Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/5b375RNMdHr65sW-5zCLCHyXxs0.roa
File: 5b375RNMdHr65sW-5zCLCHyXxs0.roa (raw, json)
Hash identifier: cy/us8xdTSGv4DIkBYFyINI9GboTxmP0QJVHS4rzeOw=
Subject key identifier: E5:BD:FB:E5:13:4C:74:7A:FA:E6:C5:BE:E7:30:8B:08:7C:97:C6:CD
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0183CBD240E9904759E8D6EE1FF7D01950C4
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/5b375RNMdHr65sW-5zCLCHyXxs0.roa
Signing time: Wed 12 Oct 2022 10:51:37 +0000
ROA not before: Wed 12 Oct 2022 10:51:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 147016
IP address blocks: 2a06:a005:baa::/48 maxlen: 48
2a06:a005:bab::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:cb:d2:40:e9:90:47:59:e8:d6:ee:1f:f7:d0:19:50:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Oct 12 10:51:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e5bdfbe5134c747afae6c5bee7308b087c97c6cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:18:b8:f6:f6:52:1a:39:dc:4b:7c:3b:89:71:
f3:37:1c:d6:df:82:2d:b9:ba:3e:5e:0e:91:6a:93:
02:8f:ac:8f:ef:16:2b:a7:99:6f:73:49:ac:2a:d4:
65:2b:89:87:9f:68:af:1c:0b:ad:1b:ce:6f:80:3e:
c6:06:b5:b4:c0:98:17:c8:a7:fd:4a:b4:a0:3e:61:
ef:bf:b6:da:c9:18:9d:51:48:aa:a6:78:5e:e2:26:
a8:34:7e:83:70:57:41:00:6d:f3:9c:ae:86:29:15:
d9:96:ad:af:97:7a:bc:bb:b5:e9:3c:b3:52:64:a6:
7d:0e:c1:ec:7e:ff:2e:2e:71:85:3a:03:0a:38:1b:
68:35:ef:ec:6b:3c:19:a5:72:75:96:70:33:50:4a:
29:39:94:22:6c:e6:df:ba:cb:d4:08:b9:8b:db:5e:
9b:eb:16:e1:27:8e:93:b3:67:a8:ed:88:47:60:30:
c8:07:c8:2f:97:f1:16:cd:7b:4c:01:65:c2:24:bd:
58:56:6f:c9:2e:46:dc:ee:15:e5:7d:12:c1:76:1f:
2d:40:8e:7c:18:94:61:0b:d0:53:84:63:18:62:12:
76:d4:e3:01:eb:ba:11:6f:86:b8:31:5f:46:cb:4e:
e1:39:2c:3e:f7:fa:3e:89:3c:d8:5c:e1:3c:99:06:
11:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:BD:FB:E5:13:4C:74:7A:FA:E6:C5:BE:E7:30:8B:08:7C:97:C6:CD
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/5b375RNMdHr65sW-5zCLCHyXxs0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:baa::/47
Signature Algorithm: sha256WithRSAEncryption
86:be:94:88:23:01:b8:5d:5b:6f:92:cc:1c:c8:23:91:44:1f:
08:55:3d:f7:62:cc:d7:ba:d3:fe:e3:ff:a3:9e:33:8f:05:58:
4f:21:97:b6:a9:06:80:ee:53:63:84:57:34:68:3a:00:50:09:
8f:a0:cf:4b:38:87:5a:5f:b4:7c:9c:18:87:b1:bf:a6:eb:fc:
33:7a:f8:84:5b:b9:60:30:50:b5:eb:2f:fb:ee:aa:b0:fe:55:
9e:1f:20:c8:03:33:86:c3:18:ec:ee:ff:c1:c1:83:2c:3d:1a:
ef:f8:3e:fd:29:c9:6b:54:70:ea:c0:20:de:32:07:95:2b:60:
9f:aa:e4:56:a1:63:11:43:da:65:df:21:bd:ee:80:d4:e1:a5:
12:30:c9:dc:ef:7e:9d:ec:cb:06:6e:ae:bf:25:7a:43:c5:37:
7a:a8:85:75:5a:33:82:55:62:f6:6a:05:f1:05:ce:34:9d:8d:
76:af:56:b2:69:71:43:c1:59:c5:d4:d9:30:61:00:07:f6:27:
b4:63:b0:27:dc:04:7e:87:72:04:25:4b:16:0e:e2:f7:78:82:
09:99:90:28:4e:3b:93:87:d1:0f:f2:38:7b:17:a2:30:9c:ef:
23:9a:1d:ab:ec:31:28:d0:0f:f0:c8:9b:71:67:9a:9f:8b:18:
6c:26:61:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 22:45:33 2025 by rpki-client