Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ByxxOZt-syW7wFXZwg8MzN9bvOo.roa
File: ByxxOZt-syW7wFXZwg8MzN9bvOo.roa (raw, json)
Hash identifier: jRrzq9pQzfHqZlg4DRqmabQZyqT4Exn8Hm/+bzj0dGc=
Subject key identifier: 07:2C:71:39:9B:7E:B3:25:BB:C0:55:D9:C2:0F:0C:CC:DF:5B:BC:EA
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01841465D3862C6C6818BF6E2A199F95DEC6
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ByxxOZt-syW7wFXZwg8MzN9bvOo.roa
Signing time: Wed 26 Oct 2022 13:05:28 +0000
ROA not before: Wed 26 Oct 2022 13:05:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213239
IP address blocks: 2a06:a005:d2f::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:14:65:d3:86:2c:6c:68:18:bf:6e:2a:19:9f:95:de:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Oct 26 13:05:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=072c71399b7eb325bbc055d9c20f0cccdf5bbcea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0d:f0:09:a9:e9:4d:98:75:9a:97:f2:fc:6f:
fe:fb:c3:76:4a:4a:56:c1:47:5b:57:f5:ca:36:90:
5d:4b:6b:1a:14:1e:7b:09:76:dd:3a:da:57:a7:29:
39:71:2e:5d:11:c3:41:1f:a6:d4:a2:1a:15:ce:de:
67:ac:0e:a5:5f:50:54:80:33:7b:6a:d1:3c:82:3d:
24:c6:21:c9:fc:e9:8b:1b:fe:87:4e:17:42:db:4e:
30:ea:e1:26:98:f3:81:b4:56:5b:e3:12:c5:9c:a9:
4d:2f:81:47:26:32:25:b1:1e:ba:53:7e:07:76:3c:
f6:61:0e:39:14:b3:4d:26:48:c1:27:78:ce:19:a1:
6e:d7:f8:60:4b:7c:a5:18:f4:b0:ac:09:a2:36:8a:
9a:3e:bc:87:4b:ec:a0:69:dd:92:c7:d1:d6:eb:0b:
a3:ef:b9:28:8d:8d:5e:96:2f:0d:1f:41:5f:f8:53:
97:16:1d:b1:4f:0e:05:7b:52:7a:69:dc:af:c6:b0:
81:b9:ea:7e:b1:15:2f:be:ab:11:aa:47:63:b4:ab:
7a:10:58:77:91:a7:e9:65:a7:9b:09:56:7a:89:39:
f8:a4:ab:de:ba:2c:da:7b:7e:e2:30:48:e2:71:93:
07:37:a3:73:67:fa:60:34:60:a1:86:09:b2:aa:b7:
1e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:2C:71:39:9B:7E:B3:25:BB:C0:55:D9:C2:0F:0C:CC:DF:5B:BC:EA
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ByxxOZt-syW7wFXZwg8MzN9bvOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:d2f::/48
Signature Algorithm: sha256WithRSAEncryption
66:a3:1c:af:5b:c2:a1:9b:20:99:fd:d2:52:89:d6:2b:7f:f6:
0c:6f:b2:a2:df:c6:f0:db:91:63:99:f2:4a:bb:02:c2:9f:0f:
25:a3:1e:bb:70:2d:c1:23:28:39:e5:d7:6f:7a:d0:f9:9c:f3:
a4:22:5e:5e:37:83:4f:f5:5d:21:26:c8:9a:fb:3a:5e:9d:da:
d2:ad:a0:b4:c8:13:9f:ea:bc:91:94:d9:0f:ae:d5:b9:7e:40:
2e:25:be:59:67:cd:37:63:94:8b:a3:62:d4:70:25:e1:94:80:
a4:b4:06:27:d2:0f:b8:8b:6e:05:1b:57:13:0a:f8:5b:cf:34:
ee:e4:37:7a:31:ac:3a:25:56:a5:1f:f9:86:7f:0e:da:ce:ba:
90:f3:8a:63:97:5f:37:00:64:53:d4:1e:33:13:64:94:2a:b2:
89:f3:c7:49:9a:2b:b1:80:a8:68:61:1d:cb:09:29:93:b2:86:
79:51:a1:44:af:6e:f2:35:26:e8:4a:24:85:3b:29:e5:79:36:
19:15:83:ac:d3:f0:ca:b0:70:cc:d4:fc:e8:ee:45:03:b5:ae:
50:e3:3f:c8:0c:69:6b:70:d8:71:61:cd:c2:58:63:11:47:4e:
e2:17:4d:3b:66:33:2a:44:ed:0a:c3:57:79:c9:2b:e9:b0:c5:
9b:f1:9b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:49:41 2025 by rpki-client