Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/9k5KIPIY57kEu61XSjqqkBk-4FQ.roa
File: 9k5KIPIY57kEu61XSjqqkBk-4FQ.roa (raw, json)
Hash identifier: SKD6wE9U1fBTia1rUu1RFGYyIzOX25viQyfMd1Lygqg=
Subject key identifier: F6:4E:4A:20:F2:18:E7:B9:04:BB:AD:57:4A:3A:AA:90:19:3E:E0:54
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0184D1BE93946DD4B0BD0729A82458CE58B9
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/9k5KIPIY57kEu61XSjqqkBk-4FQ.roa
Signing time: Fri 02 Dec 2022 07:30:38 +0000
ROA not before: Fri 02 Dec 2022 07:30:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200975
IP address blocks: 2a0a:6040:f500::/40 maxlen: 48
2a07:54c2:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d1:be:93:94:6d:d4:b0:bd:07:29:a8:24:58:ce:58:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Dec 2 07:30:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f64e4a20f218e7b904bbad574a3aaa90193ee054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:32:ac:1c:89:02:d4:1b:c8:84:0b:37:d3:08:
be:6e:27:ee:05:8d:90:f4:d7:f1:03:e0:6d:eb:4d:
4c:3a:c1:78:64:de:56:8e:86:a5:5b:49:1f:5c:a6:
fb:18:8f:7e:cd:fa:5f:5d:4b:fd:06:85:63:7b:10:
f0:70:0e:10:ac:81:9c:03:df:70:58:c3:40:e9:7b:
10:3f:40:77:6d:27:e0:a3:a6:1c:df:26:80:83:b6:
ec:6b:fa:f0:b2:29:d4:32:a2:9e:dc:35:d1:40:00:
fc:a4:dc:c1:8e:6e:03:86:60:1c:08:0a:91:6c:c4:
4e:da:61:d0:44:5f:7d:4b:58:47:93:34:90:0e:cb:
b6:a8:0a:5e:ea:24:03:d5:18:5d:07:03:38:8e:3b:
d1:02:9e:aa:7a:72:10:39:20:09:c3:18:ec:ca:aa:
10:46:87:f5:eb:5d:6e:59:35:a0:11:41:3f:38:fe:
bc:5d:ba:cc:ec:b7:b5:58:ba:72:c8:a9:24:ff:e2:
f2:88:c2:9f:9b:44:45:20:7d:5d:1f:35:81:1b:14:
b0:02:f3:4a:0c:4a:e4:e1:9b:e1:2e:d4:f8:66:d5:
e6:a8:87:49:e2:27:8f:31:99:6a:5c:e7:f8:4f:b8:
a2:d1:f0:7a:60:c6:95:08:98:e2:d3:3d:74:5c:38:
35:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:4E:4A:20:F2:18:E7:B9:04:BB:AD:57:4A:3A:AA:90:19:3E:E0:54
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/9k5KIPIY57kEu61XSjqqkBk-4FQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:54c2:b00b::/48
2a0a:6040:f500::/40
Signature Algorithm: sha256WithRSAEncryption
00:6e:d0:1a:68:da:da:ef:61:30:13:c8:ec:5a:06:4f:0b:59:
6e:c0:c5:d3:eb:bc:3b:58:5f:26:f6:31:36:fe:b0:5e:0b:2c:
84:80:93:16:09:10:bf:86:50:43:01:60:4a:a1:c1:18:05:dd:
87:92:bb:20:03:1f:be:5a:56:14:b6:ed:73:e9:fa:45:48:05:
69:34:d8:db:9c:dc:c0:a3:13:6c:7a:d8:f4:bf:e5:5b:3a:2c:
e1:38:71:43:9a:dd:ef:49:ed:dd:83:e7:c5:f2:28:6b:38:da:
de:2a:fa:d2:0b:3d:ab:e4:27:16:e7:93:ef:16:0c:bb:9e:9d:
e6:19:56:37:ce:38:2f:0c:b8:c2:51:18:2c:eb:1c:45:20:7f:
ec:8e:e9:c2:16:0c:1a:aa:b8:90:64:b9:8f:b3:28:80:46:c4:
2b:3c:9f:82:b8:b2:81:da:5c:d8:f7:0f:d8:99:bb:7a:54:85:
5b:1a:52:3d:80:a8:9f:43:33:14:5d:d3:8a:8b:99:8f:8d:1c:
83:ae:b6:fb:35:d4:20:6a:55:b9:1f:8f:19:a1:91:ce:7b:7a:
71:76:1c:08:bf:37:61:e9:31:5c:80:4b:00:7d:8d:e9:ae:03:
66:f1:c6:69:93:e0:84:3d:6e:c8:42:ef:55:8d:3f:4a:f7:cb:
6c:d7:76:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 00:55:30 2025 by rpki-client