Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/89Brkv94q6wUkQwjnNM4L-PaXuE.roa
File: 89Brkv94q6wUkQwjnNM4L-PaXuE.roa (raw, json)
Hash identifier: YWHbasgQtqM75v13kiHUlGfFLXXRiNJeR4nSQh9jkoY=
Subject key identifier: F3:D0:6B:92:FF:78:AB:AC:14:91:0C:23:9C:D3:38:2F:E3:DA:5E:E1
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 1A878F62
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/89Brkv94q6wUkQwjnNM4L-PaXuE.roa
Signing time: Thu 02 Jun 2022 20:34:20 +0000
ROA not before: Thu 02 Jun 2022 20:34:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204857
IP address blocks: 2a06:a005:be0::/44 maxlen: 48
2a06:a005:b70::/44 maxlen: 48
2a06:a005:bd0::/44 maxlen: 48
2a06:a005:b80::/44 maxlen: 48
2a06:a005:b90::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 445091682 (0x1a878f62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jun 2 20:34:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f3d06b92ff78abac14910c239cd3382fe3da5ee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:83:77:5f:a7:48:b5:9c:a6:a8:c4:83:b2:f0:
93:72:b7:0b:a0:67:3e:a0:c3:a5:a4:eb:48:19:7c:
17:3b:12:e3:0c:ea:7b:ab:11:19:80:b0:1f:46:04:
df:58:0a:9b:0f:5c:84:db:1a:a9:ca:33:d9:0b:15:
05:e0:ff:7a:ba:5f:ba:aa:4f:d6:36:49:af:1d:d8:
77:42:ef:df:57:ad:fa:6f:dc:e6:be:aa:5c:77:3d:
f3:ba:db:0f:6a:e2:0d:6e:b0:a6:48:21:f0:8a:f4:
3f:63:0f:76:d4:26:65:65:6e:91:b9:06:d3:15:59:
aa:68:dd:a9:49:5a:10:97:cd:99:d5:61:b9:71:e6:
49:b0:18:1c:2e:01:38:1d:40:1c:35:1f:da:d4:4f:
6d:56:d9:d1:70:d5:8b:b2:a5:6a:77:b6:3b:51:92:
2e:56:cf:0d:f9:fd:eb:08:3e:cc:64:48:70:f2:a0:
f1:e0:33:79:8d:91:73:4e:82:dd:00:b7:39:24:de:
62:c5:36:d8:5e:bb:2e:a9:da:64:f7:d6:ae:d5:d3:
d9:51:2a:72:59:2b:d4:04:79:f3:97:fe:bd:78:bc:
c0:02:c2:a8:45:2e:30:4a:ad:a9:98:86:d4:d6:04:
bb:c9:ac:88:cf:1e:fb:89:d6:f0:f8:fd:87:40:27:
8a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:D0:6B:92:FF:78:AB:AC:14:91:0C:23:9C:D3:38:2F:E3:DA:5E:E1
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/89Brkv94q6wUkQwjnNM4L-PaXuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:b70::-2a06:a005:b9f:ffff:ffff:ffff:ffff:ffff
2a06:a005:bd0::-2a06:a005:bef:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
1e:a3:8e:a4:04:bb:1a:f0:fb:bc:79:1f:b0:1a:a3:f9:d7:9e:
1c:bb:aa:20:3e:35:92:a6:af:71:3a:c8:e8:9f:82:05:dc:ad:
91:2a:e2:67:80:7f:cc:02:0f:e0:2c:63:21:23:86:17:6f:3b:
ef:6d:df:b1:d1:57:76:f3:fd:0e:ed:85:04:bb:e5:45:1f:2d:
52:89:97:7b:22:2a:b7:6b:37:77:1f:d2:38:eb:9c:d8:c1:6a:
07:bd:1f:7c:5e:c0:dc:26:f2:6e:d1:2a:34:f6:e5:94:87:68:
0f:47:37:0f:5f:07:f6:38:b3:40:a8:7f:a5:2b:04:4a:81:78:
e2:b8:4d:f2:d6:91:05:c7:70:4d:41:f4:fe:5f:d1:6e:6f:f1:
b8:03:bf:78:25:78:5f:da:2e:fd:ad:bd:3e:07:92:e5:3c:d9:
7f:af:79:c4:f0:88:c7:1d:66:63:f1:16:41:a2:26:dd:be:71:
e1:8b:05:e2:38:7b:f2:ca:d6:df:e0:1a:20:64:bb:3b:88:57:
1c:d8:80:e3:df:70:5b:b7:97:49:35:34:95:3f:59:0d:43:49:
6a:55:26:ab:9c:a3:d2:e9:95:ca:13:ce:51:6b:9a:af:d5:76:
30:e4:8b:66:5a:5b:f7:5c:2f:44:c1:d1:ca:91:4b:c3:cd:7f:
e9:d8:27:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:49:20 2025 by rpki-client