Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/RvQk8zh0HoW2CKvr-mN2eaFqHR4.roa
File: RvQk8zh0HoW2CKvr-mN2eaFqHR4.roa (raw, json)
Hash identifier: mKmJGkx4ojzODy8WT9x6JtW6QnY4rXTu0Hggd2stdcM=
Subject key identifier: 46:F4:24:F3:38:74:1E:85:B6:08:AB:EB:FA:63:76:79:A1:6A:1D:1E
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01829384AD532E948FBFE0B95CE700D31C3E
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/RvQk8zh0HoW2CKvr-mN2eaFqHR4.roa
Signing time: Fri 12 Aug 2022 19:25:22 +0000
ROA not before: Fri 12 Aug 2022 19:25:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205431
IP address blocks: 2a06:a002::/32 maxlen: 48
2a06:a005:17a0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:93:84:ad:53:2e:94:8f:bf:e0:b9:5c:e7:00:d3:1c:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Aug 12 19:25:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=46f424f338741e85b608abebfa637679a16a1d1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c0:a8:11:9d:32:21:fc:67:43:32:29:ec:63:
f9:ca:65:0e:31:39:c7:59:3e:ea:e2:1d:0f:41:d5:
e1:d5:84:09:2b:53:d4:fc:68:69:44:6f:34:12:ee:
e2:59:36:0a:cc:d9:f6:fa:4f:b5:aa:a6:50:e7:0e:
a6:49:c6:2c:5b:6b:e0:dd:48:6f:28:e7:37:f9:b3:
bc:d9:cf:41:ee:82:73:63:a4:e1:91:9a:0f:6a:3c:
2e:c3:0f:64:b8:17:c2:25:cf:b4:c8:36:b9:8f:db:
5b:64:39:c3:f2:07:19:f4:e6:c4:8d:37:84:bb:6e:
36:85:a7:ad:b1:ca:29:0b:d4:dd:1c:75:08:82:83:
41:49:85:f3:2d:93:60:d5:da:7f:70:c3:a0:81:7d:
31:f6:56:3f:41:02:8d:47:a1:e7:cb:77:81:4b:03:
a9:a7:72:10:54:bc:c1:f6:19:0a:54:7e:9f:de:5b:
c4:7a:66:4b:b7:67:e4:30:a7:f0:0b:16:f0:8d:77:
bc:e1:47:18:fc:f6:53:9c:79:17:c9:27:46:33:07:
4f:ef:d2:f6:b2:c2:49:da:e9:ee:fb:82:c3:3a:33:
fa:1c:b9:c0:8e:b7:0c:3b:60:47:25:82:03:d3:ea:
4b:d2:af:5c:7d:d5:8f:4f:bf:33:ee:f8:b8:9f:57:
61:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:F4:24:F3:38:74:1E:85:B6:08:AB:EB:FA:63:76:79:A1:6A:1D:1E
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/RvQk8zh0HoW2CKvr-mN2eaFqHR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a002::/32
2a06:a005:17a0::/44
Signature Algorithm: sha256WithRSAEncryption
7a:a7:63:26:f6:fd:fe:cb:95:8f:f9:95:e5:72:78:5c:11:ce:
5d:b4:fe:5c:94:b4:77:2c:61:4c:65:4b:41:7a:6d:7f:e1:a7:
d2:be:7e:2a:f1:ac:10:77:53:f7:bc:53:db:e7:e6:2d:3d:6d:
99:a0:96:78:d6:af:4a:4a:4c:ae:4d:65:54:6b:3a:98:37:c7:
ca:e4:33:4f:1a:be:61:dd:ed:b8:78:02:28:23:e5:22:08:d4:
59:46:c1:1f:0a:5f:95:46:96:e7:fd:c8:08:c7:55:63:ea:c2:
c4:a7:6c:e4:a2:d1:1b:d1:a8:ac:1b:32:d5:eb:0f:03:33:75:
89:2f:85:e7:7d:53:bd:d2:84:11:bb:fb:3f:71:0f:65:55:62:
25:a5:c5:1a:e7:6d:f2:2a:ed:be:41:0e:02:62:ba:04:f0:34:
ca:68:98:37:6a:fc:2b:dd:a9:05:18:41:fe:6e:97:de:eb:ff:
e0:84:47:f2:9f:eb:93:52:70:32:bf:e4:ab:80:2a:26:47:39:
16:73:ea:2b:74:49:6a:37:d2:5e:78:a9:39:33:11:47:77:07:
f6:78:78:21:e4:0a:09:d7:bd:5e:44:71:23:d6:c8:db:e1:c0:
6d:c0:20:df:e4:33:51:da:f7:70:d5:27:9b:07:73:e5:20:e5:
3e:16:26:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 04:01:32 2025 by rpki-client