Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/NRwktpmiMzgVB5_ZhuWxqaRiqB8.roa
File: NRwktpmiMzgVB5_ZhuWxqaRiqB8.roa (raw, json)
Hash identifier: KXrVhGactYTYR3L7TlKEpFql0gV5HCjfzqbqJgXwiMY=
Subject key identifier: 35:1C:24:B6:99:A2:33:38:15:07:9F:D9:86:E5:B1:A9:A4:62:A8:1F
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01831E1520EA07E32A28D29EF994E4E12F11
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/NRwktpmiMzgVB5_ZhuWxqaRiqB8.roa
Signing time: Thu 08 Sep 2022 17:10:44 +0000
ROA not before: Thu 08 Sep 2022 17:10:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211946
IP address blocks: 2a06:a005:1bd0::/44 maxlen: 48
2a06:a005:f40::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:1e:15:20:ea:07:e3:2a:28:d2:9e:f9:94:e4:e1:2f:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Sep 8 17:10:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=351c24b699a2333815079fd986e5b1a9a462a81f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:57:e5:ac:1d:81:84:c2:c0:61:e4:e0:97:bf:
16:8b:a9:b3:8b:6f:bc:ce:57:1a:b2:37:9e:46:db:
26:eb:1f:79:fb:b4:e2:68:5b:5d:46:6f:23:14:c5:
c8:b4:d5:31:5f:54:cb:5a:ea:f7:b1:4a:e9:2a:7b:
27:2f:08:65:ce:54:0c:e1:57:f0:a4:13:ac:08:a5:
4e:ca:99:42:be:3a:99:21:78:00:c6:b1:25:f6:7b:
e7:1e:e3:66:b8:aa:1f:0e:79:0c:44:2a:e8:d9:cf:
6c:3f:7f:54:08:1f:36:1d:c4:50:47:43:bd:a2:49:
da:c1:16:11:d2:48:36:5c:40:ef:cc:86:7a:d4:ff:
5a:d3:a4:01:0b:ad:f0:c3:35:a4:3c:d9:15:58:2d:
38:c7:8b:05:b7:91:45:93:9a:b9:ca:8d:c0:2e:f6:
59:bb:34:14:52:53:5a:10:3b:da:28:1e:f5:ab:ea:
f5:ce:fb:1a:ce:c8:55:04:a3:0e:bd:b0:78:8b:76:
c8:99:74:c8:40:8d:2e:e7:c2:2c:c8:4a:9f:4b:cd:
bc:ce:89:d4:f1:39:95:63:31:d1:c2:91:c9:ae:f4:
7c:e4:db:ca:ad:26:76:59:1c:a0:f1:37:b8:b3:ac:
13:5b:da:99:57:4c:38:c3:b0:bd:35:95:db:5f:22:
9b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:1C:24:B6:99:A2:33:38:15:07:9F:D9:86:E5:B1:A9:A4:62:A8:1F
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/NRwktpmiMzgVB5_ZhuWxqaRiqB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:f40::/44
2a06:a005:1bd0::/44
Signature Algorithm: sha256WithRSAEncryption
31:36:04:19:ae:03:e2:19:f6:66:f3:a7:a3:22:98:79:ea:ef:
df:23:f5:14:a8:79:91:9a:40:dc:61:93:e6:c4:7d:ce:1b:10:
7c:a0:1b:f6:73:24:96:05:24:f4:3c:38:8c:a1:8e:37:13:29:
b7:3d:65:57:c0:b5:4b:a4:d5:1d:34:56:ac:de:50:7c:0c:ca:
86:74:bc:90:3b:35:a8:76:50:3f:39:58:df:3f:00:d0:6b:af:
e6:48:7a:fd:47:2b:45:a1:4e:dd:c0:1e:86:43:3f:34:80:9e:
06:12:ed:46:76:f4:77:eb:e2:eb:ae:ad:01:f5:46:a5:37:7a:
90:8b:60:3e:aa:5b:4f:bd:30:94:d5:33:e9:e1:0d:d7:e1:be:
65:b8:d7:c7:79:74:56:5a:9c:db:af:ac:bb:f9:45:60:61:33:
e7:1e:0e:02:d2:dc:0b:37:b3:e2:2c:63:75:93:4d:0a:d5:05:
9c:d7:04:ee:f6:f6:0f:cb:4b:77:4d:5c:e5:27:fd:0c:a8:08:
53:9e:d1:d4:ff:b0:ca:56:c1:d2:62:f1:2b:d3:64:52:ac:8a:
b9:08:09:fa:65:16:e4:7b:e0:7f:e4:c1:53:fa:60:a7:3f:7d:
06:86:ba:97:45:ef:ba:37:41:a0:37:8e:a2:df:80:d5:aa:d1:
0e:a9:f5:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:51:11 2025 by rpki-client