Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/_pJ5Q1jcAQkhe2rGw60ZkfnseqI.roa
File: _pJ5Q1jcAQkhe2rGw60ZkfnseqI.roa (raw, json)
Hash identifier: Sr9ytFe6RbgBoAagl3gG1QNDVuIp+byZe4ZUfJapOtQ=
Subject key identifier: FE:92:79:43:58:DC:01:09:21:7B:6A:C6:C3:AD:19:91:F9:EC:7A:A2
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0184CC582D6AA5CB578E37144AC9505B6B9B
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/_pJ5Q1jcAQkhe2rGw60ZkfnseqI.roa
Signing time: Thu 01 Dec 2022 06:20:41 +0000
ROA not before: Thu 01 Dec 2022 06:20:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202518
IP address blocks: 2a06:a005:1504::/48 maxlen: 48
2a06:a005:1d50::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:cc:58:2d:6a:a5:cb:57:8e:37:14:4a:c9:50:5b:6b:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Dec 1 06:20:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fe92794358dc0109217b6ac6c3ad1991f9ec7aa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:50:a1:12:b8:70:2e:fe:31:e9:03:dc:73:40:
ae:cb:e8:74:ca:0a:b6:8c:7e:e9:98:6f:05:48:d4:
87:f3:32:61:4e:28:84:cd:18:72:93:08:50:e9:b5:
c3:f4:77:d6:98:9e:83:6f:68:26:f0:3f:24:6b:94:
d9:d5:08:9a:3f:b6:57:8a:fc:52:7b:f1:5a:9d:15:
39:02:d9:49:7c:e5:4c:21:43:b4:de:e2:32:df:db:
86:78:3e:d5:9e:9f:ff:1f:3e:de:5a:5e:83:8a:fd:
bb:6e:79:68:9e:ee:8e:e5:4a:50:b2:fb:de:f3:f3:
13:04:a3:57:86:f7:8b:e4:d5:64:be:d8:0c:dc:36:
ca:fb:fb:cd:0e:a3:d7:e4:50:16:e7:4e:14:1c:66:
11:3a:f6:4e:3d:c1:df:ba:19:b6:8c:63:12:8c:ed:
59:36:ff:1d:8c:83:3a:51:64:bc:37:94:aa:fe:9b:
1f:46:b7:98:1d:e2:fc:f3:ec:9b:ef:f7:5d:00:51:
33:e7:15:69:52:2f:48:cf:fa:5d:1f:5b:78:6e:0b:
52:a3:65:3f:f2:31:18:24:2f:d9:64:40:74:20:db:
86:98:4c:33:6c:4d:de:39:ba:ed:b5:cb:f2:87:24:
f1:5e:c0:e3:16:5a:50:67:a7:f3:40:9d:b4:0e:fd:
ed:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:92:79:43:58:DC:01:09:21:7B:6A:C6:C3:AD:19:91:F9:EC:7A:A2
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/_pJ5Q1jcAQkhe2rGw60ZkfnseqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1504::/48
2a06:a005:1d50::/48
Signature Algorithm: sha256WithRSAEncryption
83:d3:98:a3:c4:1d:6a:4e:5b:05:c0:b9:dc:e8:83:88:3a:4b:
f7:7f:48:37:29:ba:bd:98:17:6c:a7:0d:51:9b:f0:f8:ba:3e:
58:26:0a:7a:22:84:81:6b:5e:d7:b6:2b:2c:31:38:90:ba:7a:
ff:45:6d:34:51:e3:ee:0c:26:22:b7:73:76:cc:9c:d5:e5:83:
4b:bc:15:e9:3c:93:5d:e4:97:bd:aa:b3:16:91:f5:0b:91:2c:
df:29:b7:19:77:78:2b:a9:98:9c:fe:34:9b:ba:f6:49:e6:d3:
88:ce:a3:87:7e:10:d3:02:81:52:93:97:f1:cb:b8:01:19:a6:
5f:47:ce:82:1c:64:c9:f7:0a:25:a1:ba:bc:8d:3b:c9:ad:b2:
83:99:4d:d4:cb:01:21:0b:2a:68:b7:67:e9:ea:fc:cf:d6:88:
4f:bb:5b:c2:28:6f:95:e8:b3:db:83:00:74:bc:8a:e6:e0:0d:
2b:b2:4f:57:c0:f8:9b:be:43:28:c1:56:cb:c0:dc:d5:3d:50:
98:b5:34:3e:bb:d8:cd:62:b8:65:90:a4:e5:49:56:38:37:20:
82:f5:ce:61:6a:91:2e:9a:9e:00:9e:95:f1:9a:25:09:04:b3:
69:26:f9:96:e2:33:ba:48:d3:50:43:71:f0:79:4c:b9:02:3d:
1e:1e:84:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 06:09:14 2025 by rpki-client