Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/9eJnQcZt4vnr2iorAfeSkBQSoCE.roa
File: 9eJnQcZt4vnr2iorAfeSkBQSoCE.roa (raw, json)
Hash identifier: anWuI8qMBVvcDbNnL4kkFeEdYGcxCjEqCyJAg6gX26g=
Subject key identifier: F5:E2:67:41:C6:6D:E2:F9:EB:DA:2A:2B:01:F7:92:90:14:12:A0:21
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 018234C2E4D9D5A84AEE3669C3BD24D8A0AB
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/9eJnQcZt4vnr2iorAfeSkBQSoCE.roa
Signing time: Mon 25 Jul 2022 09:49:23 +0000
ROA not before: Mon 25 Jul 2022 09:49:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206016
IP address blocks: 2a06:a005:a0c::/48 maxlen: 48
2a06:a005:db0::/44 maxlen: 48
2a06:a005:990::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:34:c2:e4:d9:d5:a8:4a:ee:36:69:c3:bd:24:d8:a0:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jul 25 09:49:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f5e26741c66de2f9ebda2a2b01f792901412a021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3f:7c:a5:30:e8:b3:3c:1c:25:59:bb:b8:cf:
8d:ad:b2:f7:1e:cb:55:e8:7b:fd:c0:75:f4:ab:38:
19:a3:eb:63:71:a7:f6:d5:66:48:b5:96:0e:01:0f:
bb:87:62:25:00:48:f8:a9:35:7c:dd:39:bc:d3:f3:
1a:10:71:51:99:1e:d7:71:4d:f7:f8:f8:22:e6:75:
65:f4:c8:b1:19:78:a1:b6:02:b0:1d:ff:f0:28:0c:
3b:cb:c4:c7:fb:1e:2e:f0:76:c6:9d:3b:b8:98:3e:
e2:dd:a3:dd:50:11:08:49:21:98:8c:f9:58:3c:3a:
38:a6:ca:52:99:2e:b8:7c:6a:4e:d1:e4:7e:5d:f7:
b3:fe:9c:79:05:f5:5c:75:1b:53:11:d7:28:ae:06:
1b:a1:ff:2b:92:5c:ef:c4:3b:e0:05:11:cb:69:6c:
f3:02:98:74:7e:2e:0e:06:f4:90:c6:fc:1a:f0:6b:
d2:a8:6a:24:ba:b3:f6:b8:77:6a:d2:0d:d6:2e:1f:
a7:7c:a6:44:b7:26:7b:2f:4f:bd:d0:8e:6a:58:68:
59:5b:c0:3c:f1:2c:16:ae:d3:04:03:58:f0:cf:db:
d9:85:5b:a2:9c:43:c4:26:e8:1f:47:01:85:45:d2:
b0:17:87:e4:0d:b7:09:4c:81:a4:e5:eb:4c:a6:d2:
83:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:E2:67:41:C6:6D:E2:F9:EB:DA:2A:2B:01:F7:92:90:14:12:A0:21
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/9eJnQcZt4vnr2iorAfeSkBQSoCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:990::/44
2a06:a005:a0c::/48
2a06:a005:db0::/44
Signature Algorithm: sha256WithRSAEncryption
36:16:b2:c7:60:de:e7:38:f4:12:49:68:33:a4:76:b2:2a:ab:
dd:52:26:61:3e:04:10:42:d5:9c:c6:df:6c:ec:2f:24:7f:97:
9b:d2:3a:4a:35:48:d5:1c:93:ed:fa:c2:e1:93:5b:57:f0:91:
31:fb:59:71:54:20:32:9e:2f:99:0e:1a:dc:07:c3:d1:65:bd:
df:69:54:c5:bc:4a:5f:cf:f9:57:df:dd:e8:3a:9e:77:35:db:
7e:70:35:0d:78:f5:8f:04:e8:18:3a:e9:65:4f:a3:b1:44:e7:
5c:73:63:1c:39:19:ed:88:4b:43:00:43:d6:7c:91:80:f7:50:
e8:29:3c:45:92:e3:1b:4c:45:0b:c3:cf:37:97:f7:2e:7c:0f:
64:a0:c7:d0:42:9c:58:aa:6d:e5:f5:0f:75:e1:e6:6d:a9:43:
d3:84:49:0b:11:a6:33:58:74:e7:2f:9e:1f:13:12:85:93:d8:
8a:26:bb:61:94:ce:9e:49:e4:19:6b:46:f0:17:cd:8f:e8:aa:
1a:ff:bd:98:7a:27:b8:ac:93:e3:fa:2a:a7:0f:ca:55:90:6e:
7f:85:ed:65:20:ef:d9:06:c7:62:ed:e0:e1:e3:ab:46:23:3d:
93:c5:ff:51:3f:0b:38:4b:28:01:6a:03:58:fe:03:12:ff:06:
46:1f:b6:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 01:59:05 2025 by rpki-client