Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/H_ZYG8J6KCFRofJH33SFUE9SA54.roa
File: H_ZYG8J6KCFRofJH33SFUE9SA54.roa (raw, json)
Hash identifier: yTlHjQMyS9c4iqRytBCCKvWaEiRJysa68GUujPdVwuk=
Subject key identifier: 1F:F6:58:1B:C2:7A:28:21:51:A1:F2:47:DF:74:85:50:4F:52:03:9E
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 018474E08FBEB052E0ABC18E6BEC8A8F66E1
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/H_ZYG8J6KCFRofJH33SFUE9SA54.roa
Signing time: Mon 14 Nov 2022 06:43:04 +0000
ROA not before: Mon 14 Nov 2022 06:43:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203888
IP address blocks: 2a06:a005:d22::/48 maxlen: 48
2a06:a005:b60::/44 maxlen: 48
2a07:54c2:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:74:e0:8f:be:b0:52:e0:ab:c1:8e:6b:ec:8a:8f:66:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Nov 14 06:43:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1ff6581bc27a282151a1f247df7485504f52039e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:28:65:82:d5:17:52:c5:43:c5:7a:3f:d7:bb:
f1:52:6c:b9:73:ab:4e:79:ab:38:5a:27:5e:ea:bd:
f3:d2:ee:48:eb:97:06:43:3c:f7:54:07:87:15:cb:
11:b9:ae:9c:4c:dc:f8:97:24:14:8d:27:78:ec:64:
c6:cd:cc:a3:64:48:3f:6a:45:70:5f:b2:74:99:3b:
2c:f1:20:0c:8d:46:e2:87:5d:38:e7:f2:f6:b9:9f:
67:82:36:9f:61:f2:92:82:6a:f7:a1:df:eb:28:59:
50:07:44:67:db:9e:c0:a5:eb:1c:cc:2d:85:d7:2c:
e1:e3:b8:2f:41:b3:b6:05:7a:bb:08:c0:4f:ae:1a:
02:8f:18:8d:d5:3e:63:df:68:d5:a1:36:d1:eb:6a:
de:7e:09:60:90:9e:7e:bb:f8:65:92:b3:2f:d2:a4:
fe:48:fe:3c:00:23:45:83:2b:81:76:ec:91:c5:33:
d4:b5:87:8b:35:5e:cb:2f:6d:25:08:5f:c8:8d:07:
bb:0e:f0:e5:0c:66:f8:e8:71:8e:f6:b6:0c:5a:13:
d0:1f:28:4d:ab:a8:8d:28:87:78:fe:b0:38:42:1d:
1a:75:eb:37:07:7e:ba:62:d7:eb:d6:7c:b3:72:b7:
a5:26:39:d9:96:f5:e3:f6:f3:7f:7d:5b:1f:e0:6b:
af:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:F6:58:1B:C2:7A:28:21:51:A1:F2:47:DF:74:85:50:4F:52:03:9E
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/H_ZYG8J6KCFRofJH33SFUE9SA54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:b60::/44
2a06:a005:d22::/48
2a07:54c2:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
51:ac:f4:c0:a6:b7:a0:bd:2b:ab:60:8a:ec:37:6c:33:f1:d1:
eb:2b:51:61:b7:29:1f:aa:8f:5f:a8:c9:93:aa:b8:0e:9f:28:
9f:a6:9c:21:71:2b:16:f5:17:09:a0:17:86:4f:41:50:44:9f:
ea:17:a5:31:2e:73:3c:16:d2:0b:c6:2c:7f:d5:c6:6a:5c:bf:
9e:fe:c0:51:84:9a:6b:a8:39:07:c8:44:72:96:65:5e:16:b2:
a8:8d:e7:3f:76:dd:9d:fc:31:2f:cf:b9:f5:d3:82:51:80:cf:
d6:d0:ae:07:2d:6d:d4:e4:99:a7:eb:50:da:ce:c1:ae:e8:c9:
cd:d7:b2:f2:c5:6c:ce:15:49:4d:30:7e:7e:32:30:c1:82:fc:
9d:5e:cc:03:0e:a5:c9:b1:04:de:c4:f4:2c:39:69:7b:98:bb:
b6:c0:27:8d:a5:f8:82:f6:0a:63:db:81:d9:78:2e:37:51:79:
1c:f3:1a:ad:92:94:7f:b7:46:86:a4:cd:af:a9:d2:ea:1b:2b:
d6:02:0c:8b:7a:92:70:be:0b:32:d2:cd:b9:14:63:38:47:bf:
be:2d:13:a9:e7:d8:b1:ae:a1:40:36:28:8f:c7:fa:c4:61:06:
dd:f0:10:b2:b4:ea:50:e6:45:79:88:cb:fe:10:10:a9:b4:a0:
50:6d:cb:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:03:31 2025 by rpki-client