Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/4WL2BJTo0UVYQI23fmJ2uFokBZY.roa
File: 4WL2BJTo0UVYQI23fmJ2uFokBZY.roa (raw, json)
Hash identifier: lj/tw6Rg9OzldZgKLS+CcCeSgvuu3J4yTY9wCEyNnX0=
Subject key identifier: E1:62:F6:04:94:E8:D1:45:58:40:8D:B7:7E:62:76:B8:5A:24:05:96
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 19BBA05F
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/4WL2BJTo0UVYQI23fmJ2uFokBZY.roa
Signing time: Thu 12 May 2022 20:09:48 +0000
ROA not before: Thu 12 May 2022 20:09:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209218
IP address blocks: 2a06:a005:910::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 431726687 (0x19bba05f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: May 12 20:09:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e162f60494e8d14558408db77e6276b85a240596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:39:10:7b:0a:66:2f:3a:0a:61:b7:45:02:68:
f4:91:14:8d:48:27:d5:cc:f1:6c:d6:3d:6d:b1:f8:
72:e3:33:95:f9:e5:24:be:45:e4:20:eb:94:7a:49:
b7:f1:2f:dc:bd:fb:7b:58:3f:9c:6a:97:a8:c2:27:
1d:fd:fc:b1:30:b7:87:4d:a4:d4:52:c7:d0:6e:4c:
33:42:cb:66:20:da:67:d6:fd:55:4e:0a:29:92:34:
ce:36:8d:f5:25:79:4f:97:7b:59:b5:04:3d:9e:a4:
fb:ed:63:42:53:34:e0:d9:3d:50:e3:cb:38:c6:b2:
1e:04:29:16:ee:42:6b:dd:57:47:10:fe:56:6f:71:
f1:43:22:18:c8:56:6b:e1:b5:67:e0:50:d8:82:b4:
70:d5:1b:90:6c:a3:f2:ad:84:38:4d:de:fd:dc:34:
2d:6f:45:d9:0c:f1:2c:5c:cb:d4:63:dd:03:e5:01:
14:db:ca:65:5a:d3:0b:5c:72:73:af:66:00:7f:b3:
39:a8:db:98:6d:0f:55:8d:4c:e1:4b:45:7c:b1:7d:
80:82:3b:24:fc:ca:7f:8c:be:a7:58:09:71:6b:e4:
96:cb:75:aa:0c:2c:32:bf:9b:ca:e2:48:56:1a:a5:
a7:16:a4:5f:04:83:1a:04:ee:08:67:3a:91:73:0d:
ef:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:62:F6:04:94:E8:D1:45:58:40:8D:B7:7E:62:76:B8:5A:24:05:96
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/4WL2BJTo0UVYQI23fmJ2uFokBZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:910::/44
Signature Algorithm: sha256WithRSAEncryption
78:76:f8:4b:5c:e7:72:65:ea:e9:37:ff:de:65:2b:20:68:4f:
1e:f4:5c:40:07:ec:67:c1:cb:ac:33:08:dc:cf:c2:59:6e:27:
cb:06:ff:29:fd:3a:2f:8f:f3:af:27:6e:82:d0:5a:29:ed:ff:
0e:eb:1a:81:d4:ee:96:37:fd:f3:71:27:ff:2c:56:31:32:d9:
7a:2a:bc:82:5f:65:84:64:b2:c4:1e:80:e8:99:88:c3:d0:a1:
76:47:ea:00:c5:56:c1:ba:a9:6c:01:cf:d4:e3:58:36:97:1b:
73:17:94:fb:cd:09:a3:c5:a3:f2:30:6e:3a:4f:ec:ee:cd:11:
d2:2e:fa:7e:47:35:1d:af:b1:a9:d3:2e:1e:59:c2:29:19:d6:
ff:a6:cf:28:4a:44:63:31:62:c4:c9:53:f1:b2:0c:82:95:fc:
6d:7f:ef:1e:fd:dd:e1:3f:fc:7b:da:38:01:b7:f0:d4:57:00:
cf:33:5a:cc:5b:1a:86:89:f0:f5:8b:30:e8:33:32:4b:86:d7:
95:ba:9b:b4:7e:29:14:56:d2:2a:82:c0:8a:15:0c:0c:01:75:
71:49:56:e3:c1:84:33:2c:f1:3f:57:f7:f7:bd:2f:f4:ef:23:
03:a1:23:10:22:69:85:5e:d2:ed:ad:86:d9:63:38:16:c4:76:
53:a3:90:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:10:56 2025 by rpki-client