Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/5uXR4ske2N204E9GK6vHeNUZHl0.roa
File: 5uXR4ske2N204E9GK6vHeNUZHl0.roa (raw, json)
Hash identifier: WbosF/o9rXHYnWj1uSgKx/9rgM1VCh1if/SHOPHsp3E=
Subject key identifier: E6:E5:D1:E2:C9:1E:D8:DD:B4:E0:4F:46:2B:AB:C7:78:D5:19:1E:5D
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 1B38AD58
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/5uXR4ske2N204E9GK6vHeNUZHl0.roa
Signing time: Wed 22 Jun 2022 17:29:32 +0000
ROA not before: Wed 22 Jun 2022 17:29:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204508
IP address blocks: 2a06:a005:d29::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 456699224 (0x1b38ad58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jun 22 17:29:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e6e5d1e2c91ed8ddb4e04f462babc778d5191e5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6e:9c:56:9f:99:e8:22:39:b9:8e:4f:0e:bc:
c4:72:0e:25:b9:c8:e5:03:ae:56:ec:2f:af:2b:57:
f3:3d:fd:c2:a9:3d:28:5b:d0:9d:8d:11:64:18:06:
9b:f1:7c:b6:68:d3:ec:7b:eb:24:bb:7d:2e:03:11:
86:d2:9e:66:5d:93:c7:5c:32:47:73:bd:6d:a6:f0:
cd:53:dc:a1:bc:c4:c2:67:c0:d1:ab:81:df:ac:ab:
f8:dc:f7:1b:d7:3e:e3:86:7b:77:c1:bc:8b:77:90:
59:64:c7:4e:2c:d7:b2:49:a5:aa:f6:7f:25:c2:be:
68:cb:1b:e5:13:9f:bc:c8:c4:c9:10:e2:67:63:ee:
c0:42:8f:f2:66:5b:d3:ea:6b:c8:5d:5e:ca:d0:b9:
7d:60:23:42:38:4f:4b:c8:d9:fc:00:62:1e:2d:08:
16:07:c5:cc:ad:68:27:3c:d9:60:43:84:48:d1:0f:
35:f2:82:e1:66:00:02:0f:a8:e8:72:2a:44:9e:ee:
9b:b0:a9:39:81:a2:8b:92:f5:de:84:7e:9c:ae:01:
e3:a8:be:2e:88:1d:59:61:a4:e1:a2:f4:04:e5:0e:
0a:9e:79:a8:6b:e1:6c:08:39:65:7f:d2:be:da:f9:
ba:ae:ee:e7:3a:35:ba:a0:ed:28:cd:b5:4d:09:18:
ad:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:E5:D1:E2:C9:1E:D8:DD:B4:E0:4F:46:2B:AB:C7:78:D5:19:1E:5D
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/5uXR4ske2N204E9GK6vHeNUZHl0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:d29::/48
Signature Algorithm: sha256WithRSAEncryption
2d:16:45:87:be:38:cc:44:09:0f:88:9b:2e:f8:24:71:e3:64:
dc:61:7b:28:04:57:47:73:dd:6c:cb:47:aa:3d:4d:79:06:bd:
dd:62:7b:6f:31:89:b7:b7:5b:b3:5a:d6:7b:1f:25:0f:54:1b:
10:72:88:25:b4:ea:f3:9f:2e:81:31:29:4d:3e:e1:f9:ff:e9:
52:fe:ee:fc:aa:82:d0:cb:41:d1:95:c5:f9:52:9d:e2:7f:09:
7f:fc:cb:63:c9:d8:6a:f3:09:06:3b:a1:64:ec:4e:92:8a:68:
7c:05:c1:d1:56:9a:6b:98:c9:f6:f2:8c:c1:a9:61:a0:96:c8:
90:58:aa:cb:0d:69:2d:f9:34:50:f8:ba:57:44:f3:ef:d8:4a:
30:62:4e:02:61:99:82:76:c1:8b:11:18:9c:6b:20:96:e5:12:
df:4a:6c:2c:d7:52:64:a3:7e:85:4a:ae:17:55:b8:61:c3:bd:
8d:f0:78:62:a2:b4:01:f8:1d:74:21:05:67:ec:83:ab:6b:bc:
23:47:e7:62:34:2e:a6:91:f5:3d:80:db:df:45:e7:3d:ce:74:
ca:cf:37:a5:44:e5:9d:a4:50:16:a4:ff:9d:0e:b3:17:2a:09:
ca:ee:5d:72:ff:10:18:8a:b2:f3:5b:3a:fc:f5:02:de:7b:e0:
7f:2d:c8:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 09:59:37 2025 by rpki-client