Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/3K1lU78yRl5vMYvALlVf8YfkOzQ.roa
File: 3K1lU78yRl5vMYvALlVf8YfkOzQ.roa (raw, json)
Hash identifier: 6Xo/BDuRmjycq52FFfKSa6Palg18GHAWSSk2D9rRLsY=
Subject key identifier: DC:AD:65:53:BF:32:46:5E:6F:31:8B:C0:2E:55:5F:F1:87:E4:3B:34
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 1B86A658
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/3K1lU78yRl5vMYvALlVf8YfkOzQ.roa
Signing time: Tue 28 Jun 2022 23:19:47 +0000
ROA not before: Tue 28 Jun 2022 23:19:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204340
IP address blocks: 2a06:a005:5f4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 461809240 (0x1b86a658)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jun 28 23:19:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dcad6553bf32465e6f318bc02e555ff187e43b34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:37:e5:d1:2d:78:cc:b3:63:23:42:5e:16:d3:
6e:db:49:f4:d5:53:f4:7e:83:ff:d3:70:58:cc:25:
e4:85:40:64:ee:0d:9b:fc:9b:22:34:39:75:ce:d0:
7e:6e:a2:f6:a5:80:24:9d:5d:49:01:0b:aa:59:f7:
69:1d:ae:5b:83:cd:bb:67:80:23:2b:15:a2:90:22:
fb:d7:04:d1:74:46:21:0a:88:c8:25:33:ba:d6:52:
44:f2:dd:7b:2f:9e:c7:07:67:12:0d:17:a1:a0:a1:
3d:02:23:0c:b5:63:51:7b:55:36:7d:e5:a8:f5:04:
e1:8f:c7:f5:93:d1:3e:a6:d8:00:17:78:cb:87:29:
72:1c:b4:cb:2a:00:56:5e:40:fe:f3:8b:60:08:95:
ba:4e:dc:0d:ad:5a:66:a9:26:6d:8d:62:ba:83:e1:
5e:ca:fa:69:14:1f:cb:a3:7c:c1:c8:04:13:bf:49:
05:74:20:05:9f:e5:75:c7:c5:9f:5b:6b:51:68:c4:
41:c4:99:ac:6e:32:75:7b:52:7f:81:dc:7b:54:98:
6f:ba:8c:df:ca:2c:10:e3:94:93:76:6d:32:53:31:
71:2e:d9:76:04:96:23:1d:86:ae:f4:4e:58:31:7f:
85:50:ff:42:63:00:42:e8:37:4d:16:06:df:f3:f5:
9f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:AD:65:53:BF:32:46:5E:6F:31:8B:C0:2E:55:5F:F1:87:E4:3B:34
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/3K1lU78yRl5vMYvALlVf8YfkOzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5f4::/48
Signature Algorithm: sha256WithRSAEncryption
81:2f:13:d2:90:c0:2d:ef:d6:a7:40:5a:4a:f4:25:ab:f3:27:
95:a5:25:46:99:ec:07:6a:99:7f:03:7b:c8:ad:29:bc:3f:f9:
04:6e:04:80:63:53:67:49:46:ac:f1:87:af:97:60:04:fd:b4:
6f:cc:65:bc:12:25:3c:a5:90:a5:a4:19:98:cb:6c:0b:96:5f:
86:88:65:3c:5d:ad:a2:7e:18:43:5f:0d:94:2b:38:73:9b:5e:
8e:86:38:84:df:e0:b9:08:9a:38:58:68:fc:4b:c4:6c:2a:f0:
48:16:98:6e:64:3d:13:d6:73:f8:bd:62:4e:d1:d1:25:ed:79:
f1:13:a6:3c:75:52:f2:7b:b5:55:23:40:76:e6:ce:0b:cc:e4:
8e:e5:ea:b5:00:34:67:b3:02:48:15:d7:e2:16:eb:7e:6b:8e:
94:b7:be:9b:e6:11:71:af:cd:cf:fc:f2:e6:ed:7e:8c:3c:f7:
8f:b0:af:f7:2f:f3:0d:16:2b:e3:f0:8c:90:cf:b9:c4:08:b4:
34:78:a6:70:c1:af:c9:12:61:9e:af:c5:3e:83:5a:33:d1:b4:
9a:5f:59:9c:e3:d4:17:5d:28:02:84:da:b2:ed:ff:49:07:5b:
ad:1a:8b:28:75:8b:a2:0f:d0:5e:93:25:ed:05:23:7e:44:fd:
fd:cd:09:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:16:52 2025 by rpki-client