Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/_m2AphJimuJQH_WcogfJtHMVAWQ.roa
File: _m2AphJimuJQH_WcogfJtHMVAWQ.roa (raw, json)
Hash identifier: AxdUNIPxrEErYxZcKgdV3ui9aPq/ARKyUXQybR8aXa4=
Subject key identifier: FE:6D:80:A6:12:62:9A:E2:50:1F:F5:9C:A2:07:C9:B4:73:15:01:64
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0184B7E02F3A45B03431DEEF7F6D7AE4D69F
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/_m2AphJimuJQH_WcogfJtHMVAWQ.roa
Signing time: Sun 27 Nov 2022 06:57:13 +0000
ROA not before: Sun 27 Nov 2022 06:57:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207466
IP address blocks: 2a0a:6040:d900::/40 maxlen: 48
2a06:a005:2380::/44 maxlen: 48
2a06:a001:a080::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:b7:e0:2f:3a:45:b0:34:31:de:ef:7f:6d:7a:e4:d6:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Nov 27 06:57:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fe6d80a612629ae2501ff59ca207c9b473150164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ec:60:a6:8f:49:f5:1b:b8:4a:08:35:11:c8:
15:dc:c6:32:5b:fe:57:74:17:16:a7:a4:02:2a:a6:
43:12:28:46:46:88:db:2a:7e:10:e7:bc:9f:28:d0:
27:15:15:76:75:5a:d5:15:7e:bb:a4:49:5a:c8:b4:
df:81:4b:63:88:57:35:e7:58:2d:df:0b:6c:42:72:
2e:96:c2:ce:c1:2d:0c:10:79:bb:73:67:da:ec:92:
36:06:ca:56:d2:11:fd:03:f5:8d:bf:2c:85:ac:7f:
ab:11:a1:d6:bf:60:f4:42:d1:37:72:15:84:a2:c3:
82:2b:6c:74:b3:8a:a7:06:fd:de:22:56:1b:c9:ad:
4c:97:ce:6b:db:ea:e5:63:50:b0:de:e9:e7:60:55:
98:69:e3:56:b6:9b:3a:af:f4:94:b8:13:ea:32:0a:
76:db:39:52:b5:e1:0a:04:10:bb:ec:80:1f:bb:20:
d9:a2:0a:48:de:09:03:6d:d1:e3:84:95:07:e1:fd:
fa:92:11:dd:48:04:01:81:2e:6a:29:13:e0:ad:61:
18:0a:8e:27:a7:80:54:45:03:e6:34:d5:7a:3f:81:
fa:aa:64:c6:4e:47:89:4a:2e:9f:13:f9:1b:b2:f6:
8b:51:fa:63:7e:81:17:22:fe:5c:66:24:8d:a6:fe:
fe:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:6D:80:A6:12:62:9A:E2:50:1F:F5:9C:A2:07:C9:B4:73:15:01:64
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/_m2AphJimuJQH_WcogfJtHMVAWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a001:a080::/44
2a06:a005:2380::/44
2a0a:6040:d900::/40
Signature Algorithm: sha256WithRSAEncryption
4d:a4:22:db:73:2e:6a:f5:49:a2:21:ba:da:bd:ed:f1:e8:77:
f7:a8:53:23:25:dc:14:7b:98:89:26:39:fc:9c:f4:df:28:87:
6c:61:ce:a3:8b:32:70:d0:68:b4:13:8c:ae:a7:5f:a7:ad:08:
ab:70:a4:e5:10:85:af:28:f9:3d:09:93:63:27:fd:2a:67:ef:
df:e0:d5:0f:44:04:2e:99:2b:09:df:a8:30:8b:3f:b6:71:cc:
19:dc:e3:df:ee:59:35:d8:e2:ae:87:f7:07:61:07:1f:c2:75:
b4:45:1a:fd:8a:4c:4d:ee:eb:5c:13:45:af:d6:97:6e:34:3b:
eb:8a:4d:40:bf:a7:76:d5:62:4a:f7:08:07:44:83:79:19:4f:
3c:75:b5:dc:c8:22:ec:1f:b5:1f:6a:cd:64:55:17:ac:9b:2d:
c0:23:d7:fc:97:3d:6f:8a:bd:3d:99:db:d2:86:62:70:c3:c8:
22:1f:de:f2:5d:85:8b:df:c2:37:74:cf:99:82:2e:56:83:10:
f0:75:43:66:3a:38:f9:d1:20:b5:62:b1:2d:25:8b:c5:51:4d:
9f:4e:2f:0d:0c:67:16:54:27:85:0c:ef:47:4e:85:b9:f5:82:
53:da:8a:0f:13:e3:91:08:86:6c:23:7d:ad:b7:8d:ef:6e:37:
30:b5:e1:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:10:58 2025 by rpki-client