Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/TzdjpIUkiFP5CI6sL5VShYXvkeQ.roa
File: TzdjpIUkiFP5CI6sL5VShYXvkeQ.roa (raw, json)
Hash identifier: CkNJR/PoL/K4m8Axa3WRBCL6gz8EpeOoavSsidzjdVo=
Subject key identifier: 4F:37:63:A4:85:24:88:53:F9:08:8E:AC:2F:95:52:85:85:EF:91:E4
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 1AEF556E
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/TzdjpIUkiFP5CI6sL5VShYXvkeQ.roa
Signing time: Thu 16 Jun 2022 21:10:45 +0000
ROA not before: Thu 16 Jun 2022 21:10:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 926
IP address blocks: 2a06:a005:a0f::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 451892590 (0x1aef556e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jun 16 21:10:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4f3763a485248853f9088eac2f95528585ef91e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:54:a1:36:59:81:da:54:51:e4:b9:27:64:8d:
63:4d:bf:54:6b:08:38:ef:32:95:00:dd:5b:43:bc:
5d:af:75:06:39:55:84:2f:63:b6:59:81:c1:dd:f4:
8d:e4:d9:de:a3:6f:75:15:52:81:3e:cb:51:ad:ff:
2e:0b:2f:51:e0:b1:ea:45:54:f4:1b:23:c1:8f:b8:
ac:cd:55:55:4d:a5:83:b5:f2:cc:c9:4f:dc:b3:e0:
ec:7f:b5:28:48:3f:7d:f4:3d:b0:82:89:c6:1b:c7:
2c:65:5d:1f:db:5e:0d:ee:ad:01:c2:c7:92:70:a2:
9f:95:fc:5e:ae:28:93:11:b0:c5:08:90:b6:c5:70:
ce:eb:8a:71:32:8d:fb:34:c2:e4:f8:3d:6d:61:8d:
64:16:03:df:a2:c6:4b:ef:e2:ce:b1:eb:ec:5b:87:
35:3a:fc:76:f3:ad:e2:76:af:66:6b:a8:86:d2:95:
bd:1e:0b:d8:a9:fd:89:42:07:64:07:12:e9:0c:3f:
76:94:c4:55:d1:ad:ec:8c:58:7a:30:38:45:70:22:
6a:0e:dc:ec:ee:ed:98:76:51:2a:24:f7:8a:73:5f:
fc:62:0a:f4:e2:90:21:75:fb:6b:8d:51:72:27:d9:
2d:03:c5:1d:5d:c2:28:b4:86:49:a1:16:6a:6b:1b:
3a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:37:63:A4:85:24:88:53:F9:08:8E:AC:2F:95:52:85:85:EF:91:E4
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/TzdjpIUkiFP5CI6sL5VShYXvkeQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:a0f::/48
Signature Algorithm: sha256WithRSAEncryption
8d:c5:ad:6b:91:ed:24:8e:ac:9c:de:6b:38:e0:38:eb:30:ff:
7c:fa:2a:cd:00:09:2c:82:21:40:b0:37:17:62:92:c6:8a:2a:
73:04:24:08:e5:30:6c:cb:86:e0:4e:37:6f:76:93:54:18:9f:
b5:18:6e:40:e3:0a:00:ad:b0:65:fa:78:4f:5a:29:9f:70:dd:
b0:36:85:e6:85:91:62:2b:a6:63:c2:1a:ba:d1:2f:bd:fe:72:
01:ab:16:74:43:cc:d5:31:7c:33:d5:6c:7f:d0:d2:87:5a:cc:
bb:04:da:33:5d:6d:17:d4:6a:cd:27:30:0c:8f:9c:8a:81:94:
9b:47:d2:99:60:69:76:ca:93:60:bb:bd:26:0f:53:60:7f:07:
19:bf:b3:1a:82:14:93:29:c7:83:f1:4a:c3:fe:80:87:6e:ee:
d0:6a:8a:1d:d6:e9:77:d7:6e:7e:77:c3:45:d2:4d:28:38:24:
27:5a:69:6c:c4:24:54:8c:0a:ba:dd:29:65:f1:33:c2:2b:91:
d4:99:54:c1:56:0d:91:5a:ea:76:fe:36:a0:cf:ad:e7:3b:db:
76:cd:af:3a:e6:c5:bc:c7:77:33:af:6f:dc:fc:06:0c:bf:a5:
85:c6:93:fd:76:bc:cd:7f:82:80:1f:58:7a:f1:43:12:4c:b7:
85:15:aa:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:05:50 2025 by rpki-client