Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/AvSKnrSODeBoH5Mb8Ijv0XaaZoI.roa
File: AvSKnrSODeBoH5Mb8Ijv0XaaZoI.roa (raw, json)
Hash identifier: tvpocui4eXWvGz+kKMftkhku0a1SIztBnfu0seA69aA=
Subject key identifier: 02:F4:8A:9E:B4:8E:0D:E0:68:1F:93:1B:F0:88:EF:D1:76:9A:66:82
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 1812EEBD
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/AvSKnrSODeBoH5Mb8Ijv0XaaZoI.roa
Signing time: Wed 13 Apr 2022 11:34:38 +0000
ROA not before: Wed 13 Apr 2022 11:34:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48266
IP address blocks: 2a06:1286::/32 maxlen: 48
2a06:a005:90::/44 maxlen: 48
2a06:a005:a0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 403893949 (0x1812eebd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Apr 13 11:34:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=02f48a9eb48e0de0681f931bf088efd1769a6682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:32:6e:58:52:65:09:2a:05:a1:68:7b:8a:43:
a9:0d:fb:4c:ed:0e:6f:a1:9a:d1:db:60:4c:5e:25:
f8:03:ff:3f:83:48:86:bc:f3:c1:55:3e:95:84:46:
21:d9:6c:27:09:a5:73:16:ee:2b:05:d8:41:3c:ac:
f5:84:b5:f9:24:58:3e:99:be:17:3f:90:ad:73:05:
ea:ec:b4:fb:6e:a1:e4:07:da:27:1f:96:a5:ef:17:
85:43:97:5a:f4:2a:28:e0:d6:41:a2:26:9b:eb:08:
52:f1:70:03:56:36:95:af:42:5f:8e:ab:06:91:15:
f7:96:aa:df:8a:34:4d:79:66:ef:61:75:a1:f1:ac:
fb:12:17:80:3b:c7:67:e1:a9:0e:64:5c:24:7e:bf:
01:26:2e:dc:26:d8:cb:79:30:3b:8e:72:b2:b2:ae:
d9:1d:d4:f5:b7:a9:7e:6f:ca:b3:89:60:53:95:18:
7f:dd:9d:1b:ed:28:b9:e6:58:0f:f7:39:09:eb:08:
13:07:19:c1:58:02:88:b4:88:16:c1:f1:87:af:83:
23:23:fa:ef:4b:51:83:92:32:4a:77:16:b5:01:1f:
f1:c2:9f:9e:25:6c:0b:bb:92:75:0f:81:47:92:01:
cd:42:e9:2e:be:9a:ca:b2:64:dc:3f:97:84:95:45:
42:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:F4:8A:9E:B4:8E:0D:E0:68:1F:93:1B:F0:88:EF:D1:76:9A:66:82
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/AvSKnrSODeBoH5Mb8Ijv0XaaZoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1286::/32
2a06:a005:90::-2a06:a005:af:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
06:1f:6d:64:86:28:f7:87:53:a5:66:e6:c2:e7:dd:a7:45:9b:
a0:b2:b1:f6:7c:58:10:de:26:45:88:ec:b7:b9:0e:3a:46:c9:
7e:d4:76:8a:76:57:c0:3d:3e:cf:a4:27:19:db:ba:3e:75:03:
8a:63:15:12:fa:65:f5:fd:04:22:41:f1:89:a0:03:16:61:eb:
3f:73:26:0c:09:42:dd:39:11:94:da:0d:c1:67:4b:85:c3:06:
25:33:b0:3a:c0:be:fa:4c:3b:76:45:fb:d3:3f:ee:aa:bf:07:
24:72:fc:59:48:47:c2:ea:47:1a:7e:14:d1:5f:d5:13:a6:05:
a5:8d:c5:a0:16:33:e2:7f:b7:38:91:97:cf:88:4b:a7:07:4f:
c8:ab:18:64:2e:c3:e6:65:ef:9f:c7:70:51:e0:5c:54:d2:03:
12:bd:91:d5:44:fb:37:9d:9e:18:63:3b:35:89:8d:0d:a5:a2:
ec:ce:6a:b1:d1:3a:b3:23:29:b8:15:58:fb:39:35:3e:f5:53:
1b:6a:f5:bb:57:51:1a:7c:9d:a7:a5:ac:ea:f9:c6:cc:e8:36:
9a:1e:9e:cc:6e:fa:4e:18:43:e1:29:bb:f0:af:3b:80:a0:09:
b8:a9:84:83:cd:f3:c2:ff:ee:f6:eb:2b:f9:11:ff:5e:58:e3:
44:26:de:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 09:59:31 2025 by rpki-client