Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/bS6CNpqjDQFiDnpoRQVmlfJNaBQ.roa
File: bS6CNpqjDQFiDnpoRQVmlfJNaBQ.roa (raw, json)
Hash identifier: yDG+wwtrIjjBhru4FvbRN6z3eS7kQ12ZTqOUU1FhtAk=
Subject key identifier: 6D:2E:82:36:9A:A3:0D:01:62:0E:7A:68:45:05:66:95:F2:4D:68:14
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 018303DA55EB01A50529A2E21B000E1B6161
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/bS6CNpqjDQFiDnpoRQVmlfJNaBQ.roa
Signing time: Sat 03 Sep 2022 14:56:23 +0000
ROA not before: Sat 03 Sep 2022 14:56:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211604
IP address blocks: 2a06:a005:5e1::/48 maxlen: 48
2a06:a005:1274::/47 maxlen: 48
2a06:a005:1b30::/44 maxlen: 48
2a06:a005:450::/48 maxlen: 48
2a06:a005:452::/47 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:03:da:55:eb:01:a5:05:29:a2:e2:1b:00:0e:1b:61:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Sep 3 14:56:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6d2e82369aa30d01620e7a6845056695f24d6814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b6:8f:37:3c:57:52:5e:0f:f1:30:55:e2:10:
cd:0d:cd:9c:63:6c:45:8a:58:68:8e:b2:1b:f7:4b:
de:be:df:ce:38:01:d9:05:6d:d7:bb:96:19:70:c4:
ed:08:2e:75:7e:92:24:78:d8:af:f1:62:c2:b3:3f:
43:bf:e4:e3:c1:13:4d:75:43:e0:83:55:1a:50:c4:
24:c9:f2:02:dc:0a:57:09:54:34:d8:3c:73:48:23:
3b:41:b2:96:05:a1:62:b1:c1:d0:d8:40:e2:c8:92:
21:c9:81:2d:7e:a2:52:b0:1f:61:f5:4a:4b:15:1b:
7f:d9:16:9b:9d:a8:ba:6b:e7:6b:fa:cc:cf:78:e5:
13:81:78:d2:ec:21:f0:80:3d:82:e1:fc:16:c7:bd:
44:be:de:ea:ec:41:85:ed:91:10:4f:ed:23:f3:0e:
ee:cc:b1:6f:73:4e:92:6a:e7:8b:f8:88:f0:36:18:
54:88:03:77:c0:3c:ec:81:cb:c3:fa:68:5d:0a:ce:
ec:a4:3c:b4:ae:c9:fd:cc:e7:15:4d:91:f0:9a:aa:
d0:2e:2b:db:e7:02:bd:b6:04:63:39:df:4e:f4:82:
92:dc:f4:19:70:84:b4:a2:90:c5:6d:be:86:e9:6b:
2b:4e:b0:2b:85:cd:34:26:90:af:57:fa:8c:24:07:
74:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:2E:82:36:9A:A3:0D:01:62:0E:7A:68:45:05:66:95:F2:4D:68:14
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/bS6CNpqjDQFiDnpoRQVmlfJNaBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:450::/48
2a06:a005:452::/47
2a06:a005:5e1::/48
2a06:a005:1274::/47
2a06:a005:1b30::/44
Signature Algorithm: sha256WithRSAEncryption
01:74:38:52:4a:22:29:3e:09:4e:e7:26:9a:c0:af:36:87:0b:
c0:4b:69:b4:1c:2b:59:fd:5f:43:5a:89:06:76:19:30:c3:ee:
69:a9:4a:6a:65:58:4d:6e:3f:6b:4c:6a:cf:cf:7f:ed:d6:67:
77:00:90:a4:ee:1e:9b:78:89:0d:bd:ef:c7:7c:f5:ba:ce:70:
d1:48:23:01:7b:27:37:8a:2d:8d:d0:41:5d:6c:52:71:36:c3:
75:f6:98:30:99:73:56:20:1a:e8:f5:2f:f5:63:c2:6d:4c:16:
e6:ed:0c:17:94:cd:0c:09:8d:29:fc:5a:4e:50:b9:ab:54:4c:
cc:c3:27:c2:16:38:91:08:2d:56:2d:1a:7a:ea:a2:11:ea:ea:
17:00:78:cb:47:ee:a1:08:1e:ab:8c:78:1e:60:16:ef:95:11:
01:b7:f0:fb:b6:cc:42:1c:8a:bf:90:79:bd:c5:ad:80:04:55:
30:b1:cb:11:29:3a:bd:94:5f:0b:84:60:68:a2:82:39:5f:e4:
80:39:33:aa:5e:60:68:85:a7:3c:0f:a3:9c:31:cc:81:9a:b6:
49:a1:7a:c3:6c:55:e8:36:ba:d7:79:fe:c8:a9:db:e7:97:be:
35:4f:21:0c:4d:93:80:0d:d3:69:0e:03:9d:9a:9c:96:6f:58:
cc:3d:6b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:10:50 2025 by rpki-client