Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/H3yBmPKscfCyOVPL5u0XT16TGtY.roa
File: H3yBmPKscfCyOVPL5u0XT16TGtY.roa (raw, json)
Hash identifier: 21esYjcsxUdYx+SWy5jSri3xSGCf7fAi8corQHwR0fI=
Subject key identifier: 1F:7C:81:98:F2:AC:71:F0:B2:39:53:CB:E6:ED:17:4F:5E:93:1A:D6
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 018281191B8EFAF7622D964DAB28D176A041
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/H3yBmPKscfCyOVPL5u0XT16TGtY.roa
Signing time: Tue 09 Aug 2022 05:34:42 +0000
ROA not before: Tue 09 Aug 2022 05:34:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203979
IP address blocks: 2a06:a005:454::/48 maxlen: 48
2a06:a005:45a::/48 maxlen: 48
2a06:a005:5a8::/48 maxlen: 48
2a06:a005:455::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:81:19:1b:8e:fa:f7:62:2d:96:4d:ab:28:d1:76:a0:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Aug 9 05:34:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1f7c8198f2ac71f0b23953cbe6ed174f5e931ad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:33:fc:9e:25:63:96:51:25:31:fe:ca:97:d9:
82:cd:96:cc:a4:ed:ba:36:5e:9d:2d:7e:1f:0a:70:
c1:8b:46:0a:2e:39:57:d2:65:e3:9f:f4:a7:90:df:
7a:62:1f:f2:f4:27:85:4c:3f:a6:0f:7a:75:53:3c:
ab:48:68:ba:d4:35:07:c1:3e:dc:0c:98:26:46:93:
5d:42:1c:d5:c2:a4:b9:ba:ea:2c:66:c2:ae:96:d2:
c9:24:ed:f9:35:8e:27:a9:27:cc:63:71:ae:36:fd:
d5:10:f6:3a:37:6e:8a:fb:82:bf:72:4c:5e:56:54:
e7:93:6a:de:e6:3e:ae:38:e5:46:d0:0f:b5:49:e4:
af:24:49:f2:fb:f9:90:5a:b7:20:68:44:1c:76:cc:
10:a6:a1:c7:f0:a7:70:87:af:ce:a2:18:31:e0:15:
c5:e9:a0:6c:9c:8b:6c:d9:f0:bf:07:2b:d2:5a:e5:
99:cf:55:5a:e0:9d:84:36:12:2f:ea:ec:07:9b:c0:
d1:3b:6f:17:b2:2b:61:fb:19:4a:a8:b7:0d:82:d5:
85:a9:d6:76:97:ef:7b:ac:ff:66:ae:2f:8d:d1:ab:
a0:42:ef:2d:88:95:8e:4e:15:67:f0:80:33:14:5c:
a1:e1:49:2b:02:df:d9:cd:f9:3f:50:f1:59:c9:5a:
1d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:7C:81:98:F2:AC:71:F0:B2:39:53:CB:E6:ED:17:4F:5E:93:1A:D6
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/H3yBmPKscfCyOVPL5u0XT16TGtY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:454::/47
2a06:a005:45a::/48
2a06:a005:5a8::/48
Signature Algorithm: sha256WithRSAEncryption
27:51:83:5b:33:78:18:d2:e0:ee:6c:d7:c7:8c:04:f4:b7:08:
53:28:45:7a:7a:cc:3c:83:c3:fc:be:99:0a:47:e0:31:fc:eb:
41:ed:18:71:cd:58:d1:47:1a:69:7e:f6:ed:16:24:9b:24:19:
e9:81:ce:6a:7e:0c:8f:35:38:05:cd:65:84:8f:f4:05:2b:5c:
a4:68:a5:b4:20:84:f1:5a:36:37:5a:92:f2:23:88:46:d4:7f:
75:3c:69:a6:b3:67:61:f5:d9:59:56:f3:1b:fe:22:f3:34:5e:
d6:37:ca:27:ae:4d:d0:ac:a5:3b:7f:e6:12:5a:e0:1d:12:25:
85:cf:ce:e0:4a:8d:3e:46:99:e7:ba:c8:11:fd:e4:c6:93:96:
db:18:04:f1:39:41:2a:7f:14:2d:75:b4:90:89:17:5b:85:32:
4c:da:1a:a7:29:e6:a9:09:07:45:ef:ee:89:a2:74:03:84:f4:
83:27:ad:1c:bd:07:11:67:64:80:11:a6:9a:9c:89:fc:dd:3a:
dc:ac:5c:80:aa:59:03:a9:e1:24:3d:4e:fc:f1:22:d9:2a:d8:
be:15:5e:6a:d9:6b:f6:8a:ee:0f:50:73:d2:b7:e7:f2:7a:37:
6b:64:d8:42:4a:bc:6a:28:e3:5d:34:14:88:ed:fc:fc:d2:01:
69:fd:5f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:10:52 2025 by rpki-client