Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/SdI7Uc6lNoApOOPLMH8DV77Fjek.roa
File: SdI7Uc6lNoApOOPLMH8DV77Fjek.roa (raw, json)
Hash identifier: FqgI1mfCLnQP90TvbHgIWUQkxXY4LtJvySNlCllq/Js=
Subject key identifier: 49:D2:3B:51:CE:A5:36:80:29:38:E3:CB:30:7F:03:57:BE:C5:8D:E9
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 1AE7C2C0
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/SdI7Uc6lNoApOOPLMH8DV77Fjek.roa
Signing time: Thu 16 Jun 2022 00:20:45 +0000
ROA not before: Thu 16 Jun 2022 00:20:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204740
IP address blocks: 2a06:a005:a0d::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 451396288 (0x1ae7c2c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jun 16 00:20:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=49d23b51cea536802938e3cb307f0357bec58de9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:72:d0:5b:19:c0:0b:7a:56:35:bf:eb:8a:ca:
28:92:c6:8a:c5:e3:91:d2:04:ff:c5:68:0a:ec:2d:
51:80:97:62:35:6f:bc:e8:87:bb:12:10:d3:28:ad:
2e:b0:77:d1:a9:4d:47:d8:e8:70:dd:d7:04:07:86:
9f:b1:9f:1d:87:37:a4:d6:c9:72:c3:a2:a3:cf:37:
4d:e3:82:ab:d0:cf:a0:0c:36:51:99:32:d2:2c:dd:
56:0a:c3:ad:63:e1:60:f0:c6:f6:41:25:b6:da:ec:
8f:3e:05:6e:d4:3f:7a:af:1a:4a:35:15:a9:d4:27:
6c:04:48:36:aa:5e:65:b3:32:ad:c8:68:0b:36:b7:
a3:2d:80:85:fb:a7:41:a2:63:f3:0e:d2:76:10:8e:
e8:83:72:11:e0:4b:69:70:4d:bd:2f:52:d2:39:94:
83:23:bb:ab:50:af:a0:ef:2e:95:2e:b4:bc:54:c7:
61:e3:70:3d:b9:f6:4f:f8:50:db:b8:be:65:ae:55:
e5:d1:f8:91:bb:85:0e:84:08:7d:5e:01:ae:29:20:
15:30:01:83:f5:c5:75:08:e0:43:61:3d:7a:0d:67:
e3:68:75:58:df:86:ad:ba:ac:e1:35:56:b5:a1:a5:
1d:41:88:ee:54:45:5e:0c:29:26:ba:eb:66:d4:26:
a9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D2:3B:51:CE:A5:36:80:29:38:E3:CB:30:7F:03:57:BE:C5:8D:E9
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/SdI7Uc6lNoApOOPLMH8DV77Fjek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:a0d::/48
Signature Algorithm: sha256WithRSAEncryption
72:a2:d2:4d:a6:23:f1:17:ec:f4:f4:d1:22:2a:76:a5:70:b7:
e5:0a:b6:69:00:45:25:38:a9:01:2d:00:a3:7a:43:35:d5:38:
b8:c2:72:d8:ac:63:0e:ec:2e:20:c3:39:6c:21:80:18:d2:1c:
2f:39:81:cb:ba:dd:ec:4b:7b:ee:3a:46:d5:e7:36:b7:b6:c7:
6a:b9:ba:eb:e3:40:0e:02:b4:c0:50:22:44:c8:d2:30:b0:1f:
3e:48:8b:cd:40:e5:87:6f:c5:20:61:d9:bf:e9:14:4a:a1:1c:
95:b1:2f:0c:18:81:f5:29:69:e7:c8:71:fe:b7:ea:87:3c:27:
a9:39:85:02:f9:62:60:f8:ee:6a:86:95:ff:63:9c:9d:1f:4e:
83:6f:b6:d8:d6:e3:fc:f5:ca:d7:55:dd:d5:96:04:b4:28:33:
d2:3e:42:10:30:bf:24:3f:9b:7d:2b:0c:d0:e9:cd:d6:8b:fc:
45:63:cd:68:16:42:25:ec:9f:e1:45:d0:38:99:4f:0c:b0:48:
97:96:2d:11:93:49:67:9a:f4:db:ec:f4:0f:42:55:3c:bf:bf:
5a:90:02:72:7f:3c:1b:51:7f:76:75:be:92:1a:61:f7:68:41:
5b:74:2c:3d:f9:81:cd:cb:e7:17:30:bd:87:09:7e:cd:f6:3a:
61:3b:29:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 09:50:45 2025 by rpki-client