Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/7dHyDhGGO71nx2x5l0RfkRrht1o.roa
File: 7dHyDhGGO71nx2x5l0RfkRrht1o.roa (raw, json)
Hash identifier: dTxmGX4Fcl6k5y3LgblqYzWpqtjSfoUs0czMD4npqVo=
Subject key identifier: ED:D1:F2:0E:11:86:3B:BD:67:C7:6C:79:97:44:5F:91:1A:E1:B7:5A
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01820E1E6A9D0065DB9C2F406485F6CD8F5F
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/7dHyDhGGO71nx2x5l0RfkRrht1o.roa
Signing time: Sun 17 Jul 2022 21:44:10 +0000
ROA not before: Sun 17 Jul 2022 21:44:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210387
IP address blocks: 2a06:a005:5e1::/48 maxlen: 48
2a06:a001:a0f0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:0e:1e:6a:9d:00:65:db:9c:2f:40:64:85:f6:cd:8f:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jul 17 21:44:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=edd1f20e11863bbd67c76c7997445f911ae1b75a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:dc:8d:05:03:36:09:a2:ab:59:fd:59:70:ac:
7a:66:5d:aa:46:55:cd:40:37:b2:62:90:b9:c9:81:
25:0b:bd:d7:14:2f:b0:03:6d:63:43:d4:23:bb:f9:
cb:10:30:65:c6:fb:c1:c0:62:1d:62:9c:39:31:f9:
f8:5e:07:6d:0e:6b:a4:44:68:d0:61:04:5a:6c:cc:
20:2c:ed:2d:1b:cc:bf:7b:25:c7:7f:1d:a4:a0:28:
d0:c3:67:5c:7d:c5:ab:a1:30:ef:7c:e5:3e:b2:81:
d6:ea:b5:2d:43:c4:9b:7a:b9:76:da:8b:e3:b9:d1:
0c:84:87:ed:47:ff:02:6d:95:77:81:ac:d3:89:37:
a2:b7:71:a3:a4:df:c3:23:12:5e:5d:fa:11:d1:ee:
40:eb:37:53:2c:58:7d:bd:53:ee:00:35:4d:61:88:
e4:b1:43:dc:45:3c:6c:fb:5e:44:7c:b9:73:83:cf:
0f:ac:18:f8:a7:c0:aa:70:76:0d:29:1f:e6:b3:e9:
34:87:6a:26:f4:81:84:97:27:64:38:7d:27:d6:11:
94:af:c9:41:82:16:27:5c:19:0d:76:c0:78:11:5f:
f1:fe:77:0f:ec:28:e1:71:c5:80:72:f3:d0:b3:79:
84:35:e0:10:7e:55:c6:44:a5:9a:ee:90:78:2f:e8:
66:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:D1:F2:0E:11:86:3B:BD:67:C7:6C:79:97:44:5F:91:1A:E1:B7:5A
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/7dHyDhGGO71nx2x5l0RfkRrht1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a001:a0f0::/44
2a06:a005:5e1::/48
Signature Algorithm: sha256WithRSAEncryption
6c:89:da:5c:05:ed:bb:d0:5a:6c:ec:c2:7f:6d:2e:30:e6:74:
d0:67:10:74:8b:67:ae:99:12:d2:95:47:87:0f:5d:40:63:fa:
e6:61:35:2f:4e:b5:f4:34:37:79:d1:e6:41:ab:7d:99:52:40:
9b:28:f8:06:68:ed:6b:c8:76:36:00:1a:5f:cd:17:55:71:8b:
17:a9:5d:9d:0a:4c:c2:a4:33:38:d9:92:5a:06:05:da:0f:bc:
80:38:19:35:2e:16:28:59:f3:50:8a:95:d0:88:6a:0c:0a:50:
f6:71:87:4e:9c:b7:0e:19:25:b2:b7:86:d0:54:62:cd:2f:76:
1b:0b:69:db:f0:bd:49:53:df:96:55:8c:cb:f7:e1:13:00:37:
3a:50:f3:d7:e1:29:3b:b9:b3:43:44:97:19:f8:50:25:25:97:
99:4f:2f:a7:7b:47:f7:d0:24:4b:31:0e:19:c9:c7:20:ea:eb:
82:39:9d:a6:78:fe:10:95:5d:3f:5b:f7:84:c3:d8:88:e0:a0:
55:dd:5e:7c:02:1d:ac:a7:76:3d:1f:b7:c7:8e:9d:f4:4e:df:
91:46:a7:4c:55:bb:f0:74:f7:b1:81:ec:95:b9:89:64:31:6d:
c9:e8:b5:25:27:7f:52:4e:63:8e:3f:b7:a0:8b:bb:e4:6e:48:
56:60:7b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:38:52 2025 by rpki-client