Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/EILX7E4TZGUXX4ncbqx9iZbJGts.roa
File: EILX7E4TZGUXX4ncbqx9iZbJGts.roa (raw, json)
Hash identifier: +rZ2rL8sSiv3yS6VquDpLsFi/nSN9r0BXuRc6ditC7k=
Subject key identifier: 10:82:D7:EC:4E:13:64:65:17:5F:89:DC:6E:AC:7D:89:96:C9:1A:DB
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 1A683F27
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/EILX7E4TZGUXX4ncbqx9iZbJGts.roa
Signing time: Tue 31 May 2022 20:18:14 +0000
ROA not before: Tue 31 May 2022 20:18:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204857
IP address blocks: 2a06:a005:b80::/44 maxlen: 48
2a06:a005:b70::/44 maxlen: 48
2a06:a005:b90::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 443039527 (0x1a683f27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: May 31 20:18:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1082d7ec4e136465175f89dc6eac7d8996c91adb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9a:5d:c5:95:df:9d:a7:06:e0:a2:79:fe:99:
a2:99:40:38:e5:b5:ea:97:d5:8a:eb:bd:a7:29:a4:
ce:86:8a:cd:a1:50:26:72:f5:38:d1:a0:69:23:1e:
36:52:d1:ae:59:0b:27:76:1e:06:42:f9:60:03:19:
3b:14:1a:ed:40:ec:84:43:f6:0c:b6:a2:c8:5f:3c:
b8:f3:aa:41:60:06:e8:31:2b:6c:8b:55:cb:65:2e:
6f:cb:a6:68:13:5d:44:99:92:c1:fa:b9:d5:e5:bb:
5b:bd:62:06:f7:cc:db:01:fc:e1:f9:de:1f:af:91:
bb:f3:c3:fb:ae:a1:8a:50:86:e6:a8:e1:15:cc:a0:
c4:5b:ee:a1:7b:b2:35:ee:cf:2f:4f:c1:5b:68:58:
4a:a0:96:bd:d4:26:1c:f7:d0:89:59:47:6b:34:ac:
32:23:1d:c2:eb:2f:f3:04:7a:72:b0:96:c8:82:e9:
6b:39:02:19:a2:a7:b2:cb:9f:ec:c2:d6:59:db:c8:
de:b9:7a:ed:2d:35:0b:63:e0:87:72:04:d1:eb:f7:
f7:da:6c:34:a8:b5:30:bc:43:2e:4e:ee:f1:93:fa:
81:94:4c:4e:d6:fc:6d:b1:a1:e1:b0:f6:9b:e5:5d:
9a:31:45:12:ad:10:41:bb:19:68:dc:60:ec:79:c7:
a1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:82:D7:EC:4E:13:64:65:17:5F:89:DC:6E:AC:7D:89:96:C9:1A:DB
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/EILX7E4TZGUXX4ncbqx9iZbJGts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:b70::-2a06:a005:b9f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
40:e0:cb:bb:62:82:5b:44:81:20:8c:45:28:b5:78:c0:f1:08:
46:bd:92:cf:de:3f:cd:9d:62:d8:07:45:04:97:71:7f:cf:a5:
2d:75:19:2a:f8:64:90:99:ca:80:5f:95:b5:8b:6a:14:a1:01:
5c:65:da:a5:7a:70:f8:25:7e:e2:f2:95:03:96:93:12:81:ba:
60:83:86:cd:7a:69:88:e4:b9:8b:f3:bd:aa:11:03:ae:78:b2:
e1:de:d7:66:01:f9:b1:db:3f:99:0f:44:14:f4:61:4f:41:9d:
50:7f:75:47:bd:99:4d:4c:60:23:82:27:8c:1a:2f:5d:d0:25:
ce:c4:a3:6d:53:59:d1:57:ac:f8:3e:3b:45:82:d3:c1:27:b7:
dd:e1:6c:b1:8d:76:59:2a:c6:c9:bc:c2:8f:35:82:ce:27:7e:
18:34:1f:e3:0d:1f:83:f9:f8:5c:28:65:cd:76:47:a3:0b:b5:
d2:d6:22:1e:e8:b7:a5:cc:5d:3e:91:92:51:18:5f:fb:a8:fa:
0d:29:c7:61:03:ce:43:3c:a7:ab:0a:05:a1:dc:9d:8c:10:24:
e7:42:02:01:0d:96:f5:64:f0:06:24:7f:c3:9e:20:9c:58:33:
46:b1:e4:e8:f6:93:da:79:c2:67:02:1a:69:e2:d1:b0:10:9e:
03:1d:43:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:09:33 2025 by rpki-client