Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/FDoQFV1f_sZsDKzmbMA4jE_-g1I.roa
File: FDoQFV1f_sZsDKzmbMA4jE_-g1I.roa (raw, json)
Hash identifier: 9loNQy6X7vIk8IlG49+WD5ex1NCR1poghAy3AdR0G2g=
Subject key identifier: 14:3A:10:15:5D:5F:FE:C6:6C:0C:AC:E6:6C:C0:38:8C:4F:FE:83:52
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0182F8EF39B804CDD62F25105997CB175D33
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/FDoQFV1f_sZsDKzmbMA4jE_-g1I.roa
Signing time: Thu 01 Sep 2022 12:03:23 +0000
ROA not before: Thu 01 Sep 2022 12:03:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203069
IP address blocks: 2a06:a005:488::/46 maxlen: 48
2a07:54c2:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f8:ef:39:b8:04:cd:d6:2f:25:10:59:97:cb:17:5d:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Sep 1 12:03:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=143a10155d5ffec66c0cace66cc0388c4ffe8352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:00:9b:df:7a:da:0a:03:18:97:8c:e6:ac:ae:
77:bd:27:d9:01:40:92:02:a4:ed:db:5d:bf:a0:9d:
39:d1:47:a7:ea:6f:32:c4:53:19:fa:9c:05:2f:45:
6c:de:a4:fd:bb:10:7b:95:5e:c9:f9:2d:be:04:f9:
29:65:51:21:53:b7:5f:56:51:9a:e6:ac:a9:c4:4b:
d3:84:0a:07:5a:2b:6b:4e:52:04:f4:8d:0e:5b:84:
4f:20:0c:22:f3:0c:28:26:3d:91:60:c7:21:d0:91:
28:cd:22:84:24:62:65:aa:22:a0:8e:a5:38:0a:e7:
72:f9:33:04:b6:c2:c8:8b:16:18:cc:0d:83:83:5b:
2a:4c:67:c5:70:f7:d4:fa:62:5f:5e:55:7f:a7:81:
ba:58:48:aa:86:7a:5c:14:62:39:4c:b3:24:88:af:
b9:da:ce:a0:9d:47:2c:07:11:7f:b7:a9:28:d9:e0:
36:b0:d2:70:cf:5c:53:d7:d2:ce:11:de:3a:e2:df:
5b:c2:d1:58:b3:67:32:4d:f6:46:47:50:af:b3:ab:
5c:2d:23:73:32:cd:cd:5c:27:20:ef:61:fa:98:7f:
19:12:0e:1f:04:11:4b:ea:6f:54:b9:51:cb:1b:f9:
11:19:70:63:94:21:06:1d:ef:90:a0:3b:18:31:1b:
27:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:3A:10:15:5D:5F:FE:C6:6C:0C:AC:E6:6C:C0:38:8C:4F:FE:83:52
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/FDoQFV1f_sZsDKzmbMA4jE_-g1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:488::/46
2a07:54c2:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
43:38:b3:de:db:5e:e4:67:e5:c7:1d:5f:07:24:1a:9f:43:a9:
1e:4f:d1:b6:aa:b8:6b:81:f5:e0:82:24:88:fb:df:80:64:54:
36:18:53:5a:b8:1a:d5:52:78:50:15:1a:a5:6c:22:f0:d2:1c:
f1:d0:34:08:8c:d2:cb:97:14:94:d7:a7:67:29:e3:97:da:31:
c0:b6:4c:ff:d5:18:e4:39:4f:16:59:7d:2d:19:0f:e1:d5:05:
ef:87:45:83:ea:86:8e:d5:87:90:da:ed:46:0d:8d:99:53:05:
0a:9e:51:f7:47:b3:3c:f3:25:a0:73:fc:b1:9f:bf:36:c1:d9:
4f:6f:25:f4:68:f3:fd:bf:13:22:a5:e7:0e:55:49:e0:6a:b3:
66:2f:a4:53:a3:92:61:64:f7:5a:71:99:70:9a:f3:dc:1b:3e:
98:68:a9:87:7b:11:7f:e2:35:6d:f7:a2:67:8b:d9:60:01:ec:
0d:6b:e2:3c:d0:ab:db:8e:39:6a:11:ce:4b:ac:1f:9e:36:6e:
14:52:3d:f2:b3:34:98:63:3d:0d:09:03:44:41:8b:7c:d2:fd:
6f:dc:a0:30:b9:03:eb:b5:5e:a8:f5:55:d9:92:06:1f:20:56:
28:92:1b:56:82:7b:be:db:aa:79:80:bc:6d:fe:53:26:47:ca:
1a:1f:de:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:09:26 2025 by rpki-client