Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/KVwDpremEVxDrep3Il4gXoXlJMI.roa
File: KVwDpremEVxDrep3Il4gXoXlJMI.roa (raw, json)
Hash identifier: JRxh2FsNgZUHkqDCv6Z7uED7TkmIhq7ZcKg6uBj8k2s=
Subject key identifier: 29:5C:03:A6:B7:A6:11:5C:43:AD:EA:77:22:5E:20:5E:85:E5:24:C2
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0184EBF87ED2317E9AEA94AE4E0C6022DBA9
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/KVwDpremEVxDrep3Il4gXoXlJMI.roa
Signing time: Wed 07 Dec 2022 09:44:01 +0000
ROA not before: Wed 07 Dec 2022 09:44:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200879
IP address blocks: 2a0a:6040:f200::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:eb:f8:7e:d2:31:7e:9a:ea:94:ae:4e:0c:60:22:db:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Dec 7 09:44:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=295c03a6b7a6115c43adea77225e205e85e524c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f7:c1:08:85:64:db:b5:b9:e5:0a:39:ff:f9:
e4:ca:08:45:d1:cb:e4:c9:ec:93:f2:31:14:0f:d1:
55:ce:89:fb:15:85:58:29:61:7a:59:cf:3c:83:d4:
99:5d:07:36:93:32:4c:c8:6d:27:27:28:9c:a1:17:
ce:86:47:24:10:1f:fa:81:35:b9:6e:50:6b:64:1c:
44:dd:64:c3:98:81:1f:9a:b8:42:8b:ee:3a:28:6c:
a2:fe:93:77:c8:fa:33:68:90:6d:cc:ba:75:07:a2:
03:f5:bf:65:05:f5:84:23:05:4c:d3:4d:bb:39:e1:
8a:0c:74:be:a6:25:aa:b9:c1:d2:67:a9:17:f5:95:
79:4a:16:d1:25:11:5d:43:66:db:ff:5d:73:7d:26:
00:bc:fd:e0:b0:f7:0c:26:f9:e8:bb:9b:c8:f8:16:
46:8f:da:cf:60:c5:9e:98:13:c9:4c:5c:18:03:d0:
ee:34:21:d5:71:73:b2:ef:94:7e:c3:7b:83:d1:c0:
3e:d0:8d:7a:38:da:e5:5d:bf:ea:71:0c:17:15:37:
12:66:a8:0f:c9:d9:dc:84:1a:11:ee:3d:68:a8:13:
91:27:3d:74:0f:2c:6a:25:33:b4:0b:73:15:51:6d:
25:26:5b:f9:5c:9a:b9:eb:01:a4:9e:9e:0d:97:f4:
94:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:5C:03:A6:B7:A6:11:5C:43:AD:EA:77:22:5E:20:5E:85:E5:24:C2
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/KVwDpremEVxDrep3Il4gXoXlJMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:f200::/40
Signature Algorithm: sha256WithRSAEncryption
39:5d:21:f3:a5:9d:7e:34:80:70:c8:3b:f8:2b:33:fa:54:ac:
d3:36:b1:0c:fe:ee:0f:7c:d9:45:64:24:f2:ee:f0:8f:cf:ba:
5c:33:a7:d8:3a:df:7b:6b:71:e3:ea:d0:4e:37:61:65:46:49:
4f:7f:24:5d:74:08:51:3b:92:3f:fa:71:3e:9a:81:6d:7f:3e:
a9:a6:07:5c:1f:7a:71:47:44:42:da:bd:a8:8d:8f:7e:76:12:
d1:80:c6:1d:a7:5c:a0:0f:88:81:26:cd:12:8e:29:07:84:64:
8c:67:82:3e:d7:59:2b:d5:11:85:48:6a:c0:22:f0:16:55:e3:
b1:09:40:10:50:30:52:49:c9:6b:07:78:46:92:af:d8:e3:e3:
bf:0e:36:6c:09:2b:74:02:80:b4:ae:e7:21:bd:e6:0d:40:38:
4e:04:39:36:24:cc:ed:c2:e8:31:e1:fd:56:2f:99:03:de:71:
3a:81:e7:e3:c1:b0:6a:12:26:0c:32:30:0e:33:86:16:80:7d:
ec:83:8c:ce:f8:c1:93:c5:fa:85:ac:4c:7f:04:28:d4:c9:82:
ca:21:34:99:19:9f:6c:41:89:b7:02:02:6a:b5:9b:44:2e:64:
82:68:30:d9:99:a8:b0:ba:3e:65:6a:47:ae:98:2e:25:46:cd:
14:6f:e0:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 22:37:59 2025 by rpki-client