Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/JPErcJHsaricad7zm0t6Alc-f3o.roa
File: JPErcJHsaricad7zm0t6Alc-f3o.roa (raw, json)
Hash identifier: rmLu/csb06NfmwZtiqx+ybtA7K0KeqEGmNk2pzvE44c=
Subject key identifier: 24:F1:2B:70:91:EC:6A:B8:9C:69:DE:F3:9B:4B:7A:02:57:3E:7F:7A
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 18C35A4F
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/JPErcJHsaricad7zm0t6Alc-f3o.roa
Signing time: Tue 26 Apr 2022 00:54:30 +0000
ROA not before: Tue 26 Apr 2022 00:54:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 141776
IP address blocks: 2a06:a005:640::/44 maxlen: 48
2a06:a005:340::/44 maxlen: 48
2a06:a005:630::/44 maxlen: 48
2a06:a005:170::/44 maxlen: 48
2a06:a005:100::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 415455823 (0x18c35a4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Apr 26 00:54:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=24f12b7091ec6ab89c69def39b4b7a02573e7f7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3f:b9:f6:a6:ec:ae:ba:e5:41:53:fe:14:e0:
e9:54:b3:54:9d:dd:82:da:65:de:55:ee:93:e7:7d:
80:7e:57:e9:5c:03:a2:bf:37:49:3d:ee:35:53:4f:
c6:3d:67:f0:f1:de:fb:b4:d4:c5:2b:3e:e5:93:7d:
56:59:a1:69:9b:35:6b:ba:98:b6:f9:b7:fe:cf:3f:
b5:9b:44:49:51:42:d6:d2:be:4d:6e:b9:69:19:d6:
16:22:76:87:11:ce:de:6f:6e:fb:7a:94:57:a0:63:
04:34:6a:77:09:01:7e:af:fa:85:74:7d:38:6f:a6:
6c:63:b3:60:82:a0:00:8e:6c:e3:44:66:8f:d6:ca:
ef:39:44:fd:62:0d:a2:c9:8b:21:ce:97:86:08:5e:
4d:ed:5a:be:15:da:d6:19:b1:ea:6a:01:4c:cd:fe:
66:be:aa:73:e9:6e:da:24:69:6a:45:4f:5c:34:2b:
3a:66:25:97:82:7e:65:16:e4:1e:a2:01:15:ff:1a:
8b:df:d4:ee:fb:05:38:8f:f5:4c:c0:ea:61:c7:67:
ef:18:3d:b2:6a:e5:4d:5a:ce:86:d4:ca:9e:94:e1:
d9:bb:09:35:42:c6:83:22:c2:cf:7d:60:d8:2c:7c:
91:00:82:aa:c7:e6:0e:94:76:07:ce:1d:48:66:91:
e6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:F1:2B:70:91:EC:6A:B8:9C:69:DE:F3:9B:4B:7A:02:57:3E:7F:7A
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/JPErcJHsaricad7zm0t6Alc-f3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:100::/44
2a06:a005:170::/44
2a06:a005:340::/44
2a06:a005:630::-2a06:a005:64f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
04:19:99:38:85:01:6c:a6:6a:cf:7a:77:36:35:67:f3:d2:2a:
54:ec:33:e6:02:13:d3:1c:89:27:c2:69:9f:cb:95:22:8b:03:
31:42:6e:60:c9:ab:fd:e3:43:97:e1:c8:7b:95:c9:13:4b:70:
c4:68:53:3d:bc:58:b3:63:18:d0:24:ec:00:61:9f:95:ec:8b:
a4:e7:fd:83:25:01:a7:51:32:6f:57:be:b9:73:a8:81:95:d9:
0c:dc:5a:c5:17:ff:79:27:95:db:8c:13:40:f7:76:f5:82:cf:
c5:ed:91:c2:42:34:bb:95:25:b8:78:48:a0:93:7f:e7:4e:da:
db:ca:83:65:46:5e:69:9b:b7:c9:00:f5:f9:bb:ec:83:60:de:
4e:0a:c9:6a:00:6b:58:64:b4:fa:40:3f:5d:b3:38:27:86:c4:
e3:3d:1f:0e:d1:aa:c4:63:d1:91:53:7f:42:4d:37:e6:ef:f1:
de:9a:4c:81:12:3e:6d:8b:9c:7d:e6:ef:50:56:74:ab:54:61:
03:ff:3d:ca:5f:19:e6:a1:72:54:bf:71:e7:d4:9a:23:b7:79:
2b:a8:f5:a1:1a:91:9a:2d:b3:69:d6:b9:89:04:1e:24:d6:f5:
67:3b:1f:4e:ce:4b:55:b7:56:71:99:fd:5a:a0:e6:2f:db:81:
c3:4c:25:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 09:50:57 2025 by rpki-client