:a3:d0:03:12:95:c3:d2:da:1d:da:af:
3b:51:55:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:09:38 2025 by rpki-client