Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/bbOAqnHfkTdNVpZWnhv86tY7KYA.roa
File: bbOAqnHfkTdNVpZWnhv86tY7KYA.roa (raw, json)
Hash identifier: OzGxfdSY8JeufHYZZd5bf5ER7tVvZ6KtTiGAZvT6XDE=
Subject key identifier: 6D:B3:80:AA:71:DF:91:37:4D:56:96:56:9E:1B:FC:EA:D6:3B:29:80
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 018454D0CC733FC0CB95EF3EA9E8C11D3BED
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/bbOAqnHfkTdNVpZWnhv86tY7KYA.roa
Signing time: Tue 08 Nov 2022 01:18:00 +0000
ROA not before: Tue 08 Nov 2022 01:18:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202400
IP address blocks: 2a06:1287:6001::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:54:d0:cc:73:3f:c0:cb:95:ef:3e:a9:e8:c1:1d:3b:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Nov 8 01:18:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6db380aa71df91374d5696569e1bfcead63b2980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:46:06:f2:3c:65:41:61:fe:47:c0:4b:fd:38:
da:38:4d:82:e5:69:4c:d9:21:ba:20:23:f2:d9:34:
2b:33:ca:87:b0:94:24:5d:7c:b9:2a:48:f0:cf:ea:
d4:83:10:f6:b3:47:63:cb:b0:a3:d0:46:9c:89:c0:
a5:05:6f:a0:be:b6:e7:29:8f:1a:f2:a2:6e:fd:61:
98:df:13:79:fe:24:ee:62:31:49:62:33:c8:34:e8:
5b:e7:f1:3d:ce:2c:ea:fb:6e:38:0c:54:a9:65:f0:
1f:20:a9:c9:b5:b5:75:85:ac:b4:bd:22:5b:a0:66:
51:f8:e6:ae:30:fb:98:35:ab:d9:3c:dd:ce:d5:9c:
9a:11:2f:6a:e4:8a:5a:2b:c1:1e:b2:e1:ad:29:e6:
46:4e:ce:ec:5b:91:06:3f:81:80:82:1e:53:87:73:
17:c1:71:4b:52:4a:94:17:af:2c:24:d4:a8:c1:05:
bc:a6:3e:87:61:20:3f:3a:8f:c6:1f:a1:7b:e1:b6:
a6:0d:b0:ea:4e:00:6a:03:99:89:53:ac:75:2b:dd:
e3:9d:f4:1b:a5:de:76:61:32:10:55:cf:69:c6:8a:
16:b8:42:34:2d:3a:bb:58:06:3e:9d:3f:60:ff:3b:
e8:05:81:9f:1f:23:78:8a:38:81:17:e4:5b:51:d7:
98:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:B3:80:AA:71:DF:91:37:4D:56:96:56:9E:1B:FC:EA:D6:3B:29:80
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/bbOAqnHfkTdNVpZWnhv86tY7KYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1287:6001::/48
Signature Algorithm: sha256WithRSAEncryption
8a:9a:56:1a:e4:48:73:89:3e:1a:18:58:17:65:02:3e:f2:ef:
f0:e4:19:ff:d9:64:11:a2:04:2c:d9:fe:f4:6e:38:cd:cd:fc:
60:8f:46:46:f2:84:34:ec:35:c7:1e:8c:0c:5d:8b:bf:4f:ad:
5b:72:90:4b:61:55:01:18:a4:c8:28:2b:72:a6:94:6e:d3:1f:
28:f9:16:45:cb:3a:c9:34:8a:fc:07:ab:3a:32:67:35:f6:a0:
31:e2:94:f1:c2:6a:04:b6:7d:91:86:ab:f5:f5:d8:d0:aa:10:
e2:3f:57:7c:3a:ae:3e:21:4b:b6:95:0f:fc:80:e8:6f:61:f8:
ca:f8:3f:e9:97:d8:04:c7:af:cf:20:f6:bc:eb:5c:eb:0c:a3:
a2:38:99:5a:38:8d:cf:97:4c:dd:7b:e2:17:26:c6:33:af:0a:
15:c8:6a:92:3b:59:2e:27:2a:b6:1d:d5:10:3c:7c:99:81:b7:
ca:53:9d:81:3b:94:0e:1c:c1:ac:5c:5f:68:76:21:26:d7:48:
ae:48:ce:24:80:ad:66:e3:6d:cb:88:48:e4:a4:fc:ef:76:5e:
d4:5b:50:24:c7:9f:b6:27:6a:d0:05:32:ef:be:51:1f:1a:11:
86:ae:d4:a8:28:67:c7:ff:0f:10:bd:3c:6a:be:62:c4:77:32:
78:02:37:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 03:57:12 2025 by rpki-client