Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/U4Al-iSkOr0P2_dNN05pEsSllMk.roa
File: U4Al-iSkOr0P2_dNN05pEsSllMk.roa (raw, json)
Hash identifier: 6ozYrn936AXfkTMofBlMUcD+PWnt9ssBqUdgsfDFT5I=
Subject key identifier: 53:80:25:FA:24:A4:3A:BD:0F:DB:F7:4D:37:4E:69:12:C4:A5:94:C9
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01827DC869D40851201A71A48700AB1C9E5C
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/U4Al-iSkOr0P2_dNN05pEsSllMk.roa
Signing time: Mon 08 Aug 2022 14:07:42 +0000
ROA not before: Mon 08 Aug 2022 14:07:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204005
IP address blocks: 2a06:a005:16a0::/44 maxlen: 48
2a07:54c2:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:7d:c8:69:d4:08:51:20:1a:71:a4:87:00:ab:1c:9e:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Aug 8 14:07:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=538025fa24a43abd0fdbf74d374e6912c4a594c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ee:37:d3:fe:96:26:68:da:5a:20:51:b4:ae:
98:60:8b:66:96:35:8e:2f:e1:7f:80:d9:57:33:52:
1f:12:66:23:63:db:b8:7e:2f:50:c7:fe:95:61:b6:
cc:41:26:4a:a6:40:b0:6a:89:6b:fb:1b:bb:6d:b7:
e7:b1:7d:33:0f:7d:83:4b:61:d0:4a:81:75:50:c3:
d8:a2:78:07:46:ae:96:f8:85:52:76:40:23:12:81:
e5:fb:77:4e:d3:df:b3:1f:a5:29:70:a5:46:e8:d6:
cd:1b:e8:c6:bf:42:91:e3:95:0f:55:50:9b:a2:bd:
f3:f0:75:03:d9:ad:db:a0:ad:57:fa:da:c1:25:24:
da:8d:7f:a1:ea:45:df:d2:52:e2:b5:71:dc:a7:9f:
80:40:3e:26:7e:e4:c4:7c:31:5c:ee:36:c1:8d:a0:
81:34:42:0c:e5:66:a2:45:f0:14:3d:9f:f9:81:b2:
1d:07:b6:d2:19:b0:15:a5:cf:ed:6c:a1:3d:5d:86:
68:9a:c9:11:b5:04:9a:d5:c7:7f:ac:bd:1c:95:3c:
10:ac:a0:17:79:f5:51:59:2c:a2:85:79:56:0a:6c:
1e:78:3a:80:51:ed:8e:ff:fe:74:4f:a8:d9:6d:9b:
a7:42:a0:d4:ef:d8:93:35:fc:12:61:17:93:e7:88:
4d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:80:25:FA:24:A4:3A:BD:0F:DB:F7:4D:37:4E:69:12:C4:A5:94:C9
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/U4Al-iSkOr0P2_dNN05pEsSllMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:16a0::/44
2a07:54c2:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
97:a5:75:65:db:47:1b:5f:8b:45:17:f0:ad:99:19:b4:a8:72:
9d:76:6c:63:5c:98:38:49:08:49:1d:9b:75:2d:cd:33:55:7a:
4d:ae:02:a4:1c:05:79:93:c1:0d:d8:1b:eb:49:d6:3a:b0:fc:
2c:51:a8:42:f5:54:89:16:5b:19:c1:4d:b5:b3:af:78:df:77:
01:a4:47:a7:50:b6:32:8b:5e:22:19:ce:49:63:f5:19:e0:87:
7f:91:7d:26:73:a9:78:13:e2:49:d3:32:71:12:a5:5e:66:84:
b4:97:28:dc:9b:61:33:11:21:1c:98:eb:d0:90:64:e2:41:b6:
ef:27:34:a1:5b:57:b6:b0:a1:db:48:a9:d7:69:20:a4:0b:51:
a0:bc:ee:03:36:ae:2f:05:15:f7:05:f1:70:99:11:cf:da:13:
2d:b5:d1:cd:15:9a:64:55:22:06:74:a7:9c:34:50:f8:0c:ac:
bf:b9:3d:36:b2:b4:f8:ba:99:25:8a:14:52:b7:62:c3:fa:18:
67:96:60:d7:23:85:2e:09:bf:33:57:bd:eb:33:01:17:ed:5f:
b1:17:b4:5e:3f:5a:92:ff:4b:4b:27:5b:90:f7:07:5d:44:ad:
7c:60:68:ed:cd:c3:93:21:94:ce:8f:e4:33:d1:04:bb:b0:a4:
01:49:2a:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:09:41 2025 by rpki-client