Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/_e-2q5-K7X48QDAZh3pMWnKR9UA.roa
File: _e-2q5-K7X48QDAZh3pMWnKR9UA.roa (raw, json)
Hash identifier: lNlEhpvtdglt1lgi+G6fd0Y8ktvUAt3Ag6Vnu0OM5PY=
Subject key identifier: FD:EF:B6:AB:9F:8A:ED:7E:3C:40:30:19:87:7A:4C:5A:72:91:F5:40
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01834FC62205A5D85437C98622979A56D2C5
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/_e-2q5-K7X48QDAZh3pMWnKR9UA.roa
Signing time: Sun 18 Sep 2022 08:45:28 +0000
ROA not before: Sun 18 Sep 2022 08:45:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202888
IP address blocks: 2a06:a005:1c70::/45 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:4f:c6:22:05:a5:d8:54:37:c9:86:22:97:9a:56:d2:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Sep 18 08:45:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fdefb6ab9f8aed7e3c403019877a4c5a7291f540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:98:35:03:ee:ad:89:08:e9:7d:dc:2b:1a:d3:
d2:64:f3:b7:45:70:2c:a8:33:67:bc:99:16:23:b6:
e7:5e:5a:f8:6c:5f:a1:0f:3f:85:4a:42:4b:0e:c8:
8b:65:c6:f3:63:2f:6f:b2:a8:bb:d8:e3:6d:d1:27:
b5:5f:30:18:17:38:93:d6:0a:bb:73:98:c8:27:b3:
e4:52:b6:c1:aa:5d:52:2b:2c:9b:1b:57:54:25:bc:
b4:6d:7b:33:de:ec:cd:45:8d:34:26:f7:f2:3b:cf:
98:f5:83:84:74:d5:6a:65:98:30:3f:15:dc:92:ed:
73:ef:ce:e9:b2:0a:5b:27:c0:da:44:22:16:6a:d0:
53:e0:44:03:a1:f5:8f:cc:ca:4c:38:c6:df:a1:c2:
cd:3a:dd:0a:19:28:53:93:c9:9d:58:78:cf:c8:58:
b1:2d:84:2e:5e:62:f3:ab:f8:a2:5e:b0:a3:63:c2:
c3:81:de:d8:57:ac:cd:71:09:c8:55:6e:ca:9e:63:
60:40:e5:4c:37:eb:f3:69:1f:aa:5b:78:a2:c7:d1:
e6:bc:55:ef:d7:bf:66:2b:50:84:a8:66:c0:2b:10:
5d:c9:79:84:3a:23:7a:dd:6c:6b:20:22:17:b7:75:
25:cd:69:a6:bf:48:a4:e8:a0:ba:59:86:3c:01:e6:
de:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:EF:B6:AB:9F:8A:ED:7E:3C:40:30:19:87:7A:4C:5A:72:91:F5:40
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/_e-2q5-K7X48QDAZh3pMWnKR9UA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1c70::/45
Signature Algorithm: sha256WithRSAEncryption
16:f9:1a:b4:1b:7e:1f:d7:99:d9:62:67:d4:87:16:45:55:10:
d5:31:76:3c:20:1e:91:b4:36:8e:c4:33:40:77:9f:d7:9b:22:
64:36:a1:b5:d5:d1:16:4c:7e:b6:50:32:b8:d5:8b:ee:32:fe:
79:70:67:1f:3c:b1:69:ae:e6:f3:04:f8:b6:e7:10:16:cb:81:
6a:50:a0:96:de:1a:f5:03:75:ad:63:b2:2a:39:27:ad:4b:85:
db:45:d9:68:85:97:ea:0c:be:cf:7b:b6:f6:2c:3a:b9:95:59:
f9:28:0d:2c:2b:ca:ac:7f:ef:1a:da:68:ac:35:eb:f4:8d:4c:
d7:46:7d:9d:95:01:48:8a:d3:58:c9:de:15:a0:e8:bd:98:56:
0e:6d:28:8d:7a:f5:18:16:84:ef:f3:81:14:9e:f8:52:5a:50:
c3:cd:a2:84:ea:76:03:fe:91:df:b7:57:07:c7:b7:10:4c:1c:
11:19:6e:92:0e:10:b2:8c:99:3b:fa:ae:27:cc:dd:3b:a5:13:
89:67:74:0f:e5:4b:ea:3b:16:4b:e8:9c:d0:ec:28:32:9a:3f:
3f:d5:fb:0e:d8:31:b4:36:f6:ba:7a:7b:24:41:c2:13:38:08:
0b:cd:cf:b7:c1:60:99:64:b7:21:58:c3:6d:ed:54:53:39:9d:
c7:33:70:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:10:49 2025 by rpki-client