Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/DSj7YYhQpJrpQq8SLA9bWXvIVRg.roa
File: DSj7YYhQpJrpQq8SLA9bWXvIVRg.roa (raw, json)
Hash identifier: WlsqOq9TP/39QFIFGYbGtxFflZdool2ZFGVW35Qm+lQ=
Subject key identifier: 0D:28:FB:61:88:50:A4:9A:E9:42:AF:12:2C:0F:5B:59:7B:C8:55:18
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0184C9EA8C3B20EF77A3E3444946C77374DD
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/DSj7YYhQpJrpQq8SLA9bWXvIVRg.roa
Signing time: Wed 30 Nov 2022 19:01:42 +0000
ROA not before: Wed 30 Nov 2022 19:01:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201733
IP address blocks: 2a06:a005:23c0::/44 maxlen: 48
2a06:a005:2460::/44 maxlen: 48
2a06:a005:2360::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c9:ea:8c:3b:20:ef:77:a3:e3:44:49:46:c7:73:74:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Nov 30 19:01:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0d28fb618850a49ae942af122c0f5b597bc85518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ae:5b:80:d3:03:b9:bd:2a:50:17:b1:90:58:
82:0b:05:f4:3b:a6:f9:c4:8e:fe:f4:02:bf:6b:b0:
ba:f7:2b:6f:0d:b5:27:5e:81:1a:d1:60:0c:40:b3:
b6:8c:23:8e:6a:9b:8c:d0:19:93:ec:eb:80:25:58:
1d:7c:55:02:58:c0:3a:71:67:82:4d:03:13:bd:69:
3c:8f:e3:b8:5c:c7:da:0b:cb:c6:74:00:bd:b5:db:
16:33:35:f2:f9:ae:4e:b8:31:50:f2:ba:c2:bb:a6:
f8:78:38:c2:f3:7d:ed:c5:7d:e3:a3:7b:b8:e0:6c:
56:7e:9d:44:56:c3:c2:82:a0:1b:84:c6:b1:ac:ed:
cb:a1:8d:86:01:71:a9:e2:1a:94:42:41:ad:49:d4:
87:99:85:6b:82:09:f9:c6:44:43:95:ae:80:1c:cb:
75:e6:e4:59:bf:ca:58:1a:a5:6b:9b:f6:a6:02:91:
ef:7c:e8:84:9c:0f:fd:01:41:e2:1f:e1:84:3f:70:
d1:f7:fe:f9:86:0a:af:89:9a:10:ae:d2:5a:25:d7:
b9:d1:94:da:fa:c7:f9:3f:0e:fd:22:18:4d:e3:85:
f2:cb:f7:fb:30:2f:b3:5f:1f:69:82:0d:56:f6:0b:
2c:24:71:88:f4:22:d4:23:32:37:6e:ef:ee:82:d7:
e1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:28:FB:61:88:50:A4:9A:E9:42:AF:12:2C:0F:5B:59:7B:C8:55:18
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/DSj7YYhQpJrpQq8SLA9bWXvIVRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2360::/44
2a06:a005:23c0::/44
2a06:a005:2460::/44
Signature Algorithm: sha256WithRSAEncryption
58:22:fc:b2:bb:0c:67:ac:08:d2:37:6d:83:bd:58:15:9d:c8:
54:b5:91:13:21:e2:83:55:8a:17:fd:f0:9d:48:b1:7c:b3:d4:
40:66:1d:c0:b1:fd:a3:fc:51:28:28:37:69:b7:78:f3:94:4e:
75:55:d5:9b:d2:6a:91:22:63:71:ad:f9:59:b8:1d:c3:37:46:
76:22:01:e4:5b:3c:fe:b7:2d:f0:be:11:2e:44:6c:80:53:72:
46:1f:35:d9:56:1e:9f:c2:43:31:ff:b6:74:64:cc:0c:70:de:
cd:75:ed:93:33:85:97:02:db:45:02:a0:ff:6c:6d:26:c6:e2:
4e:6c:25:84:78:5c:85:23:08:33:65:fd:32:28:48:e9:82:cc:
02:44:80:ab:76:e6:df:95:b4:b7:e9:39:d5:bd:0c:4e:5b:e7:
20:ff:74:84:8b:6c:c9:73:33:9f:be:db:8a:08:7c:a9:65:e4:
4a:f7:29:71:62:bd:9f:6e:b2:bb:42:b3:60:c9:e4:81:0f:25:
27:d9:f1:36:26:5f:f2:c1:b5:f7:f7:b7:3b:c1:12:6c:28:97:
43:c4:d2:6f:13:1a:d9:ae:7c:a9:ba:4b:e9:6f:f1:88:ad:1c:
4e:a6:7a:0b:53:0b:1c:ed:e7:af:99:36:18:9c:ec:6c:a4:18:
c3:c1:e0:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 03:32:38 2025 by rpki-client