Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/btkKZWCC862iJprdtKdJfrakdTY.roa
File: btkKZWCC862iJprdtKdJfrakdTY.roa (raw, json)
Hash identifier: Kj+StAEoL3k3bcmKvM72fcZvwSHQl56NGFwjmCzD7vM=
Subject key identifier: 6E:D9:0A:65:60:82:F3:AD:A2:26:9A:DD:B4:A7:49:7E:B6:A4:75:36
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 018279CEFAE8D77DBF25E952B6CD20AD7F05
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/btkKZWCC862iJprdtKdJfrakdTY.roa
Signing time: Sun 07 Aug 2022 19:36:23 +0000
ROA not before: Sun 07 Aug 2022 19:36:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203967
IP address blocks: 2a06:a000:301::/48 maxlen: 48
2a07:54c2:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:79:ce:fa:e8:d7:7d:bf:25:e9:52:b6:cd:20:ad:7f:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Aug 7 19:36:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6ed90a656082f3ada2269addb4a7497eb6a47536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e0:db:9c:91:49:2b:3f:91:d9:d4:a2:76:32:
30:fd:7f:d1:f5:45:85:5f:e0:fc:41:02:79:0a:df:
23:ca:dd:a0:ca:f9:13:dd:00:76:c7:e6:5f:d0:7b:
3c:ac:c9:f7:80:d0:97:d6:d7:31:8f:8f:45:58:c6:
35:df:ba:54:92:7a:cb:53:51:2a:f7:59:71:a1:de:
2c:56:bd:52:af:34:b3:b0:61:11:d3:4e:4c:ba:eb:
06:7a:5b:26:08:97:8e:91:dc:7d:23:47:81:57:86:
5c:f0:09:98:8e:77:ab:fd:4c:01:ec:71:73:54:f2:
12:ee:1d:58:e9:48:1a:78:e4:89:82:ed:08:7e:16:
a1:dd:ce:13:7c:92:5d:e5:4e:0d:c2:26:e3:e7:ee:
ea:fb:bc:77:12:2a:e3:0c:41:0e:53:ea:bb:cc:c4:
65:2d:90:a4:de:bf:8a:d7:95:c5:ce:f7:ee:27:b9:
db:b0:31:46:b9:c0:08:f9:fe:34:91:79:74:4c:47:
49:86:a5:6c:2b:cf:42:2a:82:75:0c:95:b3:da:d8:
86:2e:4c:42:8a:41:08:8c:77:81:ef:89:e2:60:06:
81:7b:19:bb:4d:79:8e:e0:e8:75:78:d8:b5:85:cc:
70:dd:3f:f8:77:b3:61:7b:92:37:bd:96:36:e0:26:
bf:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:D9:0A:65:60:82:F3:AD:A2:26:9A:DD:B4:A7:49:7E:B6:A4:75:36
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/btkKZWCC862iJprdtKdJfrakdTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a000:301::/48
2a07:54c2:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
24:78:62:95:4a:bd:a5:04:b5:ca:e5:62:44:84:a4:00:7c:4a:
8d:1b:2c:54:37:83:dc:d1:2f:03:4d:de:82:89:9c:06:c1:37:
7f:5b:39:35:df:75:08:1b:bc:65:56:8f:49:40:8a:33:0b:57:
07:9b:26:0a:7f:de:16:13:e8:dd:79:69:3b:06:29:cd:4d:b2:
af:ba:dd:d7:bb:6a:0c:92:26:03:ed:eb:cf:59:37:69:0b:41:
67:71:7b:1a:ba:64:11:05:f5:de:93:53:7f:f8:ea:52:12:ae:
b2:3a:f1:1c:c5:62:a3:a4:c0:91:d7:ed:58:9e:00:e3:27:bd:
dd:56:d5:eb:01:20:b6:d4:4e:cc:ec:a6:d9:b4:31:74:28:64:
61:2f:47:4f:46:2c:7f:af:0b:5c:ea:27:a3:5d:9c:9f:6a:cc:
0c:3c:9f:cf:a5:6f:55:dd:7f:dd:32:fe:66:c8:83:0f:92:6d:
a2:a8:a1:a2:e2:91:b6:0e:6f:4a:dd:4f:2d:53:90:3d:5f:df:
03:69:f6:f0:7f:8e:ab:c0:f7:a2:d6:97:ae:9b:8e:d3:6c:94:
cf:ae:a5:8a:d5:29:d6:e8:ad:de:98:73:24:0c:30:2c:c8:c7:
b7:d5:5c:f1:8a:7a:7c:41:ad:98:c6:6d:67:3e:d7:1c:8f:c7:
ee:7c:1c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:09:26 2025 by rpki-client