Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/9D_06sxmQPpi5S3gC7Aahu-TsWY.roa
File: 9D_06sxmQPpi5S3gC7Aahu-TsWY.roa (raw, json)
Hash identifier: GIk+FFQx5e7r45UaZU5vqerZghJn3mjitSCUdEVTbwI=
Subject key identifier: F4:3F:F4:EA:CC:66:40:FA:62:E5:2D:E0:0B:B0:1A:86:EF:93:B1:66
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0183AE6BF49787228725FE59BBE8065F3651
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/9D_06sxmQPpi5S3gC7Aahu-TsWY.roa
Signing time: Thu 06 Oct 2022 17:50:53 +0000
ROA not before: Thu 06 Oct 2022 17:50:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203333
IP address blocks: 2a06:a005:1860::/44 maxlen: 48
2a06:a005:d25::/48 maxlen: 48
2a06:a005:ba3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ae:6b:f4:97:87:22:87:25:fe:59:bb:e8:06:5f:36:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Oct 6 17:50:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f43ff4eacc6640fa62e52de00bb01a86ef93b166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ed:cc:a2:93:70:96:8e:63:1b:cc:95:08:a9:
9f:a9:91:6f:78:df:4f:6f:a7:8a:e6:78:be:36:b4:
a4:fd:28:1c:e6:ed:2f:ac:d7:51:34:0f:b6:49:5b:
a3:8f:28:1a:97:2b:c1:95:17:26:5a:8f:3d:84:bf:
4c:78:19:68:b4:ac:df:e5:59:54:5d:1a:a2:1c:77:
4f:10:41:02:5b:41:81:e4:04:7f:63:1c:79:da:15:
b2:e5:52:d7:73:2c:78:7a:4b:12:f0:14:d1:4a:22:
75:8d:93:96:8c:91:fd:31:53:9f:ad:aa:66:db:bf:
0b:f5:dd:1f:61:50:45:f0:6c:e7:ac:16:1f:d8:9c:
37:cf:69:2f:c8:61:65:45:cf:24:65:86:59:31:92:
09:27:bc:ad:1a:89:ea:0a:df:2e:86:25:7f:97:6b:
c7:57:ef:bd:d0:e6:d3:38:81:a0:dc:a4:57:1e:08:
94:95:a2:1b:8c:d4:c6:a7:ab:66:c6:ba:03:12:e3:
4c:59:b8:97:3d:78:17:e8:6a:46:f1:8f:c5:60:64:
9f:05:bd:40:ab:1c:3a:34:d4:7a:59:64:c9:54:71:
97:fe:29:1b:c2:6a:3e:91:45:8a:a9:da:b4:d9:a2:
80:9a:4c:cb:e7:52:01:0f:92:85:7f:16:c8:c3:85:
5d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:3F:F4:EA:CC:66:40:FA:62:E5:2D:E0:0B:B0:1A:86:EF:93:B1:66
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/9D_06sxmQPpi5S3gC7Aahu-TsWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:ba3::/48
2a06:a005:d25::/48
2a06:a005:1860::/44
Signature Algorithm: sha256WithRSAEncryption
53:04:68:52:02:65:1b:b5:22:1d:13:e0:aa:dc:b6:d7:ea:7c:
92:da:dd:83:09:ea:45:84:72:12:be:f7:26:cd:84:20:5f:2a:
15:86:5d:25:fe:50:94:9b:80:11:04:b3:c3:3c:fa:d5:c8:41:
f5:aa:a7:05:79:12:6f:6c:89:2d:80:14:1d:de:0f:4e:ef:70:
c8:22:a1:78:6c:d0:81:de:31:82:80:df:25:88:20:34:6e:50:
18:0a:7d:f6:51:e3:fb:0f:c0:39:da:ce:8d:db:5a:a7:d9:d0:
72:46:ab:5f:49:87:40:f1:4e:e1:c6:b3:73:a9:d1:9b:2a:eb:
77:4b:45:a6:1e:f9:4d:ea:5b:1e:c6:66:4e:45:5e:e2:c6:fa:
29:03:a2:67:de:be:8e:b0:36:16:05:81:42:96:06:e0:eb:4b:
61:30:ae:6e:e9:3f:03:f0:61:d8:34:16:ae:a5:8a:25:9e:87:
41:59:c9:81:3c:48:47:80:c2:86:66:02:85:a4:cd:40:bc:e7:
2c:9a:06:15:d6:0d:aa:e8:58:bd:47:5a:ff:3f:c7:08:eb:86:
78:57:d4:ed:62:1a:9d:b0:c5:ce:11:06:ba:66:c8:5a:9a:1b:
50:ea:e9:d9:2e:ef:96:ec:6d:91:64:0e:7d:6d:26:9e:a8:f2:
61:3e:78:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:27:50 2025 by rpki-client