Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Pr-muHM0C1zpqscXnrPnk3RUklQ.roa
File: Pr-muHM0C1zpqscXnrPnk3RUklQ.roa (raw, json)
Hash identifier: fKoRQLZ7Mxd0THAiTMUsvQ7dRM6Y7ICoH/kjcWJqM6U=
Subject key identifier: 3E:BF:A6:B8:73:34:0B:5C:E9:AA:C7:17:9E:B3:E7:93:74:54:92:54
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 018322A2983EBC605FB12A78B6F8396FECF6
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Pr-muHM0C1zpqscXnrPnk3RUklQ.roa
Signing time: Fri 09 Sep 2022 14:23:44 +0000
ROA not before: Fri 09 Sep 2022 14:23:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202905
IP address blocks: 2a06:a005:1279::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:22:a2:98:3e:bc:60:5f:b1:2a:78:b6:f8:39:6f:ec:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Sep 9 14:23:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3ebfa6b873340b5ce9aac7179eb3e79374549254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:33:dd:84:08:33:98:ec:0f:a4:b6:27:35:82:
8c:0f:b3:bb:c2:f5:c0:4d:29:a0:7d:22:dd:dd:ec:
9f:6f:aa:15:9e:ea:d1:45:d1:24:80:db:0a:e9:6d:
d1:43:07:8c:d8:8e:13:8a:43:49:6a:2c:97:0e:c2:
1b:4d:55:5d:74:f9:cc:06:36:94:a2:ea:fe:e9:56:
ec:72:df:c0:7d:79:20:30:d6:da:28:72:89:d4:11:
c8:a1:51:08:3d:75:c5:34:1d:29:e4:4e:f7:ce:9f:
d5:e5:f8:1b:67:4e:08:f9:25:c2:01:56:58:bf:86:
fe:0e:d2:45:eb:74:87:58:2f:81:f9:1d:53:29:ed:
68:37:4b:55:4b:8b:18:18:79:e8:17:02:67:85:ed:
fa:84:d5:4c:e5:bd:c8:73:17:bb:ad:d6:5e:22:33:
df:8f:59:88:e4:3c:9c:e9:63:e9:15:c1:82:44:15:
cc:5d:3d:15:72:a0:43:9a:b3:6c:51:fc:76:cc:7d:
0e:f8:13:77:23:f9:af:b5:f6:9e:ea:8f:cc:32:12:
dd:07:63:5b:93:7b:55:ff:9f:d4:8a:75:16:7f:8e:
af:f1:18:08:d8:28:4c:d8:8d:d8:d0:a2:c6:c4:ef:
c3:d5:e7:ee:c0:52:9f:38:45:42:c7:41:eb:9f:3a:
e0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:BF:A6:B8:73:34:0B:5C:E9:AA:C7:17:9E:B3:E7:93:74:54:92:54
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Pr-muHM0C1zpqscXnrPnk3RUklQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1279::/48
Signature Algorithm: sha256WithRSAEncryption
46:5e:46:22:08:9f:03:18:aa:27:74:e8:f1:2c:82:08:d0:bf:
f4:cf:63:1d:c0:2b:5c:fc:84:f0:75:dc:60:71:b1:45:4d:36:
46:5c:e3:3e:ff:9e:aa:3c:d5:4d:b8:cf:f8:27:65:e1:05:d8:
8a:23:1b:93:ee:44:7b:09:2d:1e:53:f1:88:86:18:66:c2:70:
83:6f:56:14:05:d3:b2:cc:aa:89:e5:29:71:0b:02:b0:aa:c4:
93:76:59:a6:cb:9d:7b:15:e0:8c:c5:bb:a6:29:38:7c:81:0b:
1b:c2:88:15:9e:8a:ae:f5:5c:8f:1c:6f:06:47:62:17:cd:fc:
d2:93:fd:25:c7:a9:9b:7b:4a:f5:12:30:41:ea:ed:39:c4:a5:
65:61:e9:37:8b:02:2e:e4:02:63:b5:1e:50:28:eb:40:e8:bd:
c9:a0:43:27:d3:31:b4:c6:7f:d5:06:9a:eb:c9:0a:a6:46:53:
26:23:b4:7f:5b:28:c1:5b:b4:b5:22:f6:84:7c:96:0f:bb:e5:
38:fd:f6:67:f7:b9:f6:91:3d:e4:93:d7:4d:09:ca:43:dd:1f:
2c:c7:5d:5c:b8:6c:91:71:29:d7:d4:bf:08:91:13:2a:e8:85:
d6:d1:88:f6:ec:59:97:5e:b3:a5:a3:2c:ce:31:cb:3f:db:18:
d4:a8:05:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:44:54 2025 by rpki-client