Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/N6zaOxQiSvoAxGO1dby6xyDnl5Q.roa
File: N6zaOxQiSvoAxGO1dby6xyDnl5Q.roa (raw, json)
Hash identifier: ZSwCxvwdpeOfU6gBKJZffb0RD8PJX79fOF1UlgZmCr8=
Subject key identifier: 37:AC:DA:3B:14:22:4A:FA:00:C4:63:B5:75:BC:BA:C7:20:E7:97:94
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 018311F2BF20E62E0B31E7A403A8923D227B
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/N6zaOxQiSvoAxGO1dby6xyDnl5Q.roa
Signing time: Tue 06 Sep 2022 08:37:44 +0000
ROA not before: Tue 06 Sep 2022 08:37:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202996
IP address blocks: 2a06:a005:1270::/46 maxlen: 48
2a06:a005:d2b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:11:f2:bf:20:e6:2e:0b:31:e7:a4:03:a8:92:3d:22:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Sep 6 08:37:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=37acda3b14224afa00c463b575bcbac720e79794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:32:07:d9:5d:e6:a1:67:e7:f4:8e:ed:b5:70:
4a:ab:c3:75:d4:9d:4c:cb:99:35:89:7d:21:74:04:
dd:d0:73:37:aa:87:b5:14:d7:0b:06:49:df:95:48:
b1:22:cf:30:0d:70:73:d9:25:21:86:21:07:52:4b:
0e:fa:ad:49:cf:9a:23:7c:74:57:2f:b0:a5:88:5a:
f8:dd:5d:df:55:37:b8:3c:47:3e:34:83:7b:b5:63:
4e:d8:61:0f:5c:99:22:76:42:00:33:7c:2f:2b:f8:
0f:14:c0:e7:72:0d:34:e4:8c:ba:68:78:7b:fa:44:
11:4c:ee:23:28:41:a3:8b:b5:48:d8:46:1f:d4:38:
06:f0:d6:e4:72:99:c7:e2:41:a8:82:ec:23:4a:d1:
70:20:8d:b3:d5:a5:a1:3a:c2:91:94:5a:86:fd:7b:
bc:16:03:cb:36:df:82:4d:96:0f:4f:e9:0b:82:70:
92:e0:fc:55:9b:7c:79:91:bd:00:0b:64:08:11:f2:
d9:c1:05:e3:c7:16:67:08:09:e4:97:e7:f0:ec:5b:
f1:a5:b1:da:6b:01:44:ba:a8:96:ea:73:d6:50:22:
9e:0b:59:40:c3:1b:bb:0c:aa:89:9b:40:80:ab:49:
b0:d3:b4:ce:db:24:e3:7c:fe:8b:60:12:36:f4:dd:
d9:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:AC:DA:3B:14:22:4A:FA:00:C4:63:B5:75:BC:BA:C7:20:E7:97:94
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/N6zaOxQiSvoAxGO1dby6xyDnl5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:d2b::/48
2a06:a005:1270::/46
Signature Algorithm: sha256WithRSAEncryption
a3:72:3e:47:e7:fc:59:af:1b:9f:b9:85:99:06:f7:0d:2b:97:
a2:71:a8:5a:de:62:1b:df:7c:9a:bb:b0:b2:ba:19:08:0f:20:
93:f6:54:16:ff:2e:5e:2e:e1:d7:d4:e0:b3:ed:b1:bf:7b:d0:
48:a1:74:66:cb:08:20:4d:7d:f0:15:73:b8:c4:53:1b:f4:e3:
38:56:42:c7:35:09:76:1c:af:7f:6e:f3:5e:2f:53:4b:ce:de:
4d:f7:13:2e:e1:c8:07:5d:1c:34:94:eb:68:59:d4:de:5f:06:
84:1e:f2:86:2c:9a:67:88:ee:c8:dc:a0:32:a0:2a:81:8b:98:
b6:f6:8b:d7:a4:aa:95:2f:f4:53:6d:02:0b:c2:29:02:e2:dd:
21:7e:b4:a4:da:dc:c5:97:ff:d3:2e:36:25:bf:80:a9:d0:23:
8f:c7:e4:6b:75:59:3d:6f:cc:b4:1e:b4:3a:1d:3b:0d:b1:60:
9a:61:d6:c8:9e:f9:9f:1b:5b:85:23:ff:39:69:a6:7a:1e:30:
67:a5:10:ed:c6:37:d0:b7:91:b7:d0:21:91:50:c4:0a:de:a5:
d6:f1:07:ed:74:86:44:25:7d:88:4a:c7:77:f0:27:9a:94:cf:
0a:c3:6a:95:0f:8d:57:e5:1c:ef:b2:03:b1:7a:bd:c7:25:3a:
19:d0:6f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:09:29 2025 by rpki-client