Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/6GFEhbWn9J_AVsAZXlpU4pvNBqY.roa
File: 6GFEhbWn9J_AVsAZXlpU4pvNBqY.roa (raw, json)
Hash identifier: +Lop/R1POsF3rmYFD8z5VP9IlLdJW/4OZnZmCSn/Wbw=
Subject key identifier: E8:61:44:85:B5:A7:F4:9F:C0:56:C0:19:5E:5A:54:E2:9B:CD:06:A6
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 1AA34CCC
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/6GFEhbWn9J_AVsAZXlpU4pvNBqY.roa
Signing time: Mon 06 Jun 2022 12:26:20 +0000
ROA not before: Mon 06 Jun 2022 12:26:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205794
IP address blocks: 2a06:a005:c50::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 446909644 (0x1aa34ccc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jun 6 12:26:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e8614485b5a7f49fc056c0195e5a54e29bcd06a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8f:1b:da:c1:cf:7f:7e:2d:8e:a6:0a:52:7d:
ad:4b:1c:53:f2:3b:af:06:29:87:45:25:33:f1:3e:
3f:5c:f9:6c:57:b5:1d:ea:13:f5:5e:80:90:88:13:
04:61:8d:f0:52:92:d4:d5:e7:f7:22:34:be:f7:1d:
69:28:47:5b:86:bf:ec:a5:88:36:63:58:ae:ea:7f:
06:39:8c:f2:67:8f:64:fc:e3:fb:96:56:77:03:ef:
df:8d:30:2f:34:28:5c:48:0d:a3:f2:da:27:01:a8:
d4:41:d0:c0:f6:e4:30:55:c5:69:22:be:90:1b:d7:
a5:3e:ef:fb:e7:07:a1:12:42:39:61:57:f3:ad:84:
ee:82:07:21:5a:5e:1b:8d:fb:dd:c6:8a:34:ba:65:
9e:ef:d3:0a:26:ee:e5:83:11:71:8f:e4:46:9d:7f:
51:b3:15:3b:38:45:72:38:ac:77:e3:27:c0:89:9a:
73:db:1d:1b:73:29:07:70:f6:f5:60:2d:02:0a:79:
dc:72:4d:bb:b2:59:2c:bb:26:5c:b3:fc:37:ae:c2:
1d:38:86:95:e9:aa:8e:ad:64:47:03:32:ae:c7:e9:
e5:c2:25:92:4f:f2:be:6b:71:66:3f:34:d1:fe:f4:
5f:19:fd:69:4b:b3:a3:c7:73:77:23:35:94:a7:74:
ba:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:61:44:85:B5:A7:F4:9F:C0:56:C0:19:5E:5A:54:E2:9B:CD:06:A6
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/6GFEhbWn9J_AVsAZXlpU4pvNBqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:c50::/44
Signature Algorithm: sha256WithRSAEncryption
61:01:42:27:5d:45:95:d4:1f:43:32:37:9c:41:0f:b1:39:74:
00:a9:fd:2d:a5:66:37:4b:13:c3:d2:35:16:06:e0:00:e7:90:
da:45:b3:b8:59:7b:5a:37:6c:d6:06:1b:c7:df:28:59:1b:12:
0d:4f:81:d8:72:90:fc:fd:1a:e5:2d:e2:6a:d3:49:4e:37:c7:
78:64:bd:08:3f:ce:dc:4f:a3:69:91:ea:2d:ed:a5:45:3a:f6:
9c:d4:86:0a:65:01:70:ed:35:7b:37:dc:b7:eb:ee:77:88:b5:
a5:59:a7:a3:08:00:2b:18:64:2a:d2:ef:af:a0:10:72:c7:b2:
d8:ee:1c:3d:db:93:65:b1:0a:f4:30:3a:c4:9b:a0:b2:93:44:
0f:63:66:4a:b3:f8:68:18:30:b5:88:ba:e9:9e:5e:4c:69:04:
34:5b:68:ba:94:45:66:70:ce:b3:5c:ee:0f:04:8f:0f:5b:15:
78:cf:3d:93:6e:e3:4e:ce:2a:a9:35:56:d7:89:c8:a2:1f:1b:
e7:6e:78:20:c8:bd:e8:d9:7b:cc:1c:e1:33:09:8b:b8:81:eb:
96:96:56:75:29:38:89:71:8c:1c:b3:96:e4:82:fd:e5:95:9b:
a5:a7:1e:a4:0f:a0:1f:f9:94:9e:78:d7:dd:79:ba:de:30:bc:
1b:a8:c6:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:32:22 2025 by rpki-client