Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Stq1Isee7aT3r68Lwh9MZV0pFR0.roa
File: Stq1Isee7aT3r68Lwh9MZV0pFR0.roa (raw, json)
Hash identifier: 1cglC+vzZRvoNwM3zBfAefHAot580CxtItGY6GqAQPo=
Subject key identifier: 4A:DA:B5:22:C7:9E:ED:A4:F7:AF:AF:0B:C2:1F:4C:65:5D:29:15:1D
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 1B5CEB3C
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Stq1Isee7aT3r68Lwh9MZV0pFR0.roa
Signing time: Sat 25 Jun 2022 16:07:11 +0000
ROA not before: Sat 25 Jun 2022 16:07:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204508
IP address blocks: 2a06:a005:d29::/48 maxlen: 48
2a06:a005:f50::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 459074364 (0x1b5ceb3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jun 25 16:07:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4adab522c79eeda4f7afaf0bc21f4c655d29151d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0b:c3:84:49:1c:37:07:e3:6a:b9:a5:a0:34:
a1:e0:48:31:09:98:87:40:67:ea:ea:a2:35:21:75:
2d:24:90:3c:0d:0e:fe:a7:11:c4:02:f0:45:f5:2f:
99:1f:43:4c:cf:b6:44:d9:98:03:7b:6d:19:40:64:
05:72:50:fc:fb:99:84:4b:89:83:2e:39:b3:25:8f:
2e:95:3e:47:af:50:01:77:eb:ac:cc:42:55:f4:e3:
9f:7e:cb:e0:63:f3:71:19:d1:5c:83:52:3a:38:b2:
fc:86:19:fe:14:d2:dc:88:c3:d4:60:f8:5f:98:5f:
d1:54:8c:34:c3:db:ef:5e:fd:ae:ee:a5:51:e7:2d:
64:5d:dd:07:05:3d:6a:a2:df:97:45:8a:88:2d:2c:
5f:0a:6b:7b:6c:c9:a5:39:e3:01:36:2f:82:44:79:
bb:b7:c1:34:ca:f8:66:16:e0:5b:1f:37:43:22:cf:
f5:d9:77:ad:59:1c:47:25:09:96:a3:1c:cb:4a:4d:
e4:e8:c6:4d:c4:38:91:92:2d:db:42:fa:67:8e:cd:
71:1a:62:fd:57:ee:ae:94:07:57:af:da:6e:85:f4:
70:33:ea:f2:a7:d1:7a:65:63:7b:27:29:57:c0:f1:
9a:af:05:40:91:31:de:12:9f:9c:20:c1:8d:d3:d5:
cc:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:DA:B5:22:C7:9E:ED:A4:F7:AF:AF:0B:C2:1F:4C:65:5D:29:15:1D
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Stq1Isee7aT3r68Lwh9MZV0pFR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:d29::/48
2a06:a005:f50::/44
Signature Algorithm: sha256WithRSAEncryption
4e:7a:70:e9:74:01:77:bb:17:ac:d2:f2:c8:5d:b9:3a:52:5d:
3d:43:67:15:1b:0b:ab:40:ed:db:d6:59:be:70:c6:41:cd:0c:
c8:87:cc:e8:ea:63:3c:4a:6e:f7:51:ad:8c:99:08:f2:18:39:
99:76:39:fc:dc:08:7a:ce:aa:f9:ec:66:8c:ca:4c:20:be:93:
c2:15:3a:41:c8:e0:56:84:87:ec:4e:ed:8a:fa:49:27:33:08:
83:bd:22:22:f2:bd:31:cc:16:56:7e:1c:66:64:fe:38:68:a0:
30:eb:a7:20:23:3f:c3:b5:73:31:4f:77:eb:4d:4f:3f:6b:1f:
ce:a4:59:a1:39:e6:2d:d3:f1:ce:75:36:52:18:75:4b:47:88:
57:a1:6e:35:32:7a:b8:b6:dd:14:63:f5:8f:a4:66:b6:03:a0:
1c:70:05:2d:b5:47:f4:4d:1c:04:d3:f5:de:93:9f:b1:d3:8c:
bc:df:f8:6b:32:7a:70:ac:5c:2b:62:81:1e:ae:6e:13:11:d4:
68:4e:93:ab:0f:71:ff:b6:cc:a4:ff:50:f0:4c:e3:10:3b:bc:
91:34:12:b3:7e:8f:65:00:2a:68:27:b2:ed:35:42:78:7e:61:
6b:1c:09:18:48:09:ea:c6:13:38:79:f6:2f:f6:a0:4c:78:0e:
f5:c5:e7:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:27:11 2025 by rpki-client