Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/T-B9dF-exQ9kT9s2alaJqFPAJWw.roa
File: T-B9dF-exQ9kT9s2alaJqFPAJWw.roa (raw, json)
Hash identifier: EmWbjC5Z0HwsngyDjPcnnYJDMuj/k64AwF+b8aPdAaY=
Subject key identifier: 4F:E0:7D:74:5F:9E:C5:0F:64:4F:DB:36:6A:56:89:A8:53:C0:25:6C
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 018211BA2ED4A4CE4D152C19050988B4EB91
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/T-B9dF-exQ9kT9s2alaJqFPAJWw.roa
Signing time: Mon 18 Jul 2022 14:33:10 +0000
ROA not before: Mon 18 Jul 2022 14:33:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 32990
IP address blocks: 2a06:a005:1300::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:11:ba:2e:d4:a4:ce:4d:15:2c:19:05:09:88:b4:eb:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jul 18 14:33:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4fe07d745f9ec50f644fdb366a5689a853c0256c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:5d:c9:0f:bf:02:06:28:32:8f:ba:27:15:b7:
18:5e:78:10:cf:78:ac:3a:22:1b:e2:b6:6f:0a:7e:
2c:bb:85:36:0f:72:64:12:18:52:70:1f:57:dc:8c:
b0:b6:8e:ea:7a:d6:2f:3f:7e:45:bd:c3:91:63:ec:
b2:7f:f0:b8:12:a7:ee:b1:ea:58:0e:df:ff:cc:26:
d5:79:0b:46:42:0b:1d:5a:a5:10:96:02:46:63:54:
2f:7c:06:35:50:5b:a5:b5:5c:5a:d7:5e:92:ce:30:
06:7f:03:59:66:10:36:9d:46:ae:b3:3f:d3:0d:ea:
cc:56:13:10:77:c2:5b:92:c3:db:83:83:2a:02:b5:
bf:25:c0:5f:47:bf:04:72:0c:93:82:2a:35:ca:d7:
d2:94:f0:68:25:f4:99:10:44:12:f5:f2:b1:6e:11:
85:08:e1:13:0b:14:bd:02:52:a9:4f:10:cb:68:83:
bd:73:db:6b:d4:aa:1a:42:b4:7d:4a:19:51:92:dd:
39:70:4f:cc:67:3b:4b:86:95:c8:69:89:b4:fa:da:
4a:26:be:98:56:59:0d:3b:72:28:d6:69:1b:ba:f4:
8a:47:4c:78:3a:64:43:9f:98:ea:75:55:a4:03:09:
ea:3d:1a:c3:c7:eb:a8:e3:41:e4:b3:59:7f:19:19:
44:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E0:7D:74:5F:9E:C5:0F:64:4F:DB:36:6A:56:89:A8:53:C0:25:6C
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/T-B9dF-exQ9kT9s2alaJqFPAJWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1300::/44
Signature Algorithm: sha256WithRSAEncryption
85:a2:00:e9:8d:51:31:d2:a3:3d:d0:5b:a6:3a:23:f1:b3:2f:
3f:2d:46:b5:44:be:bc:5b:3b:17:68:82:c3:0e:ee:e7:d7:28:
1c:7c:c3:04:fd:b6:e5:02:9e:af:82:a1:86:94:8d:a9:4a:3a:
a2:df:ef:cf:13:4a:ff:33:ac:4a:1b:3d:8b:21:21:ad:51:37:
f8:36:a6:9f:d7:ff:19:fd:fd:85:b2:00:ca:8e:a6:c1:2d:3d:
d2:23:0a:fa:28:35:6d:9d:d3:a1:d6:22:ba:12:29:ec:40:fb:
23:a2:11:89:8b:1f:54:1a:37:9e:7f:32:83:ca:7f:08:50:21:
8e:2d:4f:5a:a2:e4:38:e1:d0:0f:bd:18:fc:8e:6a:b8:df:ca:
33:67:76:ab:3b:c3:aa:08:3a:c4:16:1a:e3:e5:96:0a:d1:8f:
c3:16:7f:75:b5:cb:5c:ff:1f:20:77:71:94:a9:33:4f:4d:20:
21:6f:30:e6:83:fe:7f:e8:45:e8:51:13:26:47:54:fb:1f:26:
e5:38:ae:07:27:9c:16:a7:62:ad:ce:cb:05:35:7a:35:5c:00:
f2:8d:32:a5:fb:50:a2:c9:60:7e:c8:eb:f9:dc:eb:3a:50:b8:
0b:27:02:0c:37:4b:23:8f:42:e9:74:30:d9:fc:4b:13:10:72:
a6:d5:de:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 09:59:27 2025 by rpki-client