Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ReOCQldSWncNTI6iOvcuFX85Zs4.roa
File: ReOCQldSWncNTI6iOvcuFX85Zs4.roa (raw, json)
Hash identifier: GK7dM8q3g0wf/Clid4SXS96P/ESqLL2bahXnoyX0AKA=
Subject key identifier: 45:E3:82:42:57:52:5A:77:0D:4C:8E:A2:3A:F7:2E:15:7F:39:66:CE
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 19F03278
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ReOCQldSWncNTI6iOvcuFX85Zs4.roa
Signing time: Thu 19 May 2022 14:16:29 +0000
ROA not before: Thu 19 May 2022 14:16:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213326
IP address blocks: 2a06:a005:6f0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 435171960 (0x19f03278)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: May 19 14:16:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=45e3824257525a770d4c8ea23af72e157f3966ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d1:af:a9:12:e8:00:23:16:b9:4f:a7:7a:8e:
6f:3a:7a:76:09:42:d4:14:e2:48:ef:61:6a:b9:4a:
93:e8:a4:97:d0:c8:21:47:8b:56:d4:ce:53:fc:92:
4f:fd:9a:52:21:5c:12:37:8f:22:fa:91:27:f2:e3:
65:2b:a7:ba:eb:90:44:69:7e:b2:cd:8a:eb:bc:9f:
6b:66:4f:35:a8:af:ff:e0:94:eb:c9:17:e1:0c:1c:
3a:aa:1d:60:27:75:35:37:c1:ba:fa:bd:87:8c:ad:
8a:9e:11:9d:56:8c:f8:f9:35:f8:4c:fc:08:cb:a2:
ac:44:ee:12:d2:60:4c:91:94:2f:f5:7a:ac:5e:78:
91:20:42:e8:cc:54:c1:5f:70:d0:43:2f:a2:9b:56:
9c:94:8d:4b:c8:d8:67:c8:79:5b:0a:02:56:6a:e1:
08:e2:a4:e1:ee:fc:8f:a5:77:62:25:25:d5:b2:ee:
06:db:8b:de:88:c4:94:c7:63:fb:ce:c3:a8:67:a8:
71:52:8e:48:ff:2d:f1:5c:ad:82:8c:e9:32:4a:68:
88:5b:48:94:aa:67:a4:c3:e7:4b:ab:fb:d8:b0:45:
70:c0:89:09:f3:bc:e6:78:6d:c5:b8:88:ab:db:4c:
98:68:59:5c:8c:89:93:b7:ee:95:b4:7f:6d:e0:d5:
63:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:E3:82:42:57:52:5A:77:0D:4C:8E:A2:3A:F7:2E:15:7F:39:66:CE
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ReOCQldSWncNTI6iOvcuFX85Zs4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:6f0::/44
Signature Algorithm: sha256WithRSAEncryption
14:e9:f1:6b:13:14:2d:ab:00:36:cc:b1:9a:7a:1c:cd:1f:ee:
06:e6:2c:e6:31:67:2d:0b:28:e0:b1:95:61:7b:0e:a9:73:28:
69:3d:b3:31:fe:1a:bc:d2:27:62:b6:57:fd:61:92:24:59:f1:
ff:a5:7e:06:bc:89:94:6f:e4:6b:14:c3:24:a5:c5:92:d5:7a:
03:af:74:71:44:17:cb:30:03:11:94:f4:70:d0:c3:e9:df:52:
bb:0b:4b:45:f1:a8:d0:67:cb:de:43:57:b5:07:f0:cf:04:72:
f9:bf:92:35:d8:93:23:12:16:e6:8c:7a:c8:c3:bd:2f:fb:9c:
c2:c5:e5:30:bc:d2:d1:aa:24:4c:98:af:e3:05:fd:2b:16:fc:
cc:3a:3e:69:1f:ab:dd:5e:8d:74:1a:cd:a6:58:04:2a:4c:ed:
5e:b2:0f:46:90:61:c5:09:39:de:68:5b:20:3a:cd:43:9c:52:
37:5e:50:9f:d7:92:97:ba:e6:9b:c6:2c:74:89:f7:ba:26:70:
a1:ef:e9:2f:dd:0e:d3:32:a7:60:f9:29:bb:fb:2c:5c:4b:77:
c4:54:7c:5e:5f:36:ff:02:51:c3:74:04:4a:39:21:c0:5f:ac:
60:b1:ba:df:74:4b:a0:52:68:b4:43:63:32:50:ea:98:e3:7d:
5e:ca:ff:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:10:46 2025 by rpki-client