Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Va050KWucIPrYppijFUfYGVowQw.roa
File: Va050KWucIPrYppijFUfYGVowQw.roa (raw, json)
Hash identifier: atcV+FGPSVFH13lMgDg4p6D3k8yXbDPt+o7MbQvplvI=
Subject key identifier: 55:AD:39:D0:A5:AE:70:83:EB:62:9A:62:8C:55:1F:60:65:68:C1:0C
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0183EB5C85DC32C6E11B2B91A2B83ED7B96D
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Va050KWucIPrYppijFUfYGVowQw.roa
Signing time: Tue 18 Oct 2022 13:50:52 +0000
ROA not before: Tue 18 Oct 2022 13:50:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202260
IP address blocks: 2a06:a005:1d00::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:eb:5c:85:dc:32:c6:e1:1b:2b:91:a2:b8:3e:d7:b9:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Oct 18 13:50:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=55ad39d0a5ae7083eb629a628c551f606568c10c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8c:84:6a:22:d8:52:48:ff:67:3c:e3:f4:3d:
c1:43:bf:8e:39:5a:69:aa:b9:c8:75:16:06:c8:76:
58:f4:93:ef:d0:4b:55:5a:52:6b:24:57:78:db:7e:
03:26:3e:6f:50:59:90:c2:7d:e2:07:a7:80:1f:33:
7f:84:63:fe:84:f3:df:d1:d6:85:1d:a5:97:74:19:
7b:11:d6:6b:68:86:4f:c2:aa:dc:21:38:1c:f7:ff:
bd:bf:1c:24:82:bb:12:42:22:68:69:9c:08:e4:72:
af:1f:90:d3:1e:90:b6:73:eb:44:e4:6d:82:56:76:
cd:79:6e:5c:d2:59:47:f0:00:88:a6:70:73:ce:8f:
79:ce:91:e7:9e:44:0f:45:31:25:e1:e0:3f:8a:dc:
9d:11:83:95:9e:56:0c:1e:64:59:0d:15:54:f8:e1:
b5:e6:78:b8:21:11:93:2c:87:82:cf:df:fa:72:a7:
df:d5:e4:8d:f8:52:7b:a0:11:eb:eb:90:3e:ba:2b:
7e:be:48:2f:2b:f2:70:de:e9:b5:5e:06:b7:82:7d:
e0:04:e8:07:66:4c:cd:9d:f7:39:1d:c8:7b:5e:b7:
57:9b:be:33:75:40:f7:06:bc:d0:af:74:75:cd:6b:
7d:7d:52:45:ec:e9:b3:39:67:8a:79:61:f5:fd:8f:
d6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:AD:39:D0:A5:AE:70:83:EB:62:9A:62:8C:55:1F:60:65:68:C1:0C
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Va050KWucIPrYppijFUfYGVowQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1d00::/44
Signature Algorithm: sha256WithRSAEncryption
5f:09:e8:f7:03:2f:ad:1c:17:3f:ff:ed:c6:95:59:34:8b:fe:
21:58:e1:01:b3:77:22:83:be:f9:8f:ca:2d:c9:ba:fa:32:7a:
3c:04:17:93:e7:eb:75:85:4b:36:84:ba:70:eb:c4:a9:bf:e6:
59:95:6a:8e:9a:7d:6e:ff:7e:fb:cd:5c:f1:ef:04:15:2e:98:
a3:05:49:13:32:f8:68:3e:25:08:09:ff:12:9e:4d:d0:9a:98:
72:0f:48:7c:fa:e0:36:47:20:74:ea:bf:4d:c6:1c:89:83:56:
e3:97:36:1e:f4:fe:88:b7:08:e1:88:7f:a0:85:96:43:d2:7d:
88:eb:b2:da:12:d5:65:48:81:a2:5d:6e:3b:5b:c7:15:7d:b0:
4f:30:4a:d4:4c:62:6d:7d:b0:c1:47:6f:b4:a2:ef:75:bf:e8:
ec:c4:53:f1:31:49:f8:c8:7f:ee:56:3b:7c:3f:ec:6c:96:bd:
57:42:7b:78:38:11:11:47:05:2c:a2:29:45:f3:9f:e2:40:c2:
b1:19:37:6a:47:d9:e6:5d:8a:0f:21:ff:19:ac:3c:ee:c2:b6:
c1:3d:95:40:ec:a1:70:bd:6b:e2:cc:ab:ab:e6:35:3d:69:15:
7c:32:9c:73:1d:31:2c:29:d1:f1:c7:51:0e:df:af:19:75:71:
d4:aa:30:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:12:10 2025 by rpki-client