Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/UeXkDYnElalpOKtvNt-0p8xmWhI.roa
File: UeXkDYnElalpOKtvNt-0p8xmWhI.roa (raw, json)
Hash identifier: fAbc1DIeGxp83bmq75jcQUo8h9ETRIYJDbZwuPCXdg0=
Subject key identifier: 51:E5:E4:0D:89:C4:95:A9:69:38:AB:6F:36:DF:B4:A7:CC:66:5A:12
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0181DCE722CD0F66D35EC96A55B4F0C15E6F
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/UeXkDYnElalpOKtvNt-0p8xmWhI.roa
Signing time: Fri 08 Jul 2022 08:22:24 +0000
ROA not before: Fri 08 Jul 2022 08:22:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 64264
IP address blocks: 2a06:a005:11b0::/44 maxlen: 48
2a06:a005:11e0::/44 maxlen: 48
2a06:a005:11d0::/44 maxlen: 48
2a06:a005:11c0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:dc:e7:22:cd:0f:66:d3:5e:c9:6a:55:b4:f0:c1:5e:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jul 8 08:22:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=51e5e40d89c495a96938ab6f36dfb4a7cc665a12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7e:5b:1e:ea:4b:f7:4b:2e:3b:26:bd:49:99:
cd:14:74:60:91:40:7b:f8:4c:94:e8:ff:6e:1d:e8:
d4:02:b5:33:a9:c2:75:ef:7f:e1:44:97:f3:c3:62:
f3:1e:11:fe:e6:92:4d:40:db:fb:39:8f:12:09:95:
16:73:94:e3:ee:9e:8e:c5:97:92:e5:b4:04:52:6b:
54:38:d3:8a:89:f8:a5:cb:89:67:98:89:52:d1:f0:
db:53:cf:a2:28:12:db:32:5e:69:38:20:d4:46:3f:
7c:aa:e1:e1:01:db:27:4e:ff:44:bb:2b:80:a6:24:
8f:fb:cb:2d:0c:59:72:f4:ea:03:8f:40:0f:f4:d8:
fb:2d:2f:15:8b:76:16:e9:ad:4a:b4:5c:7b:d7:ea:
a7:e9:ea:17:4e:ba:96:65:ee:50:aa:52:ca:f9:6a:
8a:e7:77:27:15:6a:e0:67:16:67:28:c4:36:08:81:
ed:95:02:d8:25:1b:65:0f:6e:29:29:89:4e:84:77:
09:b0:b9:00:54:1c:f4:3d:d9:6b:8a:8b:8d:35:0b:
fa:ff:d7:2e:23:58:b7:5c:c9:d0:e8:7f:be:a9:d1:
23:b8:e6:c3:d4:e6:b4:8f:26:9a:e5:58:35:c2:a4:
ec:ea:6e:bf:a4:37:f2:ed:4c:b1:ca:86:66:d9:b3:
17:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:E5:E4:0D:89:C4:95:A9:69:38:AB:6F:36:DF:B4:A7:CC:66:5A:12
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/UeXkDYnElalpOKtvNt-0p8xmWhI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:11b0::-2a06:a005:11ef:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
48:3e:96:45:b9:91:41:92:af:bb:73:64:de:28:bd:62:d3:2f:
7c:23:6b:9b:3a:69:01:32:a2:50:29:fb:06:57:a7:3a:68:4b:
7a:49:6a:b8:be:6a:a2:bb:ea:d5:d1:82:03:f3:55:34:47:8a:
f4:03:d4:8f:cb:23:fb:63:e3:c4:37:b9:8a:55:7b:76:2b:f9:
87:c2:88:e8:fe:d1:a1:a4:5b:a1:69:2a:97:dc:49:a6:b6:4d:
21:c9:56:d4:cf:7a:64:07:4a:7b:60:5e:35:f6:80:09:65:9b:
4d:6a:f1:d5:1b:00:90:94:a6:8f:4f:aa:a4:fd:01:8a:df:85:
d0:ad:78:ff:5c:be:6d:c1:5d:66:ba:18:50:94:b1:bf:a8:42:
20:9c:0f:67:0c:66:91:c8:ed:62:c0:f4:f9:c7:fe:ed:60:f3:
3d:05:09:c8:a3:f3:e7:3f:48:8a:8d:f6:a1:a6:89:ad:53:04:
8d:da:de:66:18:b6:cf:ba:41:be:cf:a6:86:37:87:e9:bb:b5:
e0:a0:9b:6b:df:e7:76:82:6e:86:55:ed:b1:d0:1f:e2:19:7a:
29:b6:7b:4a:55:2b:2e:13:34:2e:86:9c:7e:6b:85:c4:e0:18:
07:28:c2:de:53:24:66:c7:11:76:16:e6:cc:af:e2:22:b8:5d:
c4:98:5f:25
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Apr 22 13:47:20 2025 by rpki-client