Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/K4b5L4qfqLCuSJt_UpfFYPV57ZY.roa
File: K4b5L4qfqLCuSJt_UpfFYPV57ZY.roa (raw, json)
Hash identifier: jopSQ+rD68tZQnLJF1In1ZBlKitO5y9SNnCV/AVXVZI=
Subject key identifier: 2B:86:F9:2F:8A:9F:A8:B0:AE:48:9B:7F:52:97:C5:60:F5:79:ED:96
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 1A73DE67
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/K4b5L4qfqLCuSJt_UpfFYPV57ZY.roa
Signing time: Wed 01 Jun 2022 02:49:14 +0000
ROA not before: Wed 01 Jun 2022 02:49:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210387
IP address blocks: 2a06:a005:2de::/48 maxlen: 48
2a06:a001:a0f0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 443801191 (0x1a73de67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jun 1 02:49:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2b86f92f8a9fa8b0ae489b7f5297c560f579ed96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:be:d6:31:5c:87:cf:6a:4c:ce:ce:40:23:fd:
57:cf:ab:80:14:80:6b:7e:0c:91:65:d2:d6:de:81:
fe:a1:b1:04:6a:a7:e1:59:c7:0f:a7:93:37:39:ab:
97:97:31:8b:3d:ee:87:4c:24:81:49:61:6c:69:a5:
d2:87:d8:83:10:e7:fb:1e:5d:97:9e:cd:12:cf:2c:
36:83:f8:a9:8c:c7:93:e1:73:26:db:3b:b8:ba:49:
87:40:55:0c:58:e6:38:4c:b1:bd:3a:b4:e1:31:8b:
e7:22:54:e4:21:de:a6:7b:23:d5:8f:96:5f:92:6e:
85:c9:5c:c4:63:3e:3c:2d:a0:aa:29:ba:8a:0f:bc:
19:8d:68:84:ff:36:95:a3:6d:9b:91:e2:9f:f9:96:
03:1a:e3:37:79:98:22:e3:3c:22:11:dd:d3:44:e3:
81:1d:3d:80:43:94:ec:09:4d:af:20:f7:fe:d9:b7:
37:30:b1:18:25:76:8c:68:dd:1f:2d:25:38:2d:7a:
7d:43:7d:9e:1a:4c:0b:46:0f:02:43:df:89:57:66:
8a:9a:a5:c0:90:1f:1d:38:10:11:0b:8e:b6:8f:fd:
5e:bf:7d:86:c8:9a:c2:bd:38:30:87:75:57:84:b0:
79:35:43:ea:dc:6a:89:c3:bf:09:c7:7c:03:eb:f1:
4f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:86:F9:2F:8A:9F:A8:B0:AE:48:9B:7F:52:97:C5:60:F5:79:ED:96
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/K4b5L4qfqLCuSJt_UpfFYPV57ZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a001:a0f0::/44
2a06:a005:2de::/48
Signature Algorithm: sha256WithRSAEncryption
61:7b:8e:73:2b:48:6b:77:5b:95:30:5e:1c:50:3e:b4:6f:57:
24:63:b5:66:09:f2:02:ea:79:f6:ba:45:65:f0:50:29:75:9d:
3c:bc:7a:24:a3:38:60:54:66:c9:36:bd:e5:17:2a:49:95:5b:
64:98:76:dc:0e:84:51:7a:50:e2:15:04:26:52:cd:8d:cb:53:
b8:e1:67:33:8f:3b:7f:3a:a1:f0:da:9a:a9:f0:0a:3a:a6:2f:
90:28:f0:bc:88:30:bb:37:d5:5d:64:0d:08:d8:f5:f0:4a:d3:
e6:5d:14:fa:dc:50:fc:6c:c7:0e:2b:f3:e5:a0:92:9d:de:40:
36:7a:e5:87:89:c8:64:d3:0a:81:e1:5f:0b:98:6a:74:1f:d0:
c5:25:b7:ad:c8:e3:c7:ea:b2:e6:c9:83:d6:22:df:35:8b:7c:
aa:80:ad:eb:44:65:89:84:30:cb:86:f3:15:a5:27:63:c1:4e:
5d:4a:11:9b:0a:b4:23:0c:f5:59:40:ac:9c:30:cd:d6:27:53:
32:2a:a8:3e:13:d6:13:22:39:ff:a3:90:d4:d1:21:d2:c0:2f:
3d:b8:c4:31:b6:57:06:4e:0d:71:3a:13:44:8d:fc:e2:27:0c:
f0:55:3d:49:81:d3:7b:f5:8c:97:d3:d0:54:ee:48:80:da:e6:
96:6b:e3:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:25:22 2025 by rpki-client