Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/D5Yf0w53nYqwD2oO_UiRaEy3viI.roa
File: D5Yf0w53nYqwD2oO_UiRaEy3viI.roa (raw, json)
Hash identifier: ZAggWOTxAukRpI0K66TbQ6/Aru6QLCetXEE//mlN7no=
Subject key identifier: 0F:96:1F:D3:0E:77:9D:8A:B0:0F:6A:0E:FD:48:91:68:4C:B7:BE:22
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01836806A4E9CA0B8ABA684D17B2328BB95C
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/D5Yf0w53nYqwD2oO_UiRaEy3viI.roa
Signing time: Fri 23 Sep 2022 01:46:49 +0000
ROA not before: Fri 23 Sep 2022 01:46:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202732
IP address blocks: 2a06:a005:1501::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:68:06:a4:e9:ca:0b:8a:ba:68:4d:17:b2:32:8b:b9:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Sep 23 01:46:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0f961fd30e779d8ab00f6a0efd4891684cb7be22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:61:1b:c8:58:48:50:b1:5c:41:0b:69:36:c5:
36:51:e4:09:cc:29:8c:ae:16:7e:f7:07:a7:36:c6:
65:79:a7:8a:23:13:42:aa:05:6d:98:29:62:dd:fa:
a9:e1:a5:a4:eb:a9:80:62:af:66:9b:a2:d2:4d:53:
8d:c7:96:03:55:0b:8a:13:6e:10:ae:03:69:04:32:
83:e7:03:42:d6:90:c7:2d:e6:1d:a8:29:42:4a:44:
77:db:60:ca:34:30:a2:61:ea:49:80:d6:5a:76:05:
52:81:fe:1c:03:27:4c:60:9e:e9:ef:6d:16:f3:a0:
7d:8d:47:cc:f4:21:4b:9f:97:54:25:c5:fd:70:36:
70:6a:d1:85:2f:af:5a:9a:2c:4a:06:75:a3:98:88:
8e:3f:72:5c:d6:5b:7d:07:a6:3e:9d:d8:09:4d:da:
68:d7:5f:cf:0f:c6:88:f3:07:38:07:30:1f:29:4c:
2e:30:6a:b8:4e:cd:14:7b:5f:6d:d4:79:57:e6:27:
17:64:cf:a4:2f:3c:f2:ac:d8:8a:1f:12:5e:31:ba:
2e:b3:a2:95:9b:da:ba:86:12:9d:a3:2d:6e:28:0a:
dc:2c:b9:bc:ef:1d:fe:4d:d8:4b:50:94:d1:d9:37:
7d:02:9d:fb:e0:9b:3a:b7:c8:34:dd:a2:93:90:c5:
da:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:96:1F:D3:0E:77:9D:8A:B0:0F:6A:0E:FD:48:91:68:4C:B7:BE:22
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/D5Yf0w53nYqwD2oO_UiRaEy3viI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1501::/48
Signature Algorithm: sha256WithRSAEncryption
14:d1:bd:2f:5a:61:92:90:8a:63:20:66:d9:70:6e:f6:64:d5:
b6:83:eb:a5:2a:89:24:c0:bb:d7:71:43:52:c5:ac:e7:07:2b:
22:59:90:bf:9a:ac:72:f6:11:dd:76:4d:c0:14:d7:54:6d:21:
8f:28:08:9d:a9:9d:b8:48:f7:a9:6b:18:61:30:ca:fe:df:01:
15:60:ff:ca:68:72:58:09:b7:7f:f0:49:ce:72:64:94:fe:42:
61:fa:e3:47:9c:46:75:1e:c4:74:0e:f0:17:a3:0e:4d:df:55:
03:00:f5:c9:08:af:01:96:91:61:f8:64:fe:4d:5e:c9:18:44:
11:63:ef:2b:df:29:3b:22:ac:9e:2d:6b:2c:41:a6:07:89:15:
5b:69:09:6c:ed:f7:72:6b:20:2e:d6:98:52:69:99:8d:35:6c:
1e:68:8f:56:1d:f8:cf:4e:3b:e2:80:3e:c6:90:a9:c9:e2:a8:
c2:6f:17:c1:68:85:0a:44:a6:65:ca:53:28:1c:26:22:c3:f5:
ca:ad:d7:85:99:78:45:38:00:51:7a:b9:34:7c:99:db:94:c3:
ae:b7:89:a1:2b:f0:59:9c:2a:66:6d:d2:03:c7:56:b5:a2:78:
58:d4:39:53:0c:23:e1:44:0e:e5:a9:ff:ae:71:c6:c6:6c:80:
2f:68:6a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:53:35 2025 by rpki-client