Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/STCcpqEbXEtzEjtBPhuk01lHm7E.roa
File: STCcpqEbXEtzEjtBPhuk01lHm7E.roa (raw, json)
Hash identifier: 2j0xt2imVax0CAe/tCJkHjvQ7UWNYPsN/H1DmaR5Vnw=
Subject key identifier: 49:30:9C:A6:A1:1B:5C:4B:73:12:3B:41:3E:1B:A4:D3:59:47:9B:B1
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 17D95215
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/STCcpqEbXEtzEjtBPhuk01lHm7E.roa
Signing time: Sun 10 Apr 2022 18:46:52 +0000
ROA not before: Sun 10 Apr 2022 18:46:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211367
IP address blocks: 2a06:a005:420::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 400118293 (0x17d95215)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Apr 10 18:46:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=49309ca6a11b5c4b73123b413e1ba4d359479bb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:15:88:20:c4:74:49:37:d4:af:8b:09:ef:75:
95:c4:52:27:39:a5:16:1b:bb:0a:a2:2f:4c:38:05:
ab:2a:b0:92:80:b9:f0:c2:e7:8b:7b:91:ad:dc:8c:
28:33:b2:47:5a:9d:94:9e:49:27:c6:e1:93:0b:72:
1f:f7:81:f4:92:f3:78:4b:b9:dd:57:c9:1f:ec:b0:
44:bb:47:4f:3f:f1:8e:5d:ff:e6:6e:d6:12:7f:5d:
0c:52:6e:91:0d:d8:20:de:88:be:42:ac:f8:3c:c3:
ae:84:75:f1:52:10:70:f6:82:83:93:8d:a6:03:d9:
8d:cb:43:42:3a:4c:d2:b4:c9:54:fd:16:19:2f:d1:
d3:fe:45:e9:b3:9d:29:d6:d7:04:ab:ff:95:9c:c8:
18:81:45:04:99:69:23:44:a2:54:69:1a:6a:27:84:
7b:4a:2e:c8:72:c0:9f:a4:19:3f:d1:a6:72:67:4f:
df:17:b3:8c:87:4d:2c:95:26:cf:4a:a8:f3:d3:ae:
29:1f:fe:cd:8b:23:7c:6c:5f:10:50:dc:45:b0:39:
b4:ad:47:c9:47:bb:23:9f:d8:d9:26:8a:56:bb:6b:
c2:2b:6b:82:9a:a9:cf:a5:4d:3c:4b:d3:79:14:90:
cd:58:8e:6d:86:92:8f:34:21:cb:c7:e2:1a:ea:dd:
3b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:30:9C:A6:A1:1B:5C:4B:73:12:3B:41:3E:1B:A4:D3:59:47:9B:B1
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/STCcpqEbXEtzEjtBPhuk01lHm7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:420::/44
Signature Algorithm: sha256WithRSAEncryption
28:b5:ed:5e:fa:34:85:a2:2f:9a:d8:8d:37:ce:46:e5:1f:22:
2b:92:ed:65:8c:8e:2f:e6:c9:e9:0d:56:fa:5d:98:7e:d5:61:
7e:94:46:0e:4c:9f:79:37:12:e9:51:07:95:ae:e3:c0:b9:5e:
08:95:4f:d0:49:94:6c:3c:42:40:ee:49:2e:cf:07:b3:e1:58:
34:bd:51:ff:27:63:53:57:b5:f4:5f:0b:b9:42:54:e4:05:57:
9d:88:e0:03:8a:66:dd:64:09:8f:3b:b8:3b:8a:56:44:32:12:
98:95:2f:f6:19:eb:6c:02:9b:7f:ae:ed:26:54:56:38:2d:dc:
b9:d8:24:5a:d0:fa:52:f2:d5:4b:c4:ac:4d:b8:b2:75:37:10:
90:8f:96:88:a2:d6:8c:a3:9f:90:04:2b:71:0f:50:e1:b5:a8:
85:61:91:5f:21:90:53:02:a1:25:c2:12:9b:20:f6:81:a0:15:
9d:72:e6:94:c9:84:0f:b5:3b:66:4b:fd:f9:11:50:12:6c:02:
ff:43:e0:7f:ba:5c:95:04:f7:1e:fa:e3:40:a9:c9:8a:af:79:
64:29:b5:d0:c9:e3:91:f6:ae:48:35:ca:a1:62:48:29:6b:d4:
78:08:7d:9e:fa:29:d6:8e:9c:ac:0e:2b:ef:7e:93:ad:43:ed:
11:ce:b5:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:44:16 2025 by rpki-client