Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/S4dX3FwikX9R-mxcdJdsmMeT7ZU.roa
File: S4dX3FwikX9R-mxcdJdsmMeT7ZU.roa (raw, json)
Hash identifier: zEsFZ4zrvAv4qti/T3sgkB+SsDH2Damscq/cRoXUcNU=
Subject key identifier: 4B:87:57:DC:5C:22:91:7F:51:FA:6C:5C:74:97:6C:98:C7:93:ED:95
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 19AD1F80
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/S4dX3FwikX9R-mxcdJdsmMeT7ZU.roa
Signing time: Tue 10 May 2022 07:36:12 +0000
ROA not before: Tue 10 May 2022 07:36:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205183
IP address blocks: 2a06:a005:8a0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 430776192 (0x19ad1f80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: May 10 07:36:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4b8757dc5c22917f51fa6c5c74976c98c793ed95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1b:10:ad:1e:07:62:f1:7d:69:22:69:57:ca:
a2:3a:9d:40:0c:62:68:3b:10:5c:ac:bd:05:de:f8:
2c:30:27:73:5e:0a:6b:35:5e:06:78:b6:b8:bc:d9:
ed:74:cf:a7:55:a9:d2:6a:f6:33:70:ba:e3:ef:b0:
c9:d7:1f:62:ff:52:3f:d1:3c:51:bd:63:3d:1f:19:
c9:85:b5:b7:82:da:12:cf:47:d9:9d:7c:70:98:e8:
86:97:bd:cc:64:31:c0:4d:09:c0:15:67:c0:36:a4:
70:05:29:0d:b8:9a:09:e3:64:47:3e:5a:b4:9b:1b:
cf:58:65:39:e3:85:c8:31:09:76:b1:c6:4f:b7:ef:
34:13:37:95:2f:b2:19:6b:a9:4e:40:e6:47:4f:79:
ed:78:4d:60:2b:51:94:29:ca:0b:df:24:ba:3a:01:
23:40:93:f5:35:e9:84:2a:0d:ba:ee:29:68:0e:84:
83:a5:ce:e9:50:58:22:33:a3:98:e2:fb:84:70:52:
3b:99:7a:d4:a3:9d:d5:e1:45:67:d6:2a:58:03:53:
58:50:89:f3:ad:aa:e4:2c:a8:bf:ee:3d:75:6e:6d:
e2:60:8a:da:39:3c:0b:d3:5d:61:30:72:41:4f:6d:
63:33:0e:e6:48:dd:a4:eb:de:38:ee:78:a2:91:3d:
d6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:87:57:DC:5C:22:91:7F:51:FA:6C:5C:74:97:6C:98:C7:93:ED:95
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/S4dX3FwikX9R-mxcdJdsmMeT7ZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:8a0::/44
Signature Algorithm: sha256WithRSAEncryption
57:1d:11:04:eb:30:d9:cb:08:a6:2a:be:e8:6e:3d:e0:a4:f2:
26:62:19:8a:0f:48:cf:cb:38:a1:9f:b6:c8:9c:ec:36:7f:09:
e5:be:93:8c:f9:11:41:a6:7e:bf:31:8b:a7:32:d7:11:c6:12:
4e:61:20:f6:49:4a:d5:45:24:d3:b4:d7:8a:6f:dc:26:61:28:
22:6c:74:35:b5:e5:50:02:26:5d:f2:3f:de:c7:69:69:3a:49:
a3:50:ea:7b:cd:98:6a:6a:ca:65:61:0d:ee:57:9a:99:61:e3:
9f:05:c1:3e:ee:63:22:7d:7d:31:3c:f4:c0:12:27:99:c7:77:
49:ce:e3:93:de:12:5e:96:60:1c:73:9c:0f:38:65:43:69:45:
c1:d5:72:7f:09:d6:df:1b:44:21:e0:d6:4d:17:d5:4c:00:cb:
73:88:2a:81:06:eb:b0:ef:6e:bd:4e:53:7a:d7:6a:a0:a1:d8:
06:b1:ae:b8:32:6e:ae:17:9a:ce:c2:4f:af:91:70:7b:10:89:
ee:fb:a8:a3:51:29:43:3b:0c:c2:5e:13:59:77:dc:6c:0f:da:
ab:87:25:da:a4:00:31:d0:db:ed:1d:12:6c:05:8b:8a:95:5c:
e8:ee:e0:c5:86:32:2e:e9:29:dd:61:4b:4d:7c:7b:31:7c:a4:
d9:75:11:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:00:51 2025 by rpki-client