Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/_XfRdi6GdfcO-IganYYui43BhUg.roa
File: _XfRdi6GdfcO-IganYYui43BhUg.roa (raw, json)
Hash identifier: 9ZSRcRaPvjWBGdAtWgVBa1iajj3DqyDnmmmLCSCYJi0=
Subject key identifier: FD:77:D1:76:2E:86:75:F7:0E:F8:88:1A:9D:86:2E:8B:8D:C1:85:48
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0183FAE2D7743854EE0FBCB63395D8224AC1
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/_XfRdi6GdfcO-IganYYui43BhUg.roa
Signing time: Fri 21 Oct 2022 14:11:53 +0000
ROA not before: Fri 21 Oct 2022 14:11:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 398057
IP address blocks: 2a07:54c2:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:fa:e2:d7:74:38:54:ee:0f:bc:b6:33:95:d8:22:4a:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Oct 21 14:11:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fd77d1762e8675f70ef8881a9d862e8b8dc18548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:16:36:f9:d3:76:8b:8e:dc:96:44:0b:92:53:
d8:f8:07:7c:20:38:ab:6b:55:e7:e6:ce:18:b5:c6:
d4:d3:aa:ba:9b:bd:3e:2b:0f:90:df:c0:03:34:90:
42:e7:d3:56:73:4a:69:2d:cc:02:2e:8b:cb:2f:a4:
0d:f8:ca:c5:99:bf:8e:51:ad:02:9c:90:41:9a:49:
b1:e4:d8:ad:30:b4:fb:0b:77:83:e8:29:ba:75:71:
28:4c:11:2f:d3:58:6c:f1:d5:2e:ba:c2:71:70:e4:
b3:c8:52:13:2e:f5:0e:b6:cd:f1:7d:46:02:14:d0:
6e:97:26:79:9d:f2:70:93:af:5b:74:27:65:11:09:
4a:f6:a9:42:a4:2c:ba:7c:56:18:ee:55:46:b5:a6:
68:da:95:27:0a:7d:26:bd:6c:fb:9c:e6:2d:ec:fa:
9c:70:66:63:65:e4:47:4c:04:3d:c9:fd:0b:18:78:
21:d4:2d:1f:d1:72:48:3b:54:39:10:f9:91:33:f7:
b2:5a:64:03:83:cf:f2:7a:56:1b:5f:28:a7:c6:fb:
c8:4a:4f:a8:fc:7f:e1:7b:21:19:b2:93:2e:fb:29:
4a:c9:c2:71:e4:2f:9f:8b:ef:a6:28:6f:16:41:22:
df:cc:8a:da:d7:88:49:d1:16:a1:8e:6b:20:cf:44:
bf:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:77:D1:76:2E:86:75:F7:0E:F8:88:1A:9D:86:2E:8B:8D:C1:85:48
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/_XfRdi6GdfcO-IganYYui43BhUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:54c2:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
82:11:cd:24:70:ac:ae:ac:56:69:20:1a:d4:6b:4e:31:34:79:
ed:eb:af:de:58:d8:94:34:85:0b:92:11:49:8a:5a:c9:1e:c1:
61:48:1a:10:d7:b2:3d:6c:4f:2c:8d:b9:f6:a7:3b:52:e0:19:
6b:67:8d:6f:ac:b3:45:84:63:62:c4:ba:a1:13:d2:fd:13:ff:
81:fb:b9:09:fb:95:0a:cd:dc:09:e5:e2:d2:2b:29:8e:88:a7:
e2:3e:57:38:9b:05:ea:32:23:ed:6b:a3:dd:5e:25:bf:d7:b1:
03:66:af:f4:5b:52:6a:10:f5:c1:79:55:38:ac:3f:54:26:61:
b8:13:e2:66:f9:e1:b4:b6:9a:5b:ae:34:51:6b:6e:69:35:dd:
f0:77:20:7a:6e:65:41:17:ff:9e:95:11:27:c0:5d:20:5b:60:
dd:63:a9:5a:38:a3:f6:e1:9c:de:29:3f:b1:44:50:c7:71:79:
01:ce:b9:ec:32:b1:dc:54:0f:c6:70:23:b6:95:8e:1c:dc:c9:
03:18:03:fe:60:bd:06:f4:09:d6:f1:d1:d7:88:57:d6:7f:7d:
52:0e:76:9f:40:a6:17:00:2f:39:d1:44:f6:a5:03:ad:d9:5c:
f7:d1:9c:ef:b5:2c:c5:f7:5d:5f:5b:bb:63:37:3f:e2:90:91:
23:99:06:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:10:45 2025 by rpki-client