Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/EZRvo7pANL0ukUawCKjCNTDRVyc.roa
File: EZRvo7pANL0ukUawCKjCNTDRVyc.roa (raw, json)
Hash identifier: aJkPaAy0guTWEqoH6olOC7AF66DXJJdpqHhVF+7CVpU=
Subject key identifier: 11:94:6F:A3:BA:40:34:BD:2E:91:46:B0:08:A8:C2:35:30:D1:57:27
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0184D790169211FE9C556E571104ECE4B1E5
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/EZRvo7pANL0ukUawCKjCNTDRVyc.roa
Signing time: Sat 03 Dec 2022 10:37:35 +0000
ROA not before: Sat 03 Dec 2022 10:37:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211390
IP address blocks: 2a06:a005:2370::/44 maxlen: 48
2a06:a005:1d56::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d7:90:16:92:11:fe:9c:55:6e:57:11:04:ec:e4:b1:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Dec 3 10:37:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=11946fa3ba4034bd2e9146b008a8c23530d15727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:75:78:51:27:65:71:c2:20:6e:40:81:20:3b:
db:a1:f4:9f:59:04:0b:93:f0:55:1f:a0:92:c9:e3:
87:09:84:9d:5d:17:a6:46:fc:bb:80:dc:13:56:a1:
a6:d3:3c:06:36:bf:31:20:ce:89:ea:ca:ad:e4:6b:
da:31:26:c9:5d:50:8a:f4:47:f0:5a:4c:08:6b:c2:
38:48:0f:69:81:54:d3:85:f8:33:57:87:b6:80:c4:
9f:69:64:6b:f4:62:d5:42:f8:58:a8:fa:f6:8c:40:
63:d1:bf:72:e2:a4:e2:f7:02:ff:af:da:2f:62:ff:
8d:5f:f9:91:8c:a4:63:c6:66:ab:67:09:84:ff:3a:
de:e9:a2:37:b3:89:78:ff:d9:f0:f3:ea:9c:3d:d5:
fb:c4:f1:b6:61:0e:56:00:18:66:a1:f0:57:e0:27:
7f:4e:01:a3:24:ff:40:14:ff:99:e6:32:22:b2:b8:
dc:64:97:71:56:dc:d4:fe:61:43:1b:1e:16:d5:f1:
73:f9:39:01:f2:03:20:a2:e5:34:97:0d:89:94:8c:
21:10:3f:88:e6:e0:bf:5f:c5:fe:6b:8c:25:dc:0b:
06:d4:41:38:f8:59:88:cc:68:fa:9f:cb:ab:0d:b3:
e6:2e:3c:97:c6:30:11:cc:43:5c:67:67:81:db:a2:
7d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:94:6F:A3:BA:40:34:BD:2E:91:46:B0:08:A8:C2:35:30:D1:57:27
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/EZRvo7pANL0ukUawCKjCNTDRVyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1d56::/48
2a06:a005:2370::/44
Signature Algorithm: sha256WithRSAEncryption
52:f8:58:27:dc:16:4a:28:6d:19:fb:a9:bf:6e:29:8a:27:38:
ca:1f:17:e7:29:aa:1c:f1:de:0a:6c:30:bb:b0:a6:ac:2c:43:
f7:39:b2:e0:9c:09:14:44:f7:a3:c9:70:8a:71:5f:22:ba:0d:
69:8d:2d:d2:6f:3a:6b:ed:d7:4d:f3:3c:13:ac:81:d5:12:21:
d3:33:52:8b:bf:68:00:a9:b6:d9:93:63:c0:3f:23:80:7b:99:
03:66:df:5b:e4:9b:0e:9d:81:7c:b3:52:df:76:14:61:68:1f:
db:ef:01:4d:e5:04:c0:ea:b8:56:a1:45:50:59:2c:95:03:ec:
e2:4c:88:f9:7a:da:a1:d0:a3:ee:7f:04:c6:04:63:f3:a1:60:
0d:1d:f1:44:a9:40:01:ec:59:05:c3:57:75:2a:24:29:c4:e6:
a3:93:99:a3:a4:f3:02:66:5f:84:d1:fa:4d:92:b6:d1:fb:c0:
bb:e6:1e:95:08:51:58:fa:b2:df:fe:08:2c:43:a9:10:0a:3b:
ca:7b:f6:30:a5:f9:d5:20:af:dc:9e:1c:b2:15:d9:b7:ed:2b:
19:1e:91:d1:8a:76:fa:80:62:c9:05:bf:45:a0:8c:1a:13:eb:
67:dd:47:c8:49:7c:ff:0f:18:5f:fa:7b:58:0f:99:b6:47:a6:
8d:49:a5:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 19:44:28 2025 by rpki-client