Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/KDqqUtrSPMZ6RroKJPigY3UziPs.roa
File: KDqqUtrSPMZ6RroKJPigY3UziPs.roa (raw, json)
Hash identifier: mwirFd8K2IqpfMt/RkzY6DtYV6Yfh95ZNkSF9JnMo+U=
Subject key identifier: 28:3A:AA:52:DA:D2:3C:C6:7A:46:BA:0A:24:F8:A0:63:75:33:88:FB
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0182A66E328BDDBB0EAFFF5452D098F30DC2
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/KDqqUtrSPMZ6RroKJPigY3UziPs.roa
Signing time: Tue 16 Aug 2022 11:33:35 +0000
ROA not before: Tue 16 Aug 2022 11:33:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 142634
IP address blocks: 2a06:a005:5ae::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:a6:6e:32:8b:dd:bb:0e:af:ff:54:52:d0:98:f3:0d:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Aug 16 11:33:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=283aaa52dad23cc67a46ba0a24f8a063753388fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0e:59:d7:0d:16:e5:de:b9:87:3f:b6:51:06:
bf:a5:fa:c3:b9:30:58:da:e6:e3:51:32:5b:91:04:
c2:62:f2:2c:88:3c:07:0d:5c:e2:d0:2c:e8:e3:aa:
bc:33:96:59:89:f3:56:5f:e2:75:b1:9b:f0:c6:ee:
65:7c:7b:2b:75:24:85:b1:26:4e:cd:93:bf:b9:ed:
8b:cd:f8:74:bc:ba:be:79:bc:2f:63:72:91:69:15:
03:50:f8:63:85:6b:be:af:d5:e1:b2:90:36:91:8d:
29:96:6b:14:53:37:b6:c3:a2:75:34:c7:81:e0:f2:
2b:86:68:c2:48:1a:29:92:5b:cb:ab:29:d4:a4:d0:
0e:5a:a0:17:71:1f:61:a1:a3:fc:43:8d:3d:82:84:
91:2d:8c:fd:2a:4d:32:13:04:59:94:a7:a2:ff:52:
8c:b2:49:c6:7c:7b:e7:21:e0:6a:54:35:e3:80:96:
a1:85:68:b9:b1:12:ba:80:50:6a:43:60:e4:60:a8:
10:15:e0:72:df:06:39:de:d8:a0:55:1a:18:cc:07:
d8:31:61:6f:e5:68:86:e6:2e:45:2b:43:e0:c4:f7:
7b:ad:1e:e9:1d:16:3c:e6:cb:78:18:67:da:6f:ca:
9d:a2:f1:6e:51:90:75:18:0d:fd:f8:17:54:73:b7:
91:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:3A:AA:52:DA:D2:3C:C6:7A:46:BA:0A:24:F8:A0:63:75:33:88:FB
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/KDqqUtrSPMZ6RroKJPigY3UziPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5ae::/48
Signature Algorithm: sha256WithRSAEncryption
54:5f:f8:66:f8:37:9a:37:4c:96:8f:bd:a8:5f:d2:76:7b:be:
c9:b2:06:fd:65:48:0f:91:a6:c4:69:57:33:ac:86:bf:9e:b8:
d1:ea:9f:07:db:fb:90:5b:c4:e3:7b:35:1f:9a:c4:17:ed:b7:
4a:2f:7b:1b:e6:e3:8c:a3:ed:96:10:c7:d1:1c:a6:3e:2b:9c:
15:e2:6e:8d:1b:ef:d2:58:2b:f0:33:b0:5a:b6:54:62:7c:91:
06:e7:56:bd:3f:b7:29:8e:d7:37:1a:9a:e2:16:40:2b:cb:b7:
a3:cf:2a:7a:eb:8e:1a:f3:b8:b5:32:01:15:2a:c1:a5:a8:8a:
a4:8a:20:fb:47:dc:8d:eb:7c:0b:d7:64:6f:df:00:20:65:51:
18:df:48:39:6b:d0:ff:db:38:3f:bc:34:70:7b:ad:02:39:5c:
bb:f1:f0:85:5a:36:e5:24:6b:d7:e9:93:83:86:1e:08:79:d5:
af:51:29:74:80:b7:6c:a9:bc:ee:61:85:c5:59:22:e4:55:47:
f4:e7:ab:05:4c:de:0a:c1:8a:f3:a6:ae:d3:d7:8b:bc:39:de:
cf:63:4b:52:3c:84:fb:83:93:9a:4d:ed:e2:03:57:c5:d2:28:
b9:cd:a1:f4:72:36:a6:57:89:62:02:55:ae:95:6b:a8:87:ae:
85:6e:25:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:03:35 2025 by rpki-client