Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/4BDdIqJLBh7KXdh29UU_E9cYf0s.roa
File: 4BDdIqJLBh7KXdh29UU_E9cYf0s.roa (raw, json)
Hash identifier: vCT7mWXCA+QDVp7Fyd3EA9Pmg5NQvo8FFLj9c2vLUMk=
Subject key identifier: E0:10:DD:22:A2:4B:06:1E:CA:5D:D8:76:F5:45:3F:13:D7:18:7F:4B
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0184E232CB08E9A51FBED96295952BDBFC3C
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/4BDdIqJLBh7KXdh29UU_E9cYf0s.roa
Signing time: Mon 05 Dec 2022 12:11:30 +0000
ROA not before: Mon 05 Dec 2022 12:11:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200895
IP address blocks: 2a0a:6040:d700::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e2:32:cb:08:e9:a5:1f:be:d9:62:95:95:2b:db:fc:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Dec 5 12:11:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e010dd22a24b061eca5dd876f5453f13d7187f4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:91:be:2a:5a:94:87:e6:6f:2d:de:78:50:b6:
92:75:c4:de:c2:c1:4a:fc:87:c4:c6:29:8e:0f:9e:
82:79:5a:d8:8f:61:e8:1f:61:bd:9c:e0:78:62:c2:
4a:42:0d:5c:ee:bc:f1:25:10:35:7e:56:5b:dc:78:
fe:86:5b:6c:4d:09:1f:02:a6:bb:cc:fd:a5:de:f4:
6b:f0:fd:e0:0c:7a:c6:1a:1f:de:4d:11:84:f0:79:
67:1e:4a:7d:7d:61:45:0e:55:2c:23:db:51:87:d4:
99:1c:32:19:67:e9:bb:3c:98:f6:ac:fa:71:e7:63:
b3:07:27:e2:de:a1:ea:d2:81:a9:ad:4d:57:3b:5f:
42:6a:d0:3b:65:22:0c:8b:65:2a:6e:c6:e1:41:ac:
97:fd:b0:47:aa:94:57:95:1e:0b:5b:91:ab:a1:29:
c6:0d:43:21:d5:68:5b:d6:8b:3b:68:75:f2:40:24:
e1:83:5a:44:d6:22:07:54:fc:8a:6c:58:12:75:e6:
8c:c1:08:86:92:6f:73:3c:6c:c8:b5:a0:ea:44:7a:
a8:27:6f:99:6b:68:1e:ae:7b:13:6a:ae:74:9b:15:
1d:d3:02:78:7e:fb:ae:0b:c6:8b:e9:d9:a2:c4:a5:
16:0f:97:99:fc:18:69:fb:d0:bd:8e:f9:1c:0f:64:
9b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:10:DD:22:A2:4B:06:1E:CA:5D:D8:76:F5:45:3F:13:D7:18:7F:4B
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/4BDdIqJLBh7KXdh29UU_E9cYf0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:d700::/40
Signature Algorithm: sha256WithRSAEncryption
98:8d:3f:1f:e3:d5:81:9b:75:db:f7:05:f9:c5:bf:8d:5d:00:
fc:20:81:74:d7:3f:e3:9e:37:c1:fa:31:48:86:a7:d0:67:ae:
fd:8e:c6:c4:5d:41:5f:c5:be:aa:e2:08:bd:18:fe:89:3c:c3:
91:1d:9a:1a:9b:bc:b3:22:73:26:7d:16:86:c8:39:a7:b3:0f:
7b:6c:79:c1:5d:76:06:74:02:35:f4:ee:fc:06:55:b0:31:e3:
89:49:94:7d:df:54:18:41:14:62:ad:ba:af:85:0a:cf:36:fa:
59:64:e2:b9:d5:04:75:bb:38:c1:ad:4e:6e:03:b4:d5:71:ab:
0e:56:3c:2c:1f:26:86:23:09:2c:04:74:f9:57:7f:d2:06:4d:
10:f1:1b:24:e8:0c:c3:a6:23:1b:42:6b:fd:50:73:89:df:3f:
91:d6:de:67:19:82:cb:a7:69:2b:63:5b:49:62:bf:cd:c1:27:
44:e0:40:7c:3e:61:80:39:34:77:37:16:09:a9:ec:9c:9f:c7:
25:eb:4f:33:b6:dd:e1:d6:3d:d2:b9:af:df:ab:dc:4d:10:e8:
61:4b:44:bd:25:81:59:54:f9:ee:30:c8:89:27:ab:7c:67:a7:
61:35:bf:74:a3:94:55:bf:d4:d1:de:d5:21:7e:ef:63:7c:36:
c2:aa:b3:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:03:32 2025 by rpki-client