Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/R4s142d_EUUGxmGoHd99Lm1xvA8.roa
File: R4s142d_EUUGxmGoHd99Lm1xvA8.roa (raw, json)
Hash identifier: JYWbc3P4HHpOEYlvzmovmfmrpldm9vW7ZQmfbVvhsmE=
Subject key identifier: 47:8B:35:E3:67:7F:11:45:06:C6:61:A8:1D:DF:7D:2E:6D:71:BC:0F
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 018478A587CDD4C4852A49CEB07B4720E109
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/R4s142d_EUUGxmGoHd99Lm1xvA8.roa
Signing time: Tue 15 Nov 2022 00:17:04 +0000
ROA not before: Tue 15 Nov 2022 00:17:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206216
IP address blocks: 2a06:a005:4d1::/48 maxlen: 48
2a06:a005:855::/48 maxlen: 48
2a06:a005:1083::/48 maxlen: 48
2a06:a005:853::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:78:a5:87:cd:d4:c4:85:2a:49:ce:b0:7b:47:20:e1:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Nov 15 00:17:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=478b35e3677f114506c661a81ddf7d2e6d71bc0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:db:f5:c9:88:6d:f5:ac:4c:09:f6:bf:2b:23:
97:5c:30:12:63:ee:76:3d:c3:e5:2f:1d:69:a2:96:
f5:57:12:7a:c1:c9:f9:30:ee:d5:4f:3f:67:db:8a:
47:7d:36:fb:8c:e0:67:58:93:c5:d5:c7:96:e8:da:
7a:33:5f:09:c8:e7:bd:da:1a:b6:b8:d9:aa:fa:15:
7a:67:92:ae:fe:68:e4:6f:21:6d:a0:20:c5:05:19:
e9:09:1e:03:e6:a6:21:c3:ac:50:78:e2:76:c6:89:
3b:23:06:c9:fc:59:9b:49:9b:a0:88:11:02:b1:f9:
37:14:46:64:25:cb:b0:bb:d1:16:14:25:b6:16:e8:
0c:b7:9a:44:62:d6:84:02:fb:a7:0d:ac:7f:f3:b9:
24:f2:74:36:18:e2:30:4c:fe:de:3b:ad:84:93:af:
4b:ac:45:c2:6e:bc:e8:6d:7a:35:dc:78:71:4f:48:
9a:5d:ec:b1:76:86:bb:57:07:f0:ff:86:13:67:b5:
4f:aa:4d:d3:e3:cf:c7:55:f3:d2:82:32:64:5e:5f:
d6:40:41:b6:b3:2f:8c:87:96:8f:4f:ac:b4:e6:80:
bb:21:fa:9a:39:71:22:14:ac:01:62:9c:c5:7e:e9:
66:e7:7e:d2:ec:06:b4:02:32:76:96:2e:99:95:55:
8e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:8B:35:E3:67:7F:11:45:06:C6:61:A8:1D:DF:7D:2E:6D:71:BC:0F
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/R4s142d_EUUGxmGoHd99Lm1xvA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:4d1::/48
2a06:a005:853::/48
2a06:a005:855::/48
2a06:a005:1083::/48
Signature Algorithm: sha256WithRSAEncryption
32:0b:15:cc:0f:a6:f1:f4:a7:01:07:c2:4d:27:0a:1a:ef:7f:
fd:6d:c8:03:90:ed:3b:a8:8b:9a:3d:13:3a:33:f2:e5:27:3b:
14:72:8e:c0:9d:6b:1f:13:2c:8a:f3:56:19:dd:2e:04:2e:e8:
c3:04:0b:cc:d1:59:d2:33:e2:fe:40:c0:40:2c:ee:b2:33:12:
3b:b5:1e:c6:93:90:6d:00:55:df:88:43:10:0b:bd:37:8d:0d:
55:75:a9:8f:8d:6d:90:00:5b:c6:25:38:b9:2f:da:a8:fa:3e:
8e:ad:b4:d5:e0:bd:f4:42:e7:67:98:8e:86:cf:ad:55:9e:a2:
bf:8c:56:5b:20:8d:97:37:3c:eb:21:6e:92:29:61:a1:55:2f:
ae:a3:12:a6:b6:62:38:13:cd:72:fa:03:b9:b6:29:4e:37:48:
b6:70:20:2f:d2:d3:93:5e:82:91:49:50:12:7c:e5:c8:9e:62:
99:dc:b1:0f:cd:15:3b:e8:48:b3:ef:6d:07:e7:b5:ab:32:4c:
fc:47:f4:a8:23:64:38:22:99:80:0e:e8:39:5e:f2:b1:f7:da:
7c:5c:74:70:d4:e9:94:ce:77:e1:a8:f4:f9:5a:ae:be:76:d5:
75:85:da:42:dc:c2:c3:9e:5f:aa:15:72:c0:58:3b:d5:82:2f:
0d:f9:ac:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 09:59:36 2025 by rpki-client