Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/3dPihjYlXOvkYBbUwUwfZxQZGyk.roa
File: 3dPihjYlXOvkYBbUwUwfZxQZGyk.roa (raw, json)
Hash identifier: vIgMa9qMCbawww1nzsqcRlWhK+BajPKoHRXL4DObKME=
Subject key identifier: DD:D3:E2:86:36:25:5C:EB:E4:60:16:D4:C1:4C:1F:67:14:19:1B:29
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01831D77A71D2353CB9305A168BD56E44D76
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/3dPihjYlXOvkYBbUwUwfZxQZGyk.roa
Signing time: Thu 08 Sep 2022 14:18:44 +0000
ROA not before: Thu 08 Sep 2022 14:18:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203333
IP address blocks: 2a06:a005:1860::/44 maxlen: 48
2a06:a005:12f0::/44 maxlen: 48
2a06:a005:d25::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:1d:77:a7:1d:23:53:cb:93:05:a1:68:bd:56:e4:4d:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Sep 8 14:18:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ddd3e28636255cebe46016d4c14c1f6714191b29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:97:8d:f5:1e:26:11:62:fa:b1:e9:ff:85:df:
54:49:39:6c:d0:08:18:32:01:2c:f4:1b:10:c5:20:
21:8f:c1:67:e9:07:5a:a3:c0:0f:06:a8:40:9d:45:
cc:d6:f8:e8:14:b9:45:cc:30:55:e3:89:40:da:c5:
58:bf:6e:55:ad:62:94:15:cc:33:96:6e:db:9f:f4:
66:8e:90:d3:88:70:fc:bb:14:36:73:15:98:2b:6f:
09:d7:13:23:39:c1:f5:7d:39:a9:74:66:a7:44:5b:
f6:c9:3b:d8:59:aa:45:c8:f1:45:85:b7:bc:1e:34:
d0:20:4b:ba:d7:bd:96:99:7e:fa:a9:bb:0f:93:c2:
76:ce:21:a9:7e:8d:5f:e6:f0:10:b3:68:8b:53:61:
45:63:5e:be:17:85:6e:d3:92:8f:e5:f7:e7:e5:56:
37:4a:ff:19:57:8c:75:0b:75:db:d6:6d:fb:9a:1e:
b8:34:6e:89:3d:45:ed:ac:90:ee:6d:3e:8c:ef:e1:
e5:9e:56:f1:1e:f4:e2:3c:86:8a:20:20:ce:17:24:
8c:44:59:19:c5:fd:f6:9e:e4:18:fb:f4:e6:e9:09:
f4:21:b7:36:62:4e:07:13:fa:51:14:0b:a8:2b:72:
96:25:ff:48:3d:17:ec:35:6a:75:05:58:ee:3c:46:
ed:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:D3:E2:86:36:25:5C:EB:E4:60:16:D4:C1:4C:1F:67:14:19:1B:29
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/3dPihjYlXOvkYBbUwUwfZxQZGyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:d25::/48
2a06:a005:12f0::/44
2a06:a005:1860::/44
Signature Algorithm: sha256WithRSAEncryption
a1:09:68:1b:c0:4e:8f:a5:09:78:e3:73:24:a4:f3:a2:1c:00:
b7:c7:58:84:a1:24:8a:d4:5a:6c:63:b5:49:cc:69:83:31:b2:
8a:39:cd:8c:6d:61:bd:3c:ec:11:bc:27:53:6b:02:d8:c4:5e:
2b:6d:7c:76:49:92:38:49:29:8d:c1:1f:9a:e2:16:07:72:ba:
20:f3:b9:46:82:4d:cb:18:57:4b:56:e4:75:60:38:e8:7b:3b:
c9:7a:5c:e7:76:cf:89:ae:ec:d7:32:8c:a1:1c:67:14:11:e7:
dd:7a:93:5d:7e:63:fa:ef:64:1f:43:49:7a:c6:ea:0d:0e:fb:
cb:49:5d:24:57:4a:78:5d:06:c5:31:9b:5c:1d:8b:79:10:40:
77:5a:a3:45:48:9f:a3:7b:fb:d5:01:dd:bc:01:7c:05:12:a4:
35:a2:e2:41:e8:10:67:49:34:5d:47:83:78:5e:bd:fe:f8:07:
fc:9c:c9:e2:63:24:5a:d1:15:c1:77:5c:d3:d7:59:0a:5d:d0:
db:66:92:47:45:36:74:12:6f:6d:31:f1:8c:cd:80:a7:25:ea:
33:0b:b7:90:0a:00:ea:6f:fa:65:e6:42:76:9b:e3:41:c3:67:
69:32:b7:b8:06:49:74:a5:f7:31:6c:fb:82:d1:b4:05:a5:7d:
30:00:8f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 02:46:36 2025 by rpki-client