Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/XJsKdD2iB5SohfYRlL586hQ_EAc.roa
File: XJsKdD2iB5SohfYRlL586hQ_EAc.roa (raw, json)
Hash identifier: sXCna6Vhty4FhmJljpv2nrpE06ssogmErKbPPLJMXJk=
Subject key identifier: 5C:9B:0A:74:3D:A2:07:94:A8:85:F6:11:94:BE:7C:EA:14:3F:10:07
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0182DB566BA6D1C7C92CD3D0285C2EEB8AE3
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/XJsKdD2iB5SohfYRlL586hQ_EAc.roa
Signing time: Fri 26 Aug 2022 18:07:30 +0000
ROA not before: Fri 26 Aug 2022 18:07:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203333
IP address blocks: 2a06:a005:1860::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:db:56:6b:a6:d1:c7:c9:2c:d3:d0:28:5c:2e:eb:8a:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Aug 26 18:07:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5c9b0a743da20794a885f61194be7cea143f1007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:6c:af:ef:36:71:08:7a:8a:65:92:0f:38:43:
45:07:5b:75:f4:66:ee:ad:67:50:51:05:99:9e:56:
db:fb:87:cf:b6:ad:2c:06:f2:27:90:0a:f7:d8:4f:
8f:44:5b:cd:f3:cb:cd:01:b3:5b:32:7c:61:73:b6:
5e:8c:5d:7b:c9:c2:d7:56:f4:29:19:83:bc:53:74:
09:b8:b9:f2:1e:05:e0:f7:54:b8:d0:ca:b1:d4:a0:
03:c1:49:e9:19:8d:69:f0:20:85:e3:1a:f0:96:53:
a2:86:e7:e7:af:e9:7f:de:55:1a:e5:5b:75:90:2a:
89:25:9b:23:9b:c7:fa:57:e7:76:e6:9f:c8:e4:18:
b8:63:dc:78:3a:91:10:24:55:15:f1:62:a7:45:c8:
d5:2a:c2:f0:88:bd:87:91:60:c3:8b:c5:3b:7b:b5:
65:f6:5b:a9:cb:13:2a:23:20:f3:de:a0:b6:e2:ee:
3b:81:fc:29:4f:df:ed:df:37:e2:3f:ad:d7:f1:b1:
81:fa:12:a5:2b:0a:e3:7d:f6:fb:5c:8c:de:40:81:
b1:1e:42:2a:ad:64:92:48:96:7c:bd:8b:6f:c6:ed:
8d:39:47:5d:3f:b3:68:81:a8:22:9a:e0:f9:8d:86:
3a:25:f1:67:e1:68:fa:ea:27:e3:52:88:d8:1c:f7:
f2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:9B:0A:74:3D:A2:07:94:A8:85:F6:11:94:BE:7C:EA:14:3F:10:07
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/XJsKdD2iB5SohfYRlL586hQ_EAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1860::/44
Signature Algorithm: sha256WithRSAEncryption
9e:63:cc:a7:89:b6:9f:34:13:34:9a:cb:82:bf:3e:d0:7a:36:
a0:f8:00:44:d2:89:d9:5a:bb:be:0b:12:45:25:f7:53:9e:57:
5a:05:45:02:cf:f2:a1:a2:ff:cb:a5:89:3a:ba:70:3d:32:81:
b8:55:e7:07:9f:2d:e0:fe:dc:c9:5a:1e:e6:04:e0:19:8a:7e:
52:ec:48:7c:e6:f6:84:d3:ed:0d:be:de:1a:1c:bd:f7:51:4a:
b0:c4:7c:1c:9c:0a:b5:5b:d7:36:a6:4e:7e:be:c0:95:d5:9d:
da:e1:6b:d3:e9:b1:0b:fb:05:00:ae:12:ab:50:8e:4c:4a:09:
65:7c:67:e4:d6:1c:a5:1e:18:7a:b8:f0:a7:51:6a:c3:b0:84:
94:7b:b3:c4:55:5a:f4:3a:68:47:f7:98:f7:d8:48:6c:21:7e:
17:af:15:f6:d2:39:43:d3:a8:e6:4c:0a:24:b3:8b:cd:03:27:
ea:9b:94:75:fc:4a:20:0f:19:ba:75:71:c7:11:e1:94:dd:33:
91:be:2a:82:4a:0f:be:1e:63:53:b8:33:ec:bc:52:66:c0:76:
c1:bc:fe:0c:96:67:3b:de:54:b8:53:94:68:4f:07:15:b3:90:
e5:66:36:79:19:26:5d:e6:81:4f:77:83:1e:4a:3f:1b:25:dc:
7d:b2:d2:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 09:59:30 2025 by rpki-client