Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/bucPBFS3Zve1FDadEBq6C5xT2Ls.roa
File: bucPBFS3Zve1FDadEBq6C5xT2Ls.roa (raw, json)
Hash identifier: B+FpWYvymymrCehxx0sH51TwsbIGkc4p1Vy9esCAsok=
Subject key identifier: 6E:E7:0F:04:54:B7:66:F7:B5:14:36:9D:10:1A:BA:0B:9C:53:D8:BB
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01825AE09A21FBC84695287D0EAD1813500E
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/bucPBFS3Zve1FDadEBq6C5xT2Ls.roa
Signing time: Mon 01 Aug 2022 19:27:24 +0000
ROA not before: Mon 01 Aug 2022 19:27:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211954
IP address blocks: 2a0a:6040::/32 maxlen: 48
2a07:54c2:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:5a:e0:9a:21:fb:c8:46:95:28:7d:0e:ad:18:13:50:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Aug 1 19:27:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6ee70f0454b766f7b514369d101aba0b9c53d8bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cc:bd:16:0d:06:46:0f:7c:5a:9d:6d:f8:c1:
ce:bc:c3:05:1c:34:78:71:8e:cf:15:b9:24:c9:5d:
62:87:65:70:ce:b8:6a:9d:c2:41:4a:93:e4:b1:57:
8d:5b:be:0f:1f:9e:ad:e8:9d:f5:e8:9e:2e:4a:ee:
a5:9c:3f:f4:f6:4c:77:91:6c:0f:df:50:f6:6d:13:
b8:60:94:5f:46:cc:36:b7:20:de:b1:05:e8:8d:12:
13:2d:df:6d:b3:31:2a:0d:eb:4f:47:fa:99:92:c0:
ad:cd:8c:6a:29:4c:a6:12:4a:fa:a2:a2:49:65:b3:
0e:63:12:6f:df:82:9c:59:8d:d9:aa:ea:fb:83:52:
79:2e:58:e9:04:8d:1b:2e:28:f5:8a:67:26:3f:ad:
b1:dd:e8:2d:b5:5a:1c:c9:e1:7a:cc:2f:60:3d:b8:
0b:51:b9:b4:c4:8a:31:ac:59:7c:85:c5:cd:61:d5:
e1:db:b8:9c:83:5f:08:74:42:a6:6f:0c:51:79:01:
21:3c:3c:7b:bb:6b:ef:6e:27:2d:73:f6:5a:8e:49:
79:9a:67:1d:29:74:fb:b9:19:fa:a5:fa:f7:f3:ee:
07:6a:e8:51:8f:55:12:c0:09:ff:88:81:04:da:f2:
4a:fb:80:f6:d9:f5:1c:ce:b1:c2:47:a8:e7:c4:66:
79:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:E7:0F:04:54:B7:66:F7:B5:14:36:9D:10:1A:BA:0B:9C:53:D8:BB
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/bucPBFS3Zve1FDadEBq6C5xT2Ls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:54c2:b00b::/48
2a0a:6040::/32
Signature Algorithm: sha256WithRSAEncryption
96:1c:6e:7d:15:88:8b:7b:67:76:0d:02:d0:8d:13:90:c8:61:
a7:29:cb:6e:ce:61:9c:51:6c:54:46:d0:96:44:9e:e1:b6:cf:
cf:95:29:af:be:de:7a:41:36:5e:a1:65:d3:b9:2e:99:e9:50:
61:75:11:a5:98:f9:3f:55:dd:c7:b9:94:4a:c6:75:b6:13:f8:
d6:20:67:dd:16:7c:e2:7b:a6:30:52:48:2a:e5:98:4a:1f:33:
5e:24:c4:f9:06:eb:e4:53:5b:16:2b:97:5a:92:7f:69:13:d7:
c0:18:1c:9a:ae:53:b9:13:97:8f:71:f5:1a:f9:08:14:ef:7e:
44:70:de:dd:a2:00:0e:bd:cd:98:3f:30:61:7d:59:9b:51:c6:
f9:c1:4a:b0:f2:58:df:29:a6:3f:59:7d:a3:e6:e5:0b:1e:42:
27:b7:3e:e0:82:f4:20:a3:cd:2a:6f:53:81:d4:ab:87:14:a2:
33:32:65:91:9d:f2:e2:29:47:58:eb:a5:8f:91:7b:e6:92:73:
35:2e:fc:5d:17:3b:fd:df:15:0a:44:15:1d:6d:d3:3c:a6:7f:
62:80:fd:5e:7e:ac:ea:08:97:a7:43:f1:f6:14:d9:f2:f2:a3:
da:8f:e6:48:3c:d7:9c:05:63:de:a7:91:24:6b:86:ee:7c:43:
b8:90:1f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:43:08 2025 by rpki-client