Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Cu3b8CKzrLY3JON_KYHTPHBFPyY.roa
File: Cu3b8CKzrLY3JON_KYHTPHBFPyY.roa (raw, json)
Hash identifier: Ej5a8K04T1t9wxx8Bd9EjN0VmGx+Egtcx+tX1zRqQKU=
Subject key identifier: 0A:ED:DB:F0:22:B3:AC:B6:37:24:E3:7F:29:81:D3:3C:70:45:3F:26
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0184EE8D816B56B0C50E6485CA76E099BAB1
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Cu3b8CKzrLY3JON_KYHTPHBFPyY.roa
Signing time: Wed 07 Dec 2022 21:46:01 +0000
ROA not before: Wed 07 Dec 2022 21:46:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200766
IP address blocks: 2a0a:6040:c100::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ee:8d:81:6b:56:b0:c5:0e:64:85:ca:76:e0:99:ba:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Dec 7 21:46:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0aeddbf022b3acb63724e37f2981d33c70453f26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:32:89:70:27:f8:b4:00:1e:a3:32:ed:e9:cb:
e1:e8:87:4d:62:c0:6f:4f:2d:a5:8c:1a:25:14:6b:
93:44:6e:db:d2:dc:2b:df:f9:c1:33:85:23:a7:df:
be:0e:5e:be:aa:41:d9:15:8f:19:e3:ce:4f:05:51:
ed:a8:ce:75:ae:f6:47:2e:d6:0d:b8:59:a9:c1:ac:
a6:d0:54:cb:27:d4:ed:dc:f1:47:7f:44:cc:07:3e:
f4:a8:7d:2c:da:2e:ea:d2:05:7d:1d:f1:ab:08:68:
a2:6e:63:1d:6c:3c:68:d9:99:d3:d8:62:c7:09:23:
13:45:09:f0:0c:92:85:d4:ec:f4:08:42:30:2f:7a:
41:43:7f:ff:a9:e6:df:53:7b:bd:05:0b:6f:b9:73:
ab:42:be:e6:ce:f7:eb:2d:cc:ab:9d:eb:79:30:6d:
8c:ba:c5:45:dd:f6:a5:78:14:07:86:24:e3:fa:0d:
c1:10:5a:4b:8c:ac:68:63:04:71:cb:68:61:c6:3f:
08:0f:53:1e:6e:83:be:46:47:57:1b:24:d2:0d:ee:
df:5e:b9:2f:9d:06:8a:d6:e4:d1:f2:b3:d8:94:81:
1b:88:83:1e:dc:f7:2f:17:03:45:5a:b1:02:61:33:
f0:38:e0:de:10:d0:7a:ed:30:41:8d:dc:b5:0c:d8:
18:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:ED:DB:F0:22:B3:AC:B6:37:24:E3:7F:29:81:D3:3C:70:45:3F:26
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Cu3b8CKzrLY3JON_KYHTPHBFPyY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:c100::/40
Signature Algorithm: sha256WithRSAEncryption
3d:b4:f1:a6:d9:82:ff:41:cb:99:e3:64:3c:d6:06:0f:a0:9c:
91:96:36:e3:eb:c7:6b:23:c1:f8:21:07:04:f1:7a:93:dd:0a:
73:ce:1d:df:be:1a:19:64:9f:c6:f8:59:23:f6:e1:ba:d4:6b:
e5:80:f6:25:5a:92:6f:f1:98:5e:18:b4:1f:1e:aa:23:a7:48:
7c:61:4a:2b:a4:6e:f4:05:b2:dd:c3:71:45:4d:36:8b:48:f9:
49:6c:e6:d7:2a:2a:12:29:06:af:43:a5:d8:e0:07:11:6b:3d:
c7:8e:51:22:94:d1:cf:4f:69:c4:df:da:f0:9b:b7:83:81:bd:
85:de:48:89:61:1b:8d:2b:cb:ca:49:b5:0d:5d:17:2b:db:ce:
c2:f1:c1:98:33:7f:68:41:a0:fc:af:61:14:59:d7:1c:b1:ba:
b5:91:6e:08:a0:f7:ba:d3:a0:77:5e:4a:b2:c6:95:35:ad:53:
a8:b3:f4:74:d8:b6:c5:0f:32:fc:80:0d:85:be:09:b5:e6:1b:
79:d7:92:56:19:a6:c7:a8:0c:ac:94:04:9f:c0:6f:d9:66:64:
75:51:94:b7:73:36:c6:4e:36:16:dc:16:1a:e1:ed:75:2f:55:
7d:40:78:ce:3d:8b:cd:24:31:fb:95:3e:c5:f8:79:90:10:11:
74:2c:6f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 09:59:31 2025 by rpki-client