Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/BUdGZFeTEMXDEoC3onxB_cVcS3w.roa
File: BUdGZFeTEMXDEoC3onxB_cVcS3w.roa (raw, json)
Hash identifier: tApL9jT1suhsJIG6Ky0CgnlP8J2K1epx+ydZLk/guq4=
Subject key identifier: 05:47:46:64:57:93:10:C5:C3:12:80:B7:A2:7C:41:FD:C5:5C:4B:7C
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0184C47CC49F826B9D2EE12E81E278DA020E
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/BUdGZFeTEMXDEoC3onxB_cVcS3w.roa
Signing time: Tue 29 Nov 2022 17:43:41 +0000
ROA not before: Tue 29 Nov 2022 17:43:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203888
IP address blocks: 2a06:a005:d22::/48 maxlen: 48
2a0a:6040:300::/40 maxlen: 48
2a06:a005:b60::/44 maxlen: 48
2a07:54c2:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c4:7c:c4:9f:82:6b:9d:2e:e1:2e:81:e2:78:da:02:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Nov 29 17:43:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=05474664579310c5c31280b7a27c41fdc55c4b7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6f:3e:c0:06:0f:32:49:b8:d5:38:5a:55:11:
85:06:08:9f:4c:5e:fc:75:3d:a5:1e:d8:76:8b:28:
1b:88:36:c2:43:3f:c3:19:50:6d:51:4b:e7:2c:b2:
e9:77:33:e4:fe:5f:9d:73:d5:a1:8a:05:a1:bd:2d:
3c:42:d2:9d:08:57:96:2a:40:92:82:d2:ef:90:0e:
00:aa:59:cf:df:1d:3b:0b:19:8b:f6:29:eb:79:8e:
71:f2:56:b4:38:1a:71:ec:09:94:53:16:78:29:78:
f1:b1:3c:dd:49:39:3e:61:b1:f0:39:58:7e:42:fc:
81:1a:5b:de:8b:30:11:91:94:af:8e:6d:a9:1a:6a:
37:cc:80:be:b0:20:3c:5d:71:a5:d4:0b:2e:dd:a5:
68:3c:87:db:5d:36:9c:a4:de:60:3a:56:86:3f:88:
94:d5:bb:d7:c1:b6:2f:c8:2d:d2:74:e5:05:37:e5:
98:07:1d:ae:b6:69:80:33:b6:ea:bc:bd:83:c8:c6:
c1:62:67:a8:8b:57:84:a5:34:82:08:05:71:ef:3b:
5f:ca:59:ea:58:5e:09:0c:48:d1:d9:0d:05:7b:70:
85:96:cd:15:80:7a:4b:7b:80:68:8a:8e:1c:f7:9d:
ea:39:66:00:af:6d:59:e2:78:0d:d0:f1:92:2a:b3:
81:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:47:46:64:57:93:10:C5:C3:12:80:B7:A2:7C:41:FD:C5:5C:4B:7C
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/BUdGZFeTEMXDEoC3onxB_cVcS3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:b60::/44
2a06:a005:d22::/48
2a07:54c2:b00b::/48
2a0a:6040:300::/40
Signature Algorithm: sha256WithRSAEncryption
20:2a:16:a1:27:27:df:2b:98:a2:33:5c:9e:91:66:bc:29:9d:
11:d9:f8:de:05:9c:22:de:de:c3:cc:b2:fe:d6:29:05:29:75:
17:f7:7f:34:c5:7d:45:4e:40:ad:d4:ba:0d:7b:61:60:07:7d:
cf:c0:c5:68:fa:b2:f8:79:a2:0b:5a:28:f9:74:d2:36:ff:66:
89:45:6d:7b:69:36:ca:3c:2d:ad:20:09:36:db:c4:ff:12:d3:
64:99:c0:b9:e2:1f:7d:24:98:fc:e2:63:80:86:01:bb:2d:b9:
62:e5:72:c7:73:56:1c:31:0e:85:1d:ce:88:07:12:26:3e:d2:
dd:9f:fa:ef:63:16:19:92:9b:7b:61:64:5a:03:00:c3:bb:97:
a8:41:0a:a9:0f:55:ea:11:30:4e:48:8b:1e:8e:f9:57:59:8e:
45:0f:b2:40:5e:6b:9b:d4:36:b4:3d:fe:51:14:a6:d6:32:5d:
82:e2:69:5e:95:35:49:7e:36:81:e8:f2:53:d7:fc:71:f5:13:
b9:6e:af:1b:8d:6e:49:e0:3e:8c:bf:f8:7d:c4:f2:f7:c6:90:
7e:c4:d0:f3:7d:1a:95:c0:d9:38:9d:f1:1a:37:29:3a:1e:11:
5e:fb:ad:20:3f:d9:73:df:8e:a9:a8:ef:de:e8:81:70:f0:69:
a5:96:61:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:00:52 2025 by rpki-client