Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/BY8ICfmonwnef2H4b03GqlnT2xI.roa
File: BY8ICfmonwnef2H4b03GqlnT2xI.roa (raw, json)
Hash identifier: iKvShMjVgb7l63MdYoRBqNDHxxQ1zYLoDiDSmJ2FXlw=
Subject key identifier: 05:8F:08:09:F9:A8:9F:09:DE:7F:61:F8:6F:4D:C6:AA:59:D3:DB:12
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 018327617EC2529A67C01DC7859CF41CC00A
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/BY8ICfmonwnef2H4b03GqlnT2xI.roa
Signing time: Sat 10 Sep 2022 12:30:44 +0000
ROA not before: Sat 10 Sep 2022 12:30:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203843
IP address blocks: 2a06:a005:1680::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:27:61:7e:c2:52:9a:67:c0:1d:c7:85:9c:f4:1c:c0:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Sep 10 12:30:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=058f0809f9a89f09de7f61f86f4dc6aa59d3db12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:18:88:dc:92:71:1c:a4:7f:6c:9c:94:a6:ab:
88:7c:84:14:5a:a6:a1:1b:34:7b:cd:e1:8a:8f:b5:
fa:7e:a5:d9:67:b8:82:bd:f9:c0:f9:77:90:37:e0:
3f:9d:1d:2a:33:40:ca:3a:b3:d9:f0:7c:86:43:59:
ff:11:b7:28:58:4f:af:c1:e4:ed:b8:dd:09:cf:7a:
b9:4b:49:91:9d:5b:3a:00:2d:47:6a:b7:ba:72:b4:
1a:4f:7b:3a:11:b2:80:ea:f9:1e:81:c3:a8:26:57:
42:60:63:48:d2:fa:bc:89:d3:d8:9d:70:71:02:13:
60:91:49:52:52:52:84:89:d0:b8:f6:e1:59:50:aa:
65:ae:ae:bd:64:f4:ad:4d:79:ad:12:de:60:7f:43:
08:06:8f:69:f1:79:34:a8:6f:ee:30:8a:a8:bd:08:
9b:af:c4:36:f0:da:f3:fb:18:f1:5a:23:40:73:66:
fe:12:08:bf:5b:1d:69:97:9a:1e:bc:4c:5c:66:ad:
04:e2:07:aa:8b:e5:aa:45:7e:7a:49:65:20:cc:4d:
cd:29:0d:b1:e2:46:74:86:5e:de:f5:1e:d4:24:65:
37:b9:7e:41:bf:54:e5:ba:38:44:e4:d6:71:71:1d:
56:81:19:ff:14:56:b3:55:f7:27:4c:4a:92:12:f6:
d7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:8F:08:09:F9:A8:9F:09:DE:7F:61:F8:6F:4D:C6:AA:59:D3:DB:12
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/BY8ICfmonwnef2H4b03GqlnT2xI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1680::/44
Signature Algorithm: sha256WithRSAEncryption
14:a3:08:33:e4:31:e5:c3:8c:64:d4:ba:83:33:d5:b1:84:55:
5a:f1:07:f1:f0:ea:73:65:b7:d8:91:dc:8a:49:aa:74:48:4a:
14:6e:3d:e9:9b:e4:ab:fd:78:65:be:21:11:35:20:19:30:21:
47:43:c6:85:5d:96:8a:78:b6:f4:02:66:f8:a4:a3:61:40:a0:
4f:74:de:8b:78:29:93:a2:9b:2d:aa:f8:c0:da:03:a0:ba:cc:
20:d1:3a:de:85:52:b0:df:57:69:2f:26:79:8a:c2:54:fe:ab:
1e:b0:f7:24:1e:f0:33:02:84:11:5a:1d:f5:71:0d:0a:58:25:
4c:f2:ad:39:1e:4b:b7:71:d8:26:2a:65:49:aa:bd:66:f5:c5:
3a:e7:2f:68:95:9d:29:b4:e6:3a:08:ec:b1:9f:7e:d8:b7:4d:
72:da:39:4a:d4:10:d1:2d:36:02:94:48:a4:74:85:41:00:c3:
5f:7d:b4:0a:21:d5:c6:1c:18:e4:38:ec:a6:03:82:41:ed:30:
20:af:4c:bb:00:c2:8a:78:7f:91:ed:76:70:4d:c2:ac:46:65:
a9:0b:99:18:20:7b:6b:bb:10:c1:83:4a:f5:93:1c:63:9f:ff:
df:72:5d:29:d4:f7:cd:f6:22:fe:09:dc:3b:77:d7:48:ae:9f:
ea:16:e0:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 00:54:10 2025 by rpki-client