Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/3VqF_1zwkj24jGbWDKqEVtrUzn8.roa
File: 3VqF_1zwkj24jGbWDKqEVtrUzn8.roa (raw, json)
Hash identifier: 9rRzudLkMpCJ+llJxjt//Z2vHcJtZILimIzkJ1+vDOg=
Subject key identifier: DD:5A:85:FF:5C:F0:92:3D:B8:8C:66:D6:0C:AA:84:56:DA:D4:CE:7F
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 1A9FA6F2
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/3VqF_1zwkj24jGbWDKqEVtrUzn8.roa
Signing time: Mon 06 Jun 2022 03:12:20 +0000
ROA not before: Mon 06 Jun 2022 03:12:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 132282
IP address blocks: 2a06:a005:bb0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 446670578 (0x1a9fa6f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jun 6 03:12:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dd5a85ff5cf0923db88c66d60caa8456dad4ce7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:06:31:ba:d1:f3:13:b4:28:56:90:98:26:9f:
0c:af:81:29:d0:be:ab:17:17:fe:b0:bb:1a:3e:38:
b3:87:05:fd:d9:f0:b0:88:b4:24:af:f1:35:86:4f:
02:29:f5:19:dc:c7:61:d8:b5:7b:29:2c:c3:73:e4:
47:fc:2f:92:c4:ec:aa:96:f5:51:c4:e2:84:b5:9f:
34:de:67:6a:7c:8e:13:0a:38:9a:ca:3a:0a:b2:3b:
7e:2e:92:30:88:3d:af:d1:ee:2a:0d:70:7c:84:c0:
4a:e8:99:ea:e1:29:1c:c8:e6:97:f8:0e:e8:79:09:
b9:32:3f:8f:76:7c:fb:8a:16:40:37:3a:0d:a3:09:
bb:c6:57:d0:d2:d4:da:b5:3a:22:48:c0:0f:66:fe:
fc:a6:22:d6:53:47:3d:0a:97:bf:03:9d:ab:9a:18:
d8:16:aa:06:18:b7:15:b9:34:bf:1e:6d:83:6f:c6:
dc:18:55:75:f2:1f:ce:26:74:83:60:66:3d:27:3d:
3b:33:98:61:bb:76:e3:f1:ef:71:f2:06:b2:b4:cb:
ac:ee:43:d2:ab:c3:f1:cc:6c:01:c4:e9:eb:41:fc:
1f:e6:42:86:cb:cd:76:ef:5e:b1:ec:b3:75:87:60:
fc:ef:46:19:18:05:6b:fe:00:de:55:67:ca:5e:08:
db:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:5A:85:FF:5C:F0:92:3D:B8:8C:66:D6:0C:AA:84:56:DA:D4:CE:7F
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/3VqF_1zwkj24jGbWDKqEVtrUzn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:bb0::/44
Signature Algorithm: sha256WithRSAEncryption
0a:e2:e1:a0:07:6e:e2:88:8c:c6:2c:86:f9:fa:9e:65:a5:05:
da:aa:ec:90:8f:80:0d:bf:a2:31:44:8e:e6:86:67:36:20:be:
0c:44:d8:3e:ba:e1:9f:2a:a2:4e:6b:17:0c:3d:b1:ae:76:ce:
b8:45:1a:17:6f:c3:30:ef:74:70:9e:1e:33:74:ed:f3:80:db:
36:fc:9c:6e:4d:1d:18:12:a1:a3:cc:5c:46:77:02:9e:13:e2:
60:10:96:10:85:2b:4f:9b:ba:9c:89:70:4c:46:4d:85:cb:ae:
99:b8:66:cb:fa:2a:10:24:c2:0f:54:16:51:77:bb:28:b2:06:
50:74:cd:29:ac:c6:82:c9:6c:c6:ac:22:d2:9e:04:a5:bf:2b:
a8:19:4f:07:38:89:a4:84:49:14:a4:a8:32:ad:d8:b3:28:8f:
d5:99:73:8b:83:85:98:b9:bc:d1:dd:38:ad:a7:ad:b2:e9:39:
54:11:50:d2:81:31:18:33:65:d9:2d:31:e8:85:93:f8:2b:7e:
9d:8d:f4:5a:e6:70:d6:13:d8:e5:17:10:26:b2:12:bd:1a:ad:
28:84:75:2a:32:12:d6:f5:7e:79:9a:bf:2b:5b:ef:17:51:da:
f3:2f:9f:0c:6a:4b:54:a7:4d:8e:a3:27:98:af:c9:66:33:85:
9b:ef:7a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:51:59 2025 by rpki-client