Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ZTQ4hS_iTekjt-dThNX-HESfGB8.roa
File: ZTQ4hS_iTekjt-dThNX-HESfGB8.roa (raw, json)
Hash identifier: DRq5PPLp5bHnx8mNvWEUHNsKgMrE05wVi7i/z9UhJL4=
Subject key identifier: 65:34:38:85:2F:E2:4D:E9:23:B7:E7:53:84:D5:FE:1C:44:9F:18:1F
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 1B1E9E8F
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ZTQ4hS_iTekjt-dThNX-HESfGB8.roa
Signing time: Tue 21 Jun 2022 11:17:47 +0000
ROA not before: Tue 21 Jun 2022 11:17:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204508
IP address blocks: 2a06:a005:d29::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 454991503 (0x1b1e9e8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jun 21 11:17:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=653438852fe24de923b7e75384d5fe1c449f181f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fc:ea:c2:5a:bb:38:93:41:33:eb:b0:5a:24:
f9:b5:5a:7e:7d:18:43:ab:6d:fa:6d:04:20:3a:9c:
ff:d7:68:46:c1:1e:64:63:be:73:a8:b6:d4:6c:53:
4a:d8:a5:e3:da:63:30:7c:59:eb:76:9c:34:5a:2d:
39:26:36:86:02:ab:ec:de:92:1c:23:0e:ef:46:f2:
0b:c4:5b:92:22:35:de:bc:44:71:d5:54:bd:54:4c:
3c:d1:55:e9:51:b4:58:4e:ac:c2:9e:7e:01:06:7f:
3d:79:97:bf:6d:12:d9:c1:33:8d:3b:d2:25:49:42:
a9:dc:47:57:0c:54:af:62:73:72:d4:5c:8a:b9:e8:
d7:a0:60:9a:0d:00:6e:1e:7a:a0:84:3b:cd:5e:95:
79:dd:4f:ef:1c:ab:f5:e1:1f:4c:2a:ad:80:6a:c8:
52:e4:33:e2:5d:ce:fa:e5:73:ed:bf:ce:5a:08:5f:
a3:66:11:07:33:4b:fa:7f:2d:00:34:39:79:2b:ea:
32:80:a8:4f:29:3b:ad:f8:51:9e:5b:c0:60:79:ea:
dc:c1:f1:9c:e1:e1:5a:88:49:4d:43:e3:b7:1e:f3:
2d:f7:42:39:a4:fc:64:3f:83:77:89:74:04:c1:e4:
c7:00:2d:1c:a8:c7:58:67:ed:65:ee:96:7f:a2:3d:
ce:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:34:38:85:2F:E2:4D:E9:23:B7:E7:53:84:D5:FE:1C:44:9F:18:1F
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ZTQ4hS_iTekjt-dThNX-HESfGB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:d29::/48
Signature Algorithm: sha256WithRSAEncryption
15:d9:8b:84:b0:35:67:d4:d3:b2:98:e1:c4:70:08:12:fc:e3:
87:28:73:7b:2d:ad:42:98:36:9a:3a:d6:ce:f5:95:94:e6:a6:
cb:36:73:dd:75:58:b5:0e:c3:5a:18:68:21:4a:93:80:22:84:
1a:db:e8:99:9d:96:e3:58:9e:19:ab:96:1b:df:52:34:07:30:
5b:9c:59:6b:a4:41:cd:a1:bc:14:09:3e:27:2d:6e:ab:0d:0c:
7f:34:17:64:a9:de:86:9d:9b:36:a4:a2:0e:60:ee:16:14:27:
88:74:85:4b:24:0a:3a:91:1d:a8:d3:0a:91:91:10:aa:4a:5e:
1b:bb:3a:71:b8:0c:2c:88:38:13:a4:b1:d7:3d:f3:96:69:b7:
7d:cf:9f:d6:cd:87:09:8e:fe:a6:f8:03:e3:ff:a4:f1:c8:60:
cf:e9:20:c4:82:44:42:44:d9:f0:1f:37:e1:ce:f9:62:88:6c:
7b:54:4d:b9:24:df:f0:d1:20:eb:f1:0a:19:e6:34:d7:b9:37:
32:53:cb:45:12:d1:f2:41:30:6d:78:08:10:25:a8:16:64:d1:
fa:1d:5b:37:cd:86:b6:dc:58:bd:e7:47:75:dc:b5:2f:b1:41:
9d:0b:9c:9f:30:0f:fb:c9:dd:a8:64:05:1d:c2:8c:87:8e:de:
63:17:46:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 05:17:01 2025 by rpki-client