Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/a2rqrqswikPbgLhXJ_aXLUxKplU.roa
File: a2rqrqswikPbgLhXJ_aXLUxKplU.roa (raw, json)
Hash identifier: t358hhbC7bA21YPk3o4p9/fpr48AkPw+0XDuRMuKKgk=
Subject key identifier: 6B:6A:EA:AE:AB:30:8A:43:DB:80:B8:57:27:F6:97:2D:4C:4A:A6:55
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 1BA5E3DC
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/a2rqrqswikPbgLhXJ_aXLUxKplU.roa
Signing time: Fri 01 Jul 2022 11:50:25 +0000
ROA not before: Fri 01 Jul 2022 11:50:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210542
IP address blocks: 2a06:a000:1b0::/44 maxlen: 48
2a06:a001:a060::/44 maxlen: 48
2a06:a001:a000::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 463856604 (0x1ba5e3dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jul 1 11:50:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6b6aeaaeab308a43db80b85727f6972d4c4aa655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:3c:de:ca:ca:7f:f3:cc:80:cf:38:f2:5a:c6:
27:f4:2a:ce:74:50:c1:94:60:3c:83:71:14:62:44:
d0:1e:83:34:78:42:73:7b:0a:20:83:f7:e6:ba:86:
68:5d:e3:5d:44:c8:ef:56:a3:85:e3:3f:89:0e:af:
ab:36:0a:03:76:05:8a:38:50:f3:53:8c:30:d9:6a:
58:ca:34:a9:cc:ae:5f:a1:39:e0:57:ea:af:93:9d:
9b:9e:23:6e:ab:d9:dd:a1:29:cd:0b:ee:8b:22:9b:
bb:4d:ef:10:c5:21:ff:e2:5a:3d:7f:b3:1d:97:39:
05:77:e5:8a:0a:38:c5:9e:23:ba:0d:23:a8:32:31:
a3:4d:8b:26:5e:0a:c2:0f:d5:32:96:3f:5c:23:28:
9b:0d:1b:2d:14:ca:5c:40:8c:36:32:27:97:39:e2:
ab:c8:8c:b1:89:5e:d5:ee:b2:d4:84:fe:aa:ec:52:
7a:27:86:64:3c:1e:98:73:88:29:16:11:61:22:81:
13:7b:d7:b7:e6:3d:88:5c:07:3d:3e:d6:0f:3d:78:
36:67:c1:6e:c7:18:68:78:2f:5d:30:cb:64:0c:eb:
69:bc:1b:2c:1d:4a:c1:dd:a7:84:5c:fa:d4:de:1d:
d3:b3:03:f4:17:11:69:c0:cc:cf:7f:e3:25:2e:80:
5a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:6A:EA:AE:AB:30:8A:43:DB:80:B8:57:27:F6:97:2D:4C:4A:A6:55
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/a2rqrqswikPbgLhXJ_aXLUxKplU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a000:1b0::/44
2a06:a001:a000::/44
2a06:a001:a060::/44
Signature Algorithm: sha256WithRSAEncryption
5d:66:b1:2a:49:7c:95:c2:e4:96:5d:a2:63:1a:ca:8f:fc:db:
2b:98:6a:3c:cc:2d:5e:35:ec:ba:59:ef:12:20:64:1a:84:ca:
b3:be:11:b2:50:7d:00:1f:39:ee:1e:44:cc:5d:1b:58:7d:da:
6e:de:1c:7a:84:be:f0:97:dc:8b:c5:4b:d2:07:b3:df:17:1e:
1a:24:be:ad:7b:f1:6b:1c:7f:b4:0a:42:18:ac:e3:31:ed:10:
ba:29:3f:5e:63:62:f3:32:24:36:5f:db:53:5e:fe:ba:f5:7e:
2d:b0:1e:64:30:f5:c9:b7:00:23:bc:c3:47:bc:60:2b:22:2e:
21:f1:0b:77:ce:62:1a:99:b2:7b:c4:91:ae:83:67:37:0e:b6:
53:ea:33:14:d1:fa:1f:60:ab:cd:80:af:4a:7b:47:9b:40:b6:
59:ae:8b:1a:69:85:14:67:93:d9:f0:71:6e:91:75:6b:44:e3:
d5:0c:6a:d0:61:bd:52:4e:8f:7a:17:be:53:00:dd:0b:b7:a7:
a0:3c:d0:4e:ff:14:4a:bd:42:e2:5b:b9:45:d0:8a:09:57:33:
6d:a3:ce:51:08:a5:0b:1b:ec:3a:0a:8d:d2:2c:a6:71:b6:62:
b9:6f:ff:78:43:d3:ea:e1:c4:36:38:bb:3b:8a:d7:58:b6:36:
b3:c9:6f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:11:09 2025 by rpki-client