Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ILWT8FMt64At437yElcZruj7atw.roa
File: ILWT8FMt64At437yElcZruj7atw.roa (raw, json)
Hash identifier: c+Gq8pl4CSWDT/LGXlNwoJiH2GahknWXnZelVP1BeaY=
Subject key identifier: 20:B5:93:F0:53:2D:EB:80:2D:E3:7E:F2:12:57:19:AE:E8:FB:6A:DC
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0184CA4D6ACF22D9F13DD969006E2D1334BB
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ILWT8FMt64At437yElcZruj7atw.roa
Signing time: Wed 30 Nov 2022 20:49:42 +0000
ROA not before: Wed 30 Nov 2022 20:49:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201217
IP address blocks: 2a06:a005:2470::/44 maxlen: 48
2a06:a005:1c78::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ca:4d:6a:cf:22:d9:f1:3d:d9:69:00:6e:2d:13:34:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Nov 30 20:49:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=20b593f0532deb802de37ef2125719aee8fb6adc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f9:cc:43:68:bb:96:25:7a:f6:fb:77:63:77:
57:79:c2:64:44:29:3b:6a:7d:7b:b9:34:5d:a7:a4:
d8:74:a3:75:86:a1:81:f6:bc:6b:0d:06:ca:ad:30:
c5:29:5c:e9:71:f3:ed:25:5a:69:2e:49:97:1e:50:
a9:7f:1f:66:a8:62:eb:20:82:55:17:23:ed:21:d5:
c5:23:55:cf:cd:17:fa:c4:02:3c:f8:02:fd:ef:a3:
0e:a5:b8:93:b2:88:78:98:03:47:c7:e9:f4:52:b7:
b8:7c:e1:1d:77:d5:d2:8a:9c:90:b5:f5:46:85:d7:
71:49:0c:9e:2b:62:13:51:1c:b2:4d:8c:77:a6:4a:
af:f5:6c:90:e8:ba:42:b3:c9:ca:46:7d:b4:8b:12:
32:e6:58:c5:03:5e:fe:74:84:2a:e7:34:0c:5b:28:
ca:58:c3:2b:01:d4:50:af:c0:8f:80:7c:83:a8:cb:
ce:b3:42:22:99:6d:04:34:18:90:d9:d7:96:e8:50:
c7:3a:91:7c:63:94:60:a9:7e:dc:73:14:a9:7f:5d:
47:5c:de:c1:e0:61:65:35:96:68:d7:9d:68:2a:55:
52:76:dd:d7:66:09:12:97:a0:32:a5:3e:ee:27:36:
ae:0a:38:f5:9c:e0:8f:b7:cc:0a:cd:88:af:c6:4a:
95:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:B5:93:F0:53:2D:EB:80:2D:E3:7E:F2:12:57:19:AE:E8:FB:6A:DC
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ILWT8FMt64At437yElcZruj7atw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1c78::/48
2a06:a005:2470::/44
Signature Algorithm: sha256WithRSAEncryption
29:36:14:fe:65:56:82:94:48:79:a4:79:9f:d5:1b:0d:15:3a:
1c:68:25:97:37:d8:2f:25:aa:83:bd:94:4d:c2:15:2b:9d:63:
54:cb:94:6e:cc:77:5f:3d:1d:b8:c5:35:04:9f:36:dc:39:49:
72:7f:94:5e:30:f9:21:fd:8d:89:86:65:0a:6d:d3:8a:7b:8c:
db:21:c8:f6:34:9c:9a:0a:a7:55:16:c0:e0:60:44:f4:78:38:
34:37:09:f6:23:57:c2:e1:20:b3:fb:72:b4:ca:9b:a9:ec:58:
eb:65:99:ed:80:96:f1:48:de:3c:a0:15:c0:6f:80:05:af:51:
a9:a2:00:27:da:43:12:d3:64:59:2b:1e:bd:50:2d:7a:b9:0f:
fd:20:47:e6:0a:be:30:42:c9:88:bc:d4:06:4a:56:d2:58:a0:
8d:3c:4e:59:b8:31:32:1f:80:45:ff:e4:9c:c2:ad:40:10:1f:
5e:a4:c2:4e:8d:34:0c:50:5f:95:82:c8:d2:b4:99:f3:f7:14:
97:9f:ae:10:82:f9:0a:bf:e6:5c:98:47:10:e1:87:d4:dd:02:
10:ca:bb:a9:db:cb:95:92:a1:3e:35:db:da:18:86:b4:c3:70:
c8:ce:a0:27:b6:2b:f4:76:44:d8:6a:da:10:42:ec:7c:5f:61:
7c:ad:30:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:15:11 2025 by rpki-client