Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/XY3XnybKw9kAprZm5EJAGoGc4NY.roa
File: XY3XnybKw9kAprZm5EJAGoGc4NY.roa (raw, json)
Hash identifier: 905ovjJClQLwFi+eQRXN7RwyMacZ2P7X5NDDLnlCZ5c=
Subject key identifier: 5D:8D:D7:9F:26:CA:C3:D9:00:A6:B6:66:E4:42:40:1A:81:9C:E0:D6
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01821286598CD1F3A696B046F72DFBB5412C
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/XY3XnybKw9kAprZm5EJAGoGc4NY.roa
Signing time: Mon 18 Jul 2022 18:16:10 +0000
ROA not before: Mon 18 Jul 2022 18:16:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209861
IP address blocks: 2a06:a005:a05::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:12:86:59:8c:d1:f3:a6:96:b0:46:f7:2d:fb:b5:41:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jul 18 18:16:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5d8dd79f26cac3d900a6b666e442401a819ce0d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e6:73:1b:72:2b:42:b4:a8:81:97:ff:3b:2b:
ad:8b:ac:41:36:d4:11:4f:e9:6d:3a:ae:c7:fa:54:
4c:1c:63:33:a5:08:86:11:8e:93:fa:0f:97:8e:92:
e6:63:7e:0d:f2:5c:bc:66:35:8a:62:64:df:33:ea:
74:15:5b:69:06:18:87:58:30:ca:ac:68:4b:e1:a1:
99:8f:69:16:76:c6:e0:97:6c:b1:52:e1:94:7a:2b:
ee:82:ba:40:3c:dc:ab:a3:af:30:05:d1:20:a6:83:
2e:26:56:4e:53:d9:95:e0:79:67:bd:a4:b1:a5:1b:
90:09:35:62:13:38:5f:6e:ae:8d:4a:4a:b0:91:34:
ee:ae:28:82:27:ba:85:db:8c:33:72:53:95:fe:b7:
0a:a7:fe:81:43:05:cf:c2:c1:7f:00:cc:c0:b1:da:
f5:70:49:8a:0e:71:46:c0:62:a5:15:82:d1:dc:16:
9f:66:91:cd:e9:e6:d2:da:28:8e:0c:c9:fa:8a:02:
c7:bf:bc:96:b3:e9:26:7f:41:d8:ca:79:ec:bf:e0:
6e:ae:1c:65:ed:fb:6b:3a:1a:6c:32:17:0a:a6:d2:
fe:d1:f6:95:13:cf:86:8b:1a:b2:63:10:0f:05:ad:
08:55:2c:e6:2c:80:3d:c2:84:7c:ac:43:3b:56:25:
c7:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:8D:D7:9F:26:CA:C3:D9:00:A6:B6:66:E4:42:40:1A:81:9C:E0:D6
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/XY3XnybKw9kAprZm5EJAGoGc4NY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:a05::/48
Signature Algorithm: sha256WithRSAEncryption
69:f9:69:be:7b:6b:aa:92:e6:66:c4:e7:ed:5a:c1:f4:5f:80:
46:74:e3:79:fb:06:95:41:72:44:e8:55:87:41:e0:74:6f:22:
90:72:a7:aa:b2:b3:81:10:83:86:c8:f1:9e:21:cb:2d:89:f3:
5c:7f:db:f2:55:bd:00:1c:c0:11:fa:e1:91:fe:2c:74:8e:11:
a8:44:9b:e7:0c:cf:ec:47:23:ac:06:8f:da:f6:f0:1b:64:17:
a9:8d:ff:e0:7b:23:13:85:36:80:69:9a:e0:61:b9:3b:9c:80:
57:bf:ca:d9:6b:93:1c:47:f5:c0:69:ef:84:3f:aa:04:7f:1d:
e6:1b:1d:be:79:c7:a0:6a:d0:df:76:2f:95:2b:f1:5c:27:f6:
28:e3:78:35:69:eb:b4:a9:84:24:30:09:83:7d:47:5c:3b:e1:
47:a9:10:e4:33:b9:55:61:84:13:18:0c:d9:9c:2f:7a:69:24:
01:8c:8b:85:da:36:67:7c:2b:45:c3:a3:e9:50:14:e8:d8:4e:
f3:8e:41:08:79:14:04:68:6c:2a:dd:b7:37:61:f8:9b:82:40:
1d:4b:7c:e6:a9:70:80:c0:77:5e:be:3c:c6:cd:72:d8:16:a5:
87:08:34:de:a5:9b:08:4e:2d:5f:33:97:a0:4f:69:49:5e:29:
10:84:a6:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:24:51 2025 by rpki-client