Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/7A3GVLbheyjI0O7HTqpjFyTr7zM.roa
File: 7A3GVLbheyjI0O7HTqpjFyTr7zM.roa (raw, json)
Hash identifier: yxh6ez2vSuooDs0Kq4+Z+E7P0YKyj2dCh61VxYgBv28=
Subject key identifier: EC:0D:C6:54:B6:E1:7B:28:C8:D0:EE:C7:4E:AA:63:17:24:EB:EF:33
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 186E7404
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/7A3GVLbheyjI0O7HTqpjFyTr7zM.roa
Signing time: Wed 20 Apr 2022 10:58:41 +0000
ROA not before: Wed 20 Apr 2022 10:58:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 142553
IP address blocks: 2a06:a005:560::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 409891844 (0x186e7404)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Apr 20 10:58:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ec0dc654b6e17b28c8d0eec74eaa631724ebef33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:23:56:83:22:55:19:84:ba:7c:88:48:fa:3d:
3e:61:c1:6e:49:95:81:9d:25:88:01:78:f1:ac:37:
44:20:7b:46:9c:ad:fb:cc:09:cb:fd:40:bc:81:94:
08:1a:e5:b7:2c:d2:47:a7:88:0e:61:ec:de:08:2f:
a6:ff:42:a9:15:98:1e:46:61:c2:09:ab:7b:c9:60:
e1:57:55:d4:ff:3b:a5:cf:24:7b:b4:e4:75:f4:d9:
2c:47:91:5f:15:96:ae:5e:31:9c:dc:2b:67:b9:11:
18:18:36:56:f6:e5:ea:de:19:26:3b:8e:b6:0a:38:
5f:08:9f:63:81:b6:b5:57:76:0b:df:bb:30:cd:f5:
37:ed:14:ac:70:85:93:d0:16:7a:b4:dc:de:42:b4:
3e:2b:10:c8:b0:7b:f1:c6:be:d0:cb:3b:10:7b:a6:
3b:8b:d2:c0:41:d4:9c:25:91:c4:42:cd:f0:4a:93:
8c:60:51:e6:1b:c0:ec:43:7d:cf:0c:54:65:9d:a0:
43:e1:b3:ca:db:bb:29:a2:d9:53:44:47:c9:28:68:
37:37:d0:22:15:6a:f3:b3:91:dd:d2:53:e9:8e:2e:
f8:04:eb:6b:54:9a:1e:d4:5e:20:e6:b7:64:7a:3e:
83:62:e0:f9:74:2b:9d:32:a5:eb:95:4a:25:20:28:
4a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:0D:C6:54:B6:E1:7B:28:C8:D0:EE:C7:4E:AA:63:17:24:EB:EF:33
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/7A3GVLbheyjI0O7HTqpjFyTr7zM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:560::/44
Signature Algorithm: sha256WithRSAEncryption
17:24:34:59:c6:0f:71:a4:ce:71:6a:89:65:e8:61:9a:ca:ad:
6f:20:e7:bd:fd:6a:88:7e:1e:e4:81:59:a1:d2:b8:a1:42:68:
44:a8:74:84:f0:ed:2a:da:e9:8a:a4:4d:61:c4:51:f7:72:42:
3f:4e:bd:ba:c1:eb:4b:ff:7d:4e:2d:2b:4e:bd:ae:0a:ee:78:
a4:6f:11:ed:6e:2a:8a:ea:4d:16:47:3d:66:50:c2:4c:9b:85:
de:31:5f:e4:55:a9:23:aa:3e:49:7a:40:d7:22:52:77:ff:ff:
2e:cc:ee:2f:e2:d4:18:ba:03:ae:34:ff:70:3d:39:d2:cc:76:
20:c8:a9:ba:2f:69:24:74:ff:e3:95:1e:85:ee:4b:87:34:8f:
32:9c:3f:c9:33:12:5e:f1:67:ca:0a:8f:f4:41:80:f5:62:b5:
63:e1:d4:78:80:30:9d:02:86:75:4e:80:0a:17:f6:fe:c1:48:
97:8f:f8:c8:5a:4b:29:e8:c5:fe:b8:c3:88:ec:da:48:ef:99:
ab:08:d2:ff:22:60:99:25:f6:99:e6:01:fb:c9:e3:f8:e8:d8:
39:ff:ff:56:1b:2a:22:c5:a5:64:f5:ff:16:c0:cc:dc:0b:a8:
20:2d:8c:f6:c0:c1:7a:22:44:26:7b:81:46:e9:88:2f:29:15:
70:34:d5:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:53:28 2025 by rpki-client