Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/5UJSHW5ZE0Wl2s3cQMw3MpuNG6s.roa
File: 5UJSHW5ZE0Wl2s3cQMw3MpuNG6s.roa (raw, json)
Hash identifier: 9RaPRagV9DSea9jCjacICpanUxplxEM1hh+e51ds0AY=
Subject key identifier: E5:42:52:1D:6E:59:13:45:A5:DA:CD:DC:40:CC:37:32:9B:8D:1B:AB
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 178ADB7A
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/5UJSHW5ZE0Wl2s3cQMw3MpuNG6s.roa
Signing time: Tue 29 Mar 2022 13:53:45 +0000
ROA not before: Tue 29 Mar 2022 13:53:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210925
IP address blocks: 2a06:a005:14::/48 maxlen: 48
2a06:a005:15::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 394976122 (0x178adb7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Mar 29 13:53:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e542521d6e591345a5dacddc40cc37329b8d1bab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ba:bb:28:8d:6d:99:de:d3:23:5d:70:11:50:
45:45:18:7e:32:4e:6f:15:10:65:ab:60:d7:66:c5:
dd:80:22:a2:90:3b:41:cd:28:79:a6:f6:bd:67:4d:
07:fa:b6:10:e1:0c:e5:ad:33:f5:c1:83:29:47:4e:
0b:e0:8a:78:5d:0b:c2:5d:dd:14:bd:73:79:e5:00:
1e:6d:1c:cf:2c:d7:a4:68:3d:89:b1:81:3a:c9:d1:
14:5f:3d:9e:bc:8e:ea:e8:00:7e:c7:a4:01:d3:83:
0d:bf:2b:6c:9b:16:9b:80:bf:2f:7b:a4:42:25:ed:
86:74:bc:d9:55:f9:9a:1e:a8:01:71:48:cc:b7:94:
69:87:00:b9:d6:dd:02:ef:e0:45:1b:b0:a6:59:82:
83:1d:3c:81:3a:bd:0b:f3:67:e7:04:a7:44:92:85:
f6:cd:72:4c:7a:e9:5f:df:29:6d:b7:46:15:b2:48:
88:9d:9c:27:30:32:d2:b0:ab:c0:74:21:c7:2d:03:
3f:7a:c9:d8:03:84:5e:05:d6:61:7f:a9:b2:c2:e8:
81:4a:94:07:99:dd:23:16:f1:b5:3e:58:79:47:47:
32:ae:63:88:27:a9:92:59:d3:dc:35:70:2d:f7:29:
2d:e6:dc:8f:f4:a1:fe:83:e9:8f:c8:04:7d:ec:f4:
f0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:42:52:1D:6E:59:13:45:A5:DA:CD:DC:40:CC:37:32:9B:8D:1B:AB
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/5UJSHW5ZE0Wl2s3cQMw3MpuNG6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:14::/47
Signature Algorithm: sha256WithRSAEncryption
36:28:0e:c7:45:12:bd:65:a0:d1:4f:69:d9:1c:a0:3f:df:7f:
7d:82:c5:fb:b4:ad:c0:68:f7:7f:b9:49:5d:d3:66:36:56:b3:
d9:e6:e9:b2:0c:4f:8d:52:21:9f:89:b9:b0:e5:20:2b:24:6b:
bc:76:b4:60:31:1f:5c:d0:39:f7:9d:38:4f:f5:cb:4a:28:16:
18:0f:c9:55:bd:f3:11:a6:ec:0a:e9:52:2b:13:26:27:64:88:
5a:a2:a7:89:1d:18:4c:f6:c6:07:87:2e:0d:46:e8:39:a0:a8:
5c:59:28:54:eb:48:cc:eb:5a:dd:eb:92:06:0c:3b:aa:b1:f5:
94:00:d7:cb:b4:7a:3c:84:0e:d3:22:e8:2c:f1:c0:b9:4d:1d:
41:b9:90:dd:10:22:3c:a6:e1:49:93:c0:62:13:1c:2d:cd:9c:
57:b2:26:92:b4:b4:45:56:14:1e:24:a2:eb:ec:19:84:10:93:
4b:78:f6:83:0f:bd:e9:da:08:b7:4d:d6:94:f1:42:a2:af:56:
37:ba:9c:f8:cf:db:59:75:6a:c4:e3:09:37:60:e6:44:9b:f9:
4e:60:09:37:cb:e4:bb:0e:4b:30:a5:84:d3:0f:6c:90:21:e5:
98:62:96:78:d0:43:3c:9b:89:7f:87:52:0a:df:67:46:49:0f:
58:dd:82:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 09:50:48 2025 by rpki-client