Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/JSthxhHXA4B8cJlXHPsmOw-_byo.roa
File: JSthxhHXA4B8cJlXHPsmOw-_byo.roa (raw, json)
Hash identifier: ZMVOD+uDDwhgm0Nzxer/pKlt77NYcW63xS6M8sOEswk=
Subject key identifier: 25:2B:61:C6:11:D7:03:80:7C:70:99:57:1C:FB:26:3B:0F:BF:6F:2A
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 1B7F4516
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/JSthxhHXA4B8cJlXHPsmOw-_byo.roa
Signing time: Mon 27 Jun 2022 22:21:21 +0000
ROA not before: Mon 27 Jun 2022 22:21:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213386
IP address blocks: 2a06:a005:2da::/48 maxlen: 48
2a06:a005:2d7::/48 maxlen: 48
2a06:a005:fb0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 461325590 (0x1b7f4516)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jun 27 22:21:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=252b61c611d703807c7099571cfb263b0fbf6f2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:99:76:7a:ca:77:ed:3f:59:e5:22:18:00:9c:
7e:f0:4d:82:84:c5:5f:37:69:d1:3c:28:fa:66:21:
93:5f:1c:74:19:a5:84:9c:50:05:25:72:09:b2:b3:
d2:c7:ec:b7:16:e9:ac:7b:a5:a7:49:6e:39:6e:04:
91:ba:e4:39:ad:04:b0:85:bd:2a:14:83:8b:6f:45:
58:b8:b2:7c:72:c7:2e:be:50:17:68:74:02:81:d8:
c7:7f:e2:89:24:37:d1:1d:78:26:8e:8a:bf:20:28:
c2:8a:55:40:a9:44:f3:c7:d2:52:f3:ca:aa:f1:da:
59:99:3b:41:2b:b2:81:21:00:a9:3d:29:3a:96:03:
40:b1:d2:71:46:03:dd:a6:29:7b:33:1d:de:e7:f7:
04:5d:51:0f:7d:11:30:a4:1b:3f:f0:56:d2:a8:7f:
b3:25:6e:80:de:5d:cb:f2:e5:63:e2:be:e5:a7:1a:
2b:64:7f:28:52:48:f4:d3:d7:6d:f4:db:e9:cb:2a:
45:d7:49:e7:a5:64:e7:3d:b7:6e:da:b8:78:fd:e9:
96:e1:6d:83:d9:23:cb:eb:64:3e:55:c5:e3:ba:29:
55:2e:be:0c:3e:ad:68:a1:c2:1f:4c:52:9d:53:e1:
9a:5b:f0:15:a0:9d:0a:e7:41:0f:e2:74:70:82:dd:
b2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:2B:61:C6:11:D7:03:80:7C:70:99:57:1C:FB:26:3B:0F:BF:6F:2A
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/JSthxhHXA4B8cJlXHPsmOw-_byo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2d7::/48
2a06:a005:2da::/48
2a06:a005:fb0::/44
Signature Algorithm: sha256WithRSAEncryption
75:b4:9e:8e:db:81:39:f9:c7:e2:d4:fe:12:cc:04:3b:aa:c6:
f1:90:f1:67:13:ed:e5:4d:87:98:71:80:ed:ae:f7:e8:0f:05:
9a:5a:67:d8:e6:88:95:00:21:27:72:13:89:4d:57:c2:d4:7c:
a2:50:11:39:8c:2d:22:b1:b1:e3:66:79:8a:e0:e7:88:56:e0:
51:f0:8e:2b:ae:82:6c:cf:3a:e6:94:8c:15:9d:c3:b1:63:ad:
2f:80:2a:86:7d:98:f4:da:82:10:f4:5d:38:02:f6:8a:66:22:
a7:86:fe:99:3d:1b:6d:f8:4e:a6:08:17:3a:8d:f5:33:6a:68:
0c:1f:e6:aa:8a:46:6b:15:26:77:b3:83:2b:96:0a:63:4e:d0:
d1:48:fb:97:c4:64:23:2d:ac:fc:05:5d:8f:61:6d:5a:c7:93:
cc:da:0a:45:f7:7b:84:0b:29:17:76:ca:c8:5c:b4:bc:b8:89:
bc:7b:b0:ad:a1:9a:d6:70:2c:a5:70:9c:c5:ef:9e:5b:27:73:
db:df:6e:a6:e1:84:85:79:90:f1:76:9f:0c:ed:44:1f:4f:ec:
d8:45:f8:1b:17:3a:9f:9c:4b:9e:81:a7:5c:02:89:f0:c9:29:
41:e2:2a:24:d6:52:d8:04:6b:a7:98:41:0c:e2:64:25:72:76:
d0:f0:bf:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:12:47 2025 by rpki-client