Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/8ciIoUvBYprjq78QYkRwbzsKQho.roa
File: 8ciIoUvBYprjq78QYkRwbzsKQho.roa (raw, json)
Hash identifier: f/4Hy5H6A8NVcQXw8nB2mLMskY0QZ9QcYPRUjY2mtLs=
Subject key identifier: F1:C8:88:A1:4B:C1:62:9A:E3:AB:BF:10:62:44:70:6F:3B:0A:42:1A
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0184D4F0ECB3565D98D903EF1A47E634E6A5
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/8ciIoUvBYprjq78QYkRwbzsKQho.roa
Signing time: Fri 02 Dec 2022 22:24:29 +0000
ROA not before: Fri 02 Dec 2022 22:24:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200936
IP address blocks: 2a0a:6040:d600::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d4:f0:ec:b3:56:5d:98:d9:03:ef:1a:47:e6:34:e6:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Dec 2 22:24:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f1c888a14bc1629ae3abbf106244706f3b0a421a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:50:ef:52:21:47:21:5e:6e:05:01:3f:ab:56:
5d:90:a6:8d:54:f0:22:f8:7a:61:97:73:34:2f:51:
c5:90:1b:de:90:21:33:0a:06:3c:4a:1e:02:8e:ec:
69:bb:36:0d:4c:00:72:1a:25:13:7e:be:ff:e3:a8:
42:e3:e3:fc:87:88:d5:b3:f6:39:ec:b5:d6:41:43:
44:1f:a0:49:cc:9b:e4:b7:66:c5:37:f3:d0:8a:0f:
c0:bb:3f:1d:0d:01:a3:21:ed:27:b2:55:b1:8b:22:
48:02:08:14:8c:2a:a4:af:ec:1f:c6:cd:88:d3:84:
d7:4d:92:ac:db:f2:59:da:ad:92:e6:b8:d8:e4:69:
8e:73:8f:aa:dd:8b:cb:c7:52:0f:fd:0b:26:b5:c3:
54:c3:8b:22:73:f6:97:0e:11:f5:ab:af:4b:0b:a0:
8f:8b:ab:f3:12:93:b6:86:18:42:d0:c8:73:a0:16:
b7:94:ea:24:cf:82:4c:a6:57:4c:52:80:8d:ca:d3:
d0:1d:d0:62:96:21:b7:d9:a2:4f:fa:cf:d8:ba:2a:
b5:7d:3c:8a:d2:9c:73:1e:c8:a3:ac:1f:c1:20:ac:
d0:2c:99:8f:9e:3e:52:15:3b:bd:3c:ab:23:55:48:
06:9a:c8:86:3a:9a:ab:f5:b9:f0:49:08:08:8e:b9:
61:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:C8:88:A1:4B:C1:62:9A:E3:AB:BF:10:62:44:70:6F:3B:0A:42:1A
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/8ciIoUvBYprjq78QYkRwbzsKQho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:d600::/40
Signature Algorithm: sha256WithRSAEncryption
5c:b8:49:b8:25:44:04:9e:0a:be:3e:a4:3a:98:a0:7e:0d:a0:
47:3b:c1:36:64:90:49:94:3f:4d:3b:48:38:b7:23:f4:bf:ef:
55:5a:f9:2e:2d:c6:db:d3:4e:c9:ef:f0:7e:47:cb:b1:71:f9:
a5:2f:f4:58:6f:3f:35:f7:b9:63:f1:9c:6c:21:54:7a:4a:ec:
a5:7d:11:53:77:28:45:cb:13:3f:a2:46:be:a2:c7:d5:b5:11:
c9:eb:97:3a:bb:6a:64:60:17:97:0d:53:ee:f0:4e:90:b3:c0:
f4:36:47:5d:a6:2d:e6:31:a5:d7:fc:c8:b2:bf:59:ef:c7:2f:
d1:9e:db:8f:17:bf:86:fd:83:aa:c1:ed:77:2f:7d:70:f5:71:
5f:5b:b1:04:65:56:60:eb:ba:f7:b5:73:b7:d2:b9:97:1b:8c:
d6:1d:68:3e:54:fe:ab:21:79:4e:a9:0f:a4:58:60:31:74:3f:
df:10:39:5a:d8:f6:a3:6e:52:9d:70:b4:97:ba:d0:d6:6e:e1:
05:84:42:81:b0:6c:5e:5d:7f:6c:41:d6:de:79:d1:ba:80:73:
3f:2c:e0:08:f7:b9:42:14:dd:64:45:a1:08:28:e1:49:c4:3c:
ee:eb:78:71:be:af:bd:27:32:ab:c9:c1:a9:b8:5f:3d:ac:f7:
e2:c3:85:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 19:40:13 2025 by rpki-client