Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Oz_buIgg_1CQFIn8T2VcRRR4SDc.roa
File: Oz_buIgg_1CQFIn8T2VcRRR4SDc.roa (raw, json)
Hash identifier: QRLDot4UQJB0e74VUjGB9tQNzTRvyeGd6CkssBlwo78=
Subject key identifier: 3B:3F:DB:B8:88:20:FF:50:90:14:89:FC:4F:65:5C:45:14:78:48:37
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01825AE09916ED125843706F08CD9F89CFA0
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Oz_buIgg_1CQFIn8T2VcRRR4SDc.roa
Signing time: Mon 01 Aug 2022 19:27:24 +0000
ROA not before: Mon 01 Aug 2022 19:27:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209870
IP address blocks: 2a0a:6040::/32 maxlen: 48
2a07:54c2:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:5a:e0:99:16:ed:12:58:43:70:6f:08:cd:9f:89:cf:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Aug 1 19:27:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3b3fdbb88820ff50901489fc4f655c4514784837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:71:37:51:84:0f:1b:24:e3:90:c0:fc:ab:97:
4d:a0:02:a0:f1:1f:ff:ec:e1:eb:8d:9a:a4:21:e6:
75:b1:dd:41:c8:b0:0f:7b:c9:12:e6:58:4f:d9:15:
a1:44:61:b3:dd:7b:41:67:13:36:24:ee:78:b6:9a:
ce:31:24:90:cb:8e:54:5e:51:c2:99:03:dd:8d:94:
c3:32:be:5a:74:35:f8:25:e8:82:1c:73:c8:16:26:
4a:11:6c:38:d9:bd:57:f9:3a:d6:82:dd:95:22:ab:
17:a6:eb:f0:79:3d:e5:42:56:6b:ba:6c:73:19:79:
0f:4b:12:a7:4d:af:60:da:2e:59:a7:c1:2c:f8:b4:
9d:aa:66:94:cc:f2:a6:0a:da:1d:5d:13:c2:c3:e0:
b4:e7:f3:36:1d:9c:f5:d0:f9:49:b2:72:e5:f5:72:
2d:1a:c9:cb:59:49:9d:a3:40:07:f8:ac:b2:ce:88:
c8:33:be:91:25:7f:45:d4:85:78:8a:e8:eb:a3:88:
62:33:19:9e:c3:b5:b2:f0:e5:b1:90:c3:f6:1c:3e:
d4:d0:b0:84:81:41:11:00:65:c8:3a:ee:23:a7:25:
4e:97:8a:fd:6d:72:00:59:e6:7d:7e:ac:e9:34:6f:
16:bf:da:02:cd:12:fb:df:d0:f0:36:56:67:a7:98:
21:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:3F:DB:B8:88:20:FF:50:90:14:89:FC:4F:65:5C:45:14:78:48:37
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Oz_buIgg_1CQFIn8T2VcRRR4SDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:54c2:b00b::/48
2a0a:6040::/32
Signature Algorithm: sha256WithRSAEncryption
42:5d:6b:69:f4:cb:10:c0:27:3d:2f:8a:87:98:44:7b:d7:c2:
10:ae:58:12:94:76:54:bb:46:24:ce:e7:43:1f:39:38:ed:df:
e6:13:b9:37:3a:6a:0c:2c:db:c1:81:4c:7e:2d:9f:ad:cf:8e:
48:2f:75:39:4c:98:d5:55:a2:d2:f3:a6:4d:2f:63:7e:14:22:
67:29:cd:26:89:3b:da:64:4d:61:30:1a:e0:95:c6:8d:8f:08:
b4:86:57:c2:0a:56:7e:c8:aa:e7:3f:87:80:0a:db:80:1b:aa:
a2:94:25:81:6a:e8:2c:2b:f8:12:3f:57:51:14:52:22:2b:0f:
e6:36:62:dc:6f:05:33:be:7b:07:e5:41:55:26:33:74:01:4a:
63:5a:aa:e6:3b:a6:93:d8:f7:7e:42:8c:2d:dd:9f:93:d5:8d:
db:bd:13:be:64:ce:73:03:2a:c2:c3:63:a6:c6:bf:6e:29:db:
3d:37:6a:ec:b5:f9:f6:04:5b:4a:63:45:35:88:43:59:f8:40:
88:db:69:7e:b2:0e:9a:c0:85:11:bf:8e:2d:d1:ed:d7:09:30:
ae:e3:6e:19:0a:23:6d:6e:11:87:a4:45:2e:6e:c6:a9:dd:fa:
bd:8b:76:fd:5f:f6:7c:d8:c9:71:ae:e9:ce:f0:22:75:2f:78:
39:2d:52:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 09:59:29 2025 by rpki-client