Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/HaKhdSpSKq_nwu_MN4S_s8yrRTI.roa
File: HaKhdSpSKq_nwu_MN4S_s8yrRTI.roa (raw, json)
Hash identifier: l26QsB8ycLn8pRiMmCHrIA7yl13i6NGsYCcIG+p3hGU=
Subject key identifier: 1D:A2:A1:75:2A:52:2A:AF:E7:C2:EF:CC:37:84:BF:B3:CC:AB:45:32
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 1835A60C
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/HaKhdSpSKq_nwu_MN4S_s8yrRTI.roa
Signing time: Sat 16 Apr 2022 20:28:20 +0000
ROA not before: Sat 16 Apr 2022 20:28:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44406
IP address blocks: 2a06:a005:4d0::/45 maxlen: 48
2a06:a005:1e::/47 maxlen: 48
2a06:a005:43c::/46 maxlen: 48
2a06:a005:4e0::/44 maxlen: 48
2a06:a005:1d::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 406169100 (0x1835a60c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Apr 16 20:28:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1da2a1752a522aafe7c2efcc3784bfb3ccab4532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:6a:02:b5:d2:9a:79:ae:23:f3:b5:29:9d:51:
99:9f:58:29:b2:73:09:dc:2f:b9:80:47:f4:e4:b8:
6d:01:c2:d9:76:de:b9:4e:61:8b:27:e1:50:70:a0:
c6:51:bc:1e:8e:12:e1:d2:84:13:91:11:ed:09:4f:
a9:4f:22:33:48:06:61:8d:cd:8a:76:e5:6a:c5:75:
7c:cf:6d:0a:b6:fa:cb:a9:2e:9b:5d:8c:6e:3d:b5:
98:2e:a1:a6:42:07:3a:4c:69:88:c7:55:de:47:54:
13:9b:9e:d0:63:26:58:95:d8:98:47:d7:d8:63:80:
47:d4:74:56:74:ef:3e:2c:d9:15:5f:c6:7d:c2:c9:
db:47:2a:64:14:3d:e7:64:26:29:f4:5b:a6:20:3d:
06:9d:3c:34:68:8b:97:97:0e:ad:27:c2:f9:98:aa:
d6:d9:70:e1:c1:e5:31:2f:8d:15:b2:4e:9a:8a:0e:
22:c9:8e:10:c7:a3:72:ba:03:03:4f:9d:0b:4f:86:
8f:92:7d:39:d0:81:47:a9:3b:63:b6:d4:92:e7:e5:
e2:5a:64:db:4f:f1:6d:c5:7d:83:72:b9:44:4d:17:
7a:c1:82:ac:da:9a:24:c2:8f:41:36:33:ac:cf:a9:
20:1a:e6:55:f2:18:39:17:b6:57:d5:3c:55:c8:2c:
aa:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:A2:A1:75:2A:52:2A:AF:E7:C2:EF:CC:37:84:BF:B3:CC:AB:45:32
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/HaKhdSpSKq_nwu_MN4S_s8yrRTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1d::-2a06:a005:1f:ffff:ffff:ffff:ffff:ffff
2a06:a005:43c::/46
2a06:a005:4d0::/45
2a06:a005:4e0::/44
Signature Algorithm: sha256WithRSAEncryption
71:fa:bd:62:92:58:8a:8b:28:b9:ca:e6:ed:65:20:cd:e3:d1:
a0:0c:12:6c:de:eb:e4:d1:93:ca:a7:c0:a5:a4:b4:37:ee:77:
7d:2e:36:5f:c8:89:53:91:ed:40:c1:2f:00:b6:49:42:5b:6e:
ad:b0:2c:ca:97:19:31:3a:6a:e1:03:b3:4d:73:6b:61:10:58:
b2:54:de:c4:19:57:91:0f:8f:1c:8b:ba:49:ce:b4:30:6d:86:
c9:5b:2a:7b:35:d1:47:e0:a2:20:2d:5c:5a:33:5c:b1:3c:e6:
55:d4:7e:d2:0b:89:8d:c8:66:19:08:27:61:f1:4e:b5:81:de:
31:f0:da:c7:95:ef:f3:af:53:66:65:3d:43:68:b9:30:57:40:
89:d6:48:69:48:6c:a6:91:c4:5c:0a:79:2e:29:e2:55:92:b4:
d1:66:03:e6:0e:54:ab:5a:d4:40:e3:91:40:2a:40:b7:8c:31:
23:25:df:10:48:8a:51:19:97:f1:fb:6c:11:60:15:55:15:a7:
35:09:29:ef:ef:5c:fc:40:87:88:c3:02:6f:3b:9b:b2:15:86:
f2:19:f2:79:0a:db:b0:21:b4:a8:e2:95:a5:b5:97:d2:0a:a2:
52:68:88:da:16:b4:37:16:65:85:a3:bc:dc:ae:51:6a:68:20:
60:0b:2d:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:03:35 2025 by rpki-client