Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/71-PjOQW_Hk6kB0TV2QksM-iuvU.roa
File: 71-PjOQW_Hk6kB0TV2QksM-iuvU.roa (raw, json)
Hash identifier: 9oQ3C3yCqaGRkO1PnTe3Q8D7v59dK0ZxFCKeuUoTWbg=
Subject key identifier: EF:5F:8F:8C:E4:16:FC:79:3A:90:1D:13:57:64:24:B0:CF:A2:BA:F5
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01826A391CF3B8C332ABD8E8D03E2FB27C6A
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/71-PjOQW_Hk6kB0TV2QksM-iuvU.roa
Signing time: Thu 04 Aug 2022 18:58:23 +0000
ROA not before: Thu 04 Aug 2022 18:58:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210825
IP address blocks: 2a06:a005:5a1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:6a:39:1c:f3:b8:c3:32:ab:d8:e8:d0:3e:2f:b2:7c:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Aug 4 18:58:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ef5f8f8ce416fc793a901d13576424b0cfa2baf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ca:71:29:5c:41:90:3d:87:5d:e7:56:ac:49:
04:8e:b9:50:74:a0:35:e3:fa:ec:2c:1a:eb:74:c0:
3c:83:c7:eb:fb:31:e9:99:98:93:86:26:21:80:8c:
25:d8:d4:d8:1c:3a:c1:1b:8a:7d:9e:f4:aa:02:d6:
6f:91:ce:3f:95:ae:5f:30:af:84:e7:8f:1a:98:5a:
59:a5:ac:eb:2b:64:7d:75:b4:ac:ec:91:09:08:9e:
40:98:d6:89:54:bc:4c:a7:50:5e:7d:33:bd:2c:10:
85:aa:ec:53:12:86:b2:62:4f:8f:1c:d6:b3:5f:4a:
f2:c5:bb:63:9e:8d:57:f4:58:d2:d5:1c:29:35:c0:
03:52:50:58:e7:4d:93:74:30:ce:b0:83:b9:ff:6a:
7a:50:7d:02:73:42:bb:94:d9:e3:4b:35:48:c2:58:
bb:11:68:3a:6c:11:70:b0:5b:73:30:49:e4:f4:67:
47:c9:96:bb:08:a0:86:b7:4f:fc:27:8e:de:25:f1:
38:14:92:ad:a1:aa:68:3e:2d:c4:68:7e:62:a3:7e:
dc:e5:5c:fe:ff:6c:d3:0b:5d:82:8f:de:8b:bc:81:
a0:03:da:92:5e:f1:4e:4f:2d:3e:35:28:90:b8:06:
80:4b:d8:d4:9d:a7:6a:db:89:27:ae:a8:fa:a3:ed:
2a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:5F:8F:8C:E4:16:FC:79:3A:90:1D:13:57:64:24:B0:CF:A2:BA:F5
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/71-PjOQW_Hk6kB0TV2QksM-iuvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5a1::/48
Signature Algorithm: sha256WithRSAEncryption
7c:07:18:03:3b:3e:fb:e1:ab:8b:1c:65:ac:d6:1d:9a:37:2d:
6f:20:e8:88:a6:b5:ca:de:72:65:ad:0e:00:9c:97:69:cb:95:
52:6a:2e:20:af:c3:ae:72:bf:e9:38:85:77:85:d9:46:28:ad:
da:f3:70:ac:b5:b7:83:d7:e3:77:7a:66:be:d9:cf:7f:d3:b5:
8c:9b:35:d5:ad:fe:d9:8f:df:71:29:8c:db:65:bb:87:02:21:
6f:81:36:6f:7e:a2:fb:54:70:d5:aa:9a:fa:a1:d4:23:6a:6e:
c2:3d:43:b9:7e:20:ba:97:eb:b1:8d:87:f3:a0:78:b2:69:13:
54:9a:68:a2:ab:19:ec:46:d0:8b:51:6a:26:da:1b:33:2e:e1:
c5:01:d1:77:6d:5f:51:85:bc:38:ca:61:59:41:e7:dc:01:19:
a9:cb:a9:83:fb:1e:04:25:e7:58:13:28:fd:d8:27:26:48:f1:
05:f7:58:39:b3:65:05:2c:a8:ab:46:04:7c:10:b6:22:78:3b:
c6:4f:5e:70:f2:93:3d:c1:3e:0d:cd:1c:8b:26:83:b7:66:6a:
a3:7b:71:31:39:80:ed:d9:00:40:84:fa:f8:64:c4:8f:aa:8d:
28:53:b2:23:e1:ca:4c:39:95:9e:a2:e1:ca:dd:99:97:70:64:
51:3a:ea:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:21:10 2025 by rpki-client