Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Kkyt1y3hwnlPm8PIowUcVmxCQUg.roa
File: Kkyt1y3hwnlPm8PIowUcVmxCQUg.roa (raw, json)
Hash identifier: PrPRGce80oJhMfkDVEm5/ZRPYbPzAJGLHTtAAqIHh/8=
Subject key identifier: 2A:4C:AD:D7:2D:E1:C2:79:4F:9B:C3:C8:A3:05:1C:56:6C:42:41:48
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 198D71BB
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Kkyt1y3hwnlPm8PIowUcVmxCQUg.roa
Signing time: Sun 08 May 2022 07:13:00 +0000
ROA not before: Sun 08 May 2022 07:13:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206216
IP address blocks: 2a06:a005:4d1::/48 maxlen: 48
2a06:a005:853::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 428700091 (0x198d71bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: May 8 07:13:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2a4cadd72de1c2794f9bc3c8a3051c566c424148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:bb:6e:43:9a:e4:9d:05:34:0e:f0:1f:c1:82:
fe:51:13:57:a4:1a:2c:a0:ad:d2:41:8f:22:b2:54:
b9:37:cb:8f:80:0e:a7:9d:90:36:72:69:d4:30:01:
a3:28:5b:d8:8e:19:20:fe:36:40:d3:aa:aa:48:f0:
3d:54:f7:09:ae:d7:26:5e:78:01:97:ba:a3:3a:0e:
99:a5:02:0f:47:e4:f5:a9:37:fb:9b:98:0a:f7:49:
66:22:68:85:c9:ef:43:45:c9:07:38:e8:90:b4:16:
d1:19:83:ba:c1:62:47:4c:c6:bb:07:ff:01:10:d8:
35:a1:55:22:ea:7c:d7:ee:f7:55:73:51:80:de:cf:
3e:12:d4:88:97:fc:23:68:c0:f3:a6:12:09:6d:18:
73:12:af:03:09:56:fd:c7:fd:70:bb:0e:8a:ab:fc:
12:c0:95:ab:b3:1a:bd:cb:d8:1d:e9:26:72:32:49:
ee:12:d9:8c:53:68:b2:89:4a:19:fb:4a:c6:b2:36:
51:1c:08:d2:d3:0c:e7:05:a4:a8:c5:d6:35:c7:d1:
8d:2d:b3:8a:ae:69:7a:a2:50:76:0f:64:a4:16:74:
3a:c0:16:79:d9:c0:e2:f5:04:fc:2d:97:89:f2:7b:
9f:f9:8d:84:25:e2:06:7a:df:76:cc:15:19:68:a9:
c8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:4C:AD:D7:2D:E1:C2:79:4F:9B:C3:C8:A3:05:1C:56:6C:42:41:48
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Kkyt1y3hwnlPm8PIowUcVmxCQUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:4d1::/48
2a06:a005:853::/48
Signature Algorithm: sha256WithRSAEncryption
0b:c2:02:eb:9c:95:de:61:4c:79:8e:99:d8:dd:21:11:c0:19:
1a:91:11:74:2d:23:5a:8e:fe:ea:3b:54:6b:9d:8d:19:93:14:
57:52:20:cf:d8:7e:ea:ab:0f:4a:0b:b4:f4:bd:8b:0f:68:f5:
ed:91:1b:d0:79:86:3a:59:40:85:fe:fb:ee:e4:74:7e:c0:60:
a7:66:44:df:3a:e8:fe:77:f5:02:67:95:32:10:41:a4:85:e7:
f3:46:e8:04:51:a0:07:38:cb:15:45:9c:c9:2c:c4:fc:b5:08:
d9:aa:2f:19:12:f7:a5:dd:c7:36:b9:68:74:48:4a:a2:a6:4e:
0a:eb:d7:63:fb:bf:ad:63:c9:10:32:11:98:c0:50:c6:b3:8b:
4f:d0:21:15:a7:29:56:2f:4a:69:81:39:0b:cb:25:98:fd:83:
ad:be:d4:2a:81:57:0b:ee:a4:58:88:00:b9:11:98:06:b2:82:
99:d0:c1:53:da:03:e0:0a:47:c2:7b:a5:74:41:63:81:97:91:
c3:25:ba:c2:8d:a4:34:d2:77:b1:c4:d4:b2:35:56:71:6a:8d:
8b:14:0d:d5:39:73:55:43:99:c5:2c:20:e7:ad:fa:1f:59:af:
2b:f3:b5:1a:d0:9f:2f:66:9b:80:c3:fb:13:19:14:d0:a1:d3:
1a:f7:58:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:18:20 2025 by rpki-client