Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/PK1GKPHQaD5xA7d6HcEZZwIFuZ0.roa
File: PK1GKPHQaD5xA7d6HcEZZwIFuZ0.roa (raw, json)
Hash identifier: E+8TgDWdx08wc847Y/L9aVYdAgHc5dupfhdzUdOhcZw=
Subject key identifier: 3C:AD:46:28:F1:D0:68:3E:71:03:B7:7A:1D:C1:19:67:02:05:B9:9D
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01833803BFC3F22D68D6758B0F98930F3E9A
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/PK1GKPHQaD5xA7d6HcEZZwIFuZ0.roa
Signing time: Tue 13 Sep 2022 18:01:53 +0000
ROA not before: Tue 13 Sep 2022 18:01:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212789
IP address blocks: 2a06:a005:1ca0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:38:03:bf:c3:f2:2d:68:d6:75:8b:0f:98:93:0f:3e:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Sep 13 18:01:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3cad4628f1d0683e7103b77a1dc119670205b99d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:82:40:93:0c:12:71:2c:47:a4:47:b1:ec:cb:
48:75:e4:ce:d6:3a:ea:ef:fd:8e:38:05:f1:dd:e1:
21:e1:74:eb:f1:aa:5f:c7:4a:48:a9:9b:20:08:56:
41:8b:b0:d2:78:b8:1d:6f:0c:10:e1:d1:94:53:65:
29:d7:0b:e8:9d:4b:b6:50:73:7f:b4:30:15:51:0b:
f3:07:11:22:cb:fb:ed:a2:92:3a:4b:53:2d:21:9f:
4e:8d:78:98:92:52:47:20:a5:f0:81:da:a2:eb:0f:
01:12:75:64:7b:44:3f:92:cd:3d:f1:d0:58:af:fe:
0a:78:c9:90:87:1f:22:f1:91:89:fb:48:90:0f:3b:
32:18:7a:bd:79:d7:72:77:e4:97:34:01:31:bc:5f:
4f:14:da:ad:49:f8:6e:3a:1b:a9:1b:7d:39:58:65:
b9:91:a5:31:de:80:68:09:b2:67:3b:ef:d5:c2:6f:
33:59:50:11:4c:45:63:90:5d:fb:73:8d:7d:fb:4a:
83:61:d7:3e:9d:6f:7b:0b:26:e9:1f:97:6e:2c:bc:
39:2b:4b:58:ea:ce:15:bd:fa:d4:b6:12:48:a6:e1:
cf:3c:e5:af:be:bc:bd:d8:e0:c2:2d:96:4d:8a:7a:
6c:30:51:55:17:75:4b:22:a7:6c:50:be:9f:54:6c:
fa:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:AD:46:28:F1:D0:68:3E:71:03:B7:7A:1D:C1:19:67:02:05:B9:9D
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/PK1GKPHQaD5xA7d6HcEZZwIFuZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1ca0::/44
Signature Algorithm: sha256WithRSAEncryption
3e:d0:db:d7:43:89:01:60:96:6f:80:86:30:1a:7d:51:bc:c5:
ea:aa:80:fb:81:c4:88:14:6e:ea:ef:1c:74:05:46:79:b2:a0:
53:a0:c7:5a:07:5f:dd:c1:68:0b:dc:56:54:4e:b6:53:7c:8f:
d8:c2:f2:03:39:54:65:45:0f:30:61:a2:aa:b8:3c:90:94:c4:
30:1e:41:e5:dd:49:45:7f:97:df:b3:67:d6:54:42:6d:50:66:
e4:a2:d0:e3:26:a2:3a:65:13:38:5c:4f:09:1a:fd:88:33:bd:
74:08:7e:fd:64:73:6b:aa:ff:a2:8e:70:90:db:a0:23:da:90:
0d:e0:8d:f7:ee:4e:93:06:f3:43:93:d7:f2:18:3e:e9:0b:17:
6c:38:5e:41:d3:9f:8d:c4:5d:ec:36:93:c0:bd:e0:68:b2:58:
be:a6:7f:a9:ba:96:2d:93:09:1d:fc:37:2e:f8:4f:ac:93:82:
a4:da:24:6e:79:6b:12:60:20:2b:a5:2f:7c:5b:13:7c:ce:01:
1f:6a:7b:74:6b:8f:ea:ba:7a:e4:65:3c:5a:ae:f0:1f:fb:91:
f1:70:82:63:07:30:57:a5:6d:0f:b6:7c:07:10:33:02:14:9c:
e1:c8:1a:1d:23:e0:02:15:3c:68:a8:b3:c2:32:bc:a0:da:b0:
6b:7c:38:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 02:40:35 2025 by rpki-client