Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/OEkYDgY3XCOZiGVdG4O0LEtkz6I.roa
File: OEkYDgY3XCOZiGVdG4O0LEtkz6I.roa (raw, json)
Hash identifier: VXbVm0CcfmteXoLWRM3zGC9eXTS3fNUv16g7vZtb3Ds=
Subject key identifier: 38:49:18:0E:06:37:5C:23:99:88:65:5D:1B:83:B4:2C:4B:64:CF:A2
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0184D6EB1A013F9E75B9923F6A5A06AD30C9
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/OEkYDgY3XCOZiGVdG4O0LEtkz6I.roa
Signing time: Sat 03 Dec 2022 07:37:22 +0000
ROA not before: Sat 03 Dec 2022 07:37:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201763
IP address blocks: 2a06:a005:1d55::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d6:eb:1a:01:3f:9e:75:b9:92:3f:6a:5a:06:ad:30:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Dec 3 07:37:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3849180e06375c239988655d1b83b42c4b64cfa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a9:d2:06:5c:8d:8d:15:e9:d8:8d:db:aa:7e:
a9:c9:d7:a3:7f:01:7f:6a:0d:69:36:de:c5:7f:87:
e0:ed:db:01:0e:68:5e:c9:da:14:ba:ef:04:dc:cb:
f0:93:10:e5:84:e7:30:09:cb:3d:76:8f:fd:a5:25:
36:7a:42:92:5d:b5:a6:a0:c6:1e:1e:e1:b3:7b:d6:
56:81:43:89:89:18:ad:2b:92:01:8b:c0:8c:73:d7:
f5:82:b8:9b:41:6d:4b:6e:2e:22:f8:87:2d:40:9f:
a4:84:f4:c9:1a:c0:aa:b4:3d:8f:f8:80:d4:46:c5:
58:61:d9:1a:48:2b:26:fb:03:52:ae:05:bf:19:9b:
e0:58:03:2d:8a:b9:c8:c3:7f:5a:6d:72:ab:ff:f5:
dc:5c:aa:aa:8e:a3:11:c9:10:78:d2:d4:e7:ce:a0:
29:e8:71:5a:e9:78:c4:90:30:b9:8d:7e:8d:9a:0a:
65:1b:17:bd:69:6a:f8:85:00:36:46:c8:f4:bc:60:
f8:dd:6f:6f:8e:20:fa:86:65:5a:f7:cd:9e:48:03:
4d:f5:88:17:b1:bf:88:2e:da:ac:0d:ec:3b:d8:85:
28:50:94:7d:4f:71:d5:c1:ea:d7:5a:4e:92:57:3f:
52:25:c0:3f:74:f9:12:2f:32:95:cc:ef:6f:f8:d7:
43:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:49:18:0E:06:37:5C:23:99:88:65:5D:1B:83:B4:2C:4B:64:CF:A2
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/OEkYDgY3XCOZiGVdG4O0LEtkz6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1d55::/48
Signature Algorithm: sha256WithRSAEncryption
34:94:95:4e:41:8b:24:8b:1e:9e:ab:67:0c:a5:a6:42:cd:8b:
13:e0:36:d2:ea:76:19:57:45:ba:e6:e5:d2:ca:fd:38:f1:42:
74:b3:8a:60:1d:a4:34:36:9d:18:dd:bb:5f:a9:39:6a:ac:ed:
b8:15:9f:14:35:eb:3e:f4:89:79:08:06:e9:16:b0:d1:d0:66:
56:46:0e:f6:da:11:bc:47:18:83:eb:82:b8:96:56:86:83:2b:
03:9e:c5:ce:8f:f6:98:ca:16:81:da:73:c1:94:4a:4d:0e:03:
a9:c3:dd:83:96:11:85:ee:41:e9:85:45:25:12:8f:7a:08:08:
3c:ec:08:28:3a:ac:19:09:db:90:0c:fa:54:c4:29:a6:9a:a4:
3e:0d:3e:18:62:d5:93:44:48:fa:1a:b2:e5:0d:29:d3:75:6c:
5b:1d:7c:c3:f5:8d:e2:18:4f:20:7e:81:b5:9e:02:15:f7:ef:
ab:ae:ef:6a:43:70:58:b8:2a:e7:19:e6:0c:7d:d1:1d:de:70:
54:43:08:de:0c:6c:74:74:67:26:72:86:6b:65:25:78:18:a6:
73:74:e6:84:0f:97:c6:49:fe:98:97:ff:a8:b8:46:75:60:be:
2f:dc:b4:58:50:79:8a:9c:1c:81:37:57:e5:1c:a6:2e:3a:82:
d1:d9:27:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:10:49 2025 by rpki-client