Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/D6u9H7n0WELtpQO8SlRmaMSxUAk.roa
File: D6u9H7n0WELtpQO8SlRmaMSxUAk.roa (raw, json)
Hash identifier: CLwVpdAfc4tC0VZQOP0UaQhkRyPekX9f+Uhe+ZhcrP0=
Subject key identifier: 0F:AB:BD:1F:B9:F4:58:42:ED:A5:03:BC:4A:54:66:68:C4:B1:50:09
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 19A5055B
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/D6u9H7n0WELtpQO8SlRmaMSxUAk.roa
Signing time: Mon 09 May 2022 09:17:24 +0000
ROA not before: Mon 09 May 2022 09:17:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210842
IP address blocks: 2a06:a000:200::/40 maxlen: 48
2a06:a005:880::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 430245211 (0x19a5055b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: May 9 09:17:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0fabbd1fb9f45842eda503bc4a546668c4b15009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d3:b6:1b:08:8b:db:26:e4:a1:c1:40:6f:2a:
89:ee:db:50:4a:c0:c4:e9:2f:07:c4:b1:42:63:1f:
64:7d:4b:f2:06:df:1e:65:f5:7a:6e:71:72:64:2c:
45:73:e6:bb:a3:5a:ed:57:d5:82:b0:64:d6:84:61:
18:05:f4:60:a9:46:02:d8:cb:8d:45:30:97:4a:9c:
e9:43:62:1d:54:42:b9:e7:36:7b:ef:07:20:1b:fe:
61:59:36:ba:a1:b8:c7:0c:9c:2e:4f:e8:c6:0e:70:
6e:a7:65:c1:4c:d4:1b:c9:b2:3a:28:cf:0e:d4:9b:
7c:f8:5d:35:ef:e5:65:12:34:ee:22:74:85:00:36:
97:f4:5e:af:68:b8:f9:7a:c3:d1:fe:80:db:af:11:
ef:7c:08:7c:35:d6:b8:09:c2:54:b1:ef:7f:54:e0:
69:b0:ec:b9:ad:6a:9f:d0:ba:d2:48:59:aa:6d:2f:
7c:07:85:e4:1e:f4:6a:3d:15:74:b2:69:42:bc:18:
9a:eb:67:52:38:49:17:6d:d0:d5:be:f1:54:b2:72:
34:6a:bf:a5:f1:0e:aa:36:49:64:6f:37:e7:4b:b4:
09:59:84:39:25:8c:4c:12:9d:aa:5c:6b:49:fb:25:
7a:de:2a:e5:a8:3d:1c:b4:50:eb:fe:f6:06:3c:ff:
86:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:AB:BD:1F:B9:F4:58:42:ED:A5:03:BC:4A:54:66:68:C4:B1:50:09
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/D6u9H7n0WELtpQO8SlRmaMSxUAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a000:200::/40
2a06:a005:880::/44
Signature Algorithm: sha256WithRSAEncryption
42:ed:ef:7a:5b:c5:d4:74:ba:da:e2:62:9f:82:0f:08:57:5f:
b2:ad:fd:2f:f2:41:15:48:a4:df:58:80:54:59:76:b2:d6:b9:
60:6c:06:b8:3b:24:bf:df:e1:91:7d:0f:9b:57:1d:e2:7e:21:
7e:b6:6a:22:77:e2:61:d4:30:5c:64:c3:ee:5a:61:6c:f5:12:
27:d7:16:b0:5c:2f:67:eb:3e:00:04:b9:4f:5b:92:36:0a:ee:
b5:c8:a6:cc:4e:c2:1d:82:16:94:e5:8e:64:df:18:7a:bb:1a:
02:f0:83:5f:a9:09:d7:76:6c:7b:fc:ab:21:19:75:d3:56:7f:
1b:a5:86:e4:bc:ae:5a:b9:83:84:5d:68:44:fe:0c:08:f0:f5:
d8:96:f7:c9:b6:49:5d:74:de:96:a9:8d:82:7f:f8:3b:d1:5c:
73:7a:66:19:e8:e9:2e:91:df:85:c7:37:8b:33:d2:8c:de:e2:
17:98:44:af:8f:59:cd:d5:a8:9e:4b:d5:1e:6c:8c:93:0c:6f:
93:27:6b:5a:c9:07:86:5b:d3:8c:ca:50:49:99:7a:39:8a:cb:
67:07:6e:3b:92:02:d1:e7:f9:ba:5b:61:8e:fa:60:a7:9d:4f:
d0:7d:ad:76:fa:7f:c6:4a:4a:64:c0:80:d8:8c:d8:5d:cb:55:
79:a2:6c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:03:31 2025 by rpki-client