Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/4ldOByGAewKQ30-V8XQviBzT4ZI.roa
File: 4ldOByGAewKQ30-V8XQviBzT4ZI.roa (raw, json)
Hash identifier: lfHCF1f4wFxtToJe5M9C8ypi0XkmttT15PtyKlLHx7w=
Subject key identifier: E2:57:4E:07:21:80:7B:02:90:DF:4F:95:F1:74:2F:88:1C:D3:E1:92
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 1ABDDD95
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/4ldOByGAewKQ30-V8XQviBzT4ZI.roa
Signing time: Fri 10 Jun 2022 19:02:05 +0000
ROA not before: Fri 10 Jun 2022 19:02:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208529
IP address blocks: 2a06:a005:5e7::/48 maxlen: 48
2a06:a005:c60::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 448650645 (0x1abddd95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jun 10 19:02:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e2574e0721807b0290df4f95f1742f881cd3e192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3c:88:34:d3:65:37:e5:af:84:cb:b6:e2:d8:
2a:c0:f4:60:33:45:8e:ee:cf:d0:b4:26:cd:22:2a:
b1:59:28:53:63:3b:9b:e6:94:d6:97:40:c2:f0:a3:
fa:a0:29:bd:49:cd:53:80:47:47:e5:28:fd:e0:8f:
7c:2a:06:9d:56:f3:49:85:fc:65:03:71:25:8b:50:
62:de:a0:3e:ac:d4:64:ca:20:07:67:4f:01:77:da:
88:2b:5f:e4:0a:3d:4b:9a:81:19:aa:2c:02:87:75:
b7:e9:f1:66:48:ed:ea:7a:bf:dd:38:52:b5:2b:20:
78:b2:96:3e:78:ab:a4:5a:c1:e6:02:c1:27:f1:d4:
7f:1a:26:99:7a:26:46:e0:67:41:49:1e:bb:a5:7a:
e3:30:06:39:9e:0f:03:19:44:e1:cf:ec:48:ef:70:
b2:cf:30:c8:d0:33:75:10:b2:31:df:e7:88:b4:8b:
0f:a4:46:e6:da:ea:38:50:8e:50:b9:5b:6b:38:f0:
b2:de:6f:9d:57:b3:9f:59:4b:12:08:39:fa:a1:9e:
fe:24:4f:25:89:33:3e:8d:86:ff:59:3c:b7:af:2e:
02:42:dd:0c:33:6b:93:7a:8c:09:82:36:b5:38:6c:
c6:b7:a8:6b:10:da:05:d8:0d:88:b0:40:13:10:07:
f9:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:57:4E:07:21:80:7B:02:90:DF:4F:95:F1:74:2F:88:1C:D3:E1:92
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/4ldOByGAewKQ30-V8XQviBzT4ZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5e7::/48
2a06:a005:c60::/44
Signature Algorithm: sha256WithRSAEncryption
a1:d2:5d:ea:08:96:43:c8:93:f0:0f:14:84:4a:e6:82:1a:e7:
d9:49:c4:33:a8:33:43:fb:a7:a7:92:4c:b4:70:8a:08:2c:38:
86:1e:ad:b0:da:b4:96:b4:ce:43:80:04:af:3a:2d:45:e5:36:
be:cb:9f:1c:62:f2:0e:fb:02:32:e1:91:f3:f4:1d:e2:c5:e1:
1d:ab:5c:23:35:cd:08:d8:b3:8e:6e:12:67:2c:40:02:00:71:
ad:62:56:8c:c3:7d:7f:aa:f4:cc:bf:08:0d:b8:1a:80:00:f1:
28:3d:a1:48:37:9e:23:a7:c3:02:dc:ce:7a:26:37:f8:5f:5c:
54:7f:21:7e:0d:20:ef:03:48:44:11:0e:eb:96:8e:36:de:53:
74:53:0d:59:89:e2:ab:4a:34:36:c5:c5:23:c9:85:05:95:36:
45:97:19:af:91:51:9f:58:10:e1:bf:7a:16:6d:3a:c9:50:b6:
3a:e5:c5:c8:e5:7e:4f:ae:c0:89:5c:96:dd:89:ac:7a:3d:cf:
72:cf:08:1b:57:e1:cd:46:31:20:91:9a:3a:35:ce:d2:b3:02:
e2:d8:6f:41:a1:b2:17:71:b3:91:0f:62:6b:3a:1b:7d:df:86:
b9:92:18:cd:e2:85:27:f5:fc:2e:92:60:e7:f0:84:bc:f6:08:
24:87:0f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:10:57 2025 by rpki-client