Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/d4aGOsarMuoZ70tIlmDyTXklY70.roa
File: d4aGOsarMuoZ70tIlmDyTXklY70.roa (raw, json)
Hash identifier: RMNauwuuwKnRMws9w5py5v/6WD1X+BFgTKXgvif+bq8=
Subject key identifier: 77:86:86:3A:C6:AB:32:EA:19:EF:4B:48:96:60:F2:4D:79:25:63:BD
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0182BCFEE093F396235DED149C9639239B90
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/d4aGOsarMuoZ70tIlmDyTXklY70.roa
Signing time: Sat 20 Aug 2022 20:43:16 +0000
ROA not before: Sat 20 Aug 2022 20:43:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203868
IP address blocks: 2a06:a005:d2a::/48 maxlen: 48
2a06:a005:15d0::/44 maxlen: 48
2a06:1287:900::/40 maxlen: 48
2a07:54c2:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:bc:fe:e0:93:f3:96:23:5d:ed:14:9c:96:39:23:9b:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Aug 20 20:43:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7786863ac6ab32ea19ef4b489660f24d792563bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e2:1b:80:f3:be:f9:25:00:9f:3c:1b:49:7f:
1d:ef:5a:24:c1:59:d4:6d:83:39:4c:c1:ec:1f:c3:
8e:96:cf:ca:04:52:ef:3a:6a:14:4d:6c:0f:f5:34:
a0:4f:f4:2c:cf:1f:c0:1f:86:2b:0d:e1:08:d6:f9:
cd:2a:07:4c:f5:37:af:a5:e2:8c:8f:c8:ae:c2:c2:
fa:8f:7f:91:3b:fb:fa:0a:80:75:e9:2b:83:c2:dd:
f1:59:f2:9e:d5:71:42:01:22:f6:d3:9c:d1:f3:36:
10:46:76:5e:bb:9d:5d:e2:93:00:1f:01:b2:dc:f0:
02:79:b0:a7:44:ee:5c:a6:91:bb:05:e4:59:13:fd:
51:7a:79:b6:23:a2:da:b7:99:2e:d1:1b:d8:fc:56:
c4:7e:3b:c8:1d:e2:29:16:6e:e1:c8:b9:17:94:83:
87:04:1d:59:c6:14:ab:7c:3b:a2:ea:b7:d3:d2:b1:
a7:10:1a:c9:bc:65:38:57:a2:e2:b4:96:84:38:8e:
9e:c7:ea:fa:23:26:02:2a:58:c7:ce:ba:74:8f:1a:
89:48:f0:a6:c7:40:4a:21:b2:e0:86:6d:13:70:98:
63:d0:f1:cc:4d:e0:48:05:d7:0c:46:2e:70:eb:6a:
e6:fd:36:c3:49:a8:de:d4:82:12:bf:3c:be:a9:5c:
8d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:86:86:3A:C6:AB:32:EA:19:EF:4B:48:96:60:F2:4D:79:25:63:BD
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/d4aGOsarMuoZ70tIlmDyTXklY70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1287:900::/40
2a06:a005:d2a::/48
2a06:a005:15d0::/44
2a07:54c2:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
38:5c:5f:0d:da:73:bd:85:e1:c1:0b:e9:e9:6d:2f:e1:3d:d3:
7c:cb:d6:c3:3b:ab:52:b1:50:6d:b7:a2:61:ce:fa:ca:e5:03:
7f:b8:32:b8:ae:aa:b4:4b:07:be:39:17:85:b4:92:45:18:ee:
1c:b3:3a:30:7c:55:31:70:2b:88:f5:97:11:4d:a4:e8:bf:d6:
5b:2c:43:4d:85:25:fc:d6:b9:ce:0c:59:d7:e4:2b:dd:00:86:
a9:8c:b4:a1:93:82:6e:6c:b4:f4:1a:a0:98:2b:10:68:d3:64:
05:bc:50:4c:bc:f6:14:ad:3f:1f:07:de:7c:72:70:f1:a8:65:
b5:68:06:77:54:7f:5a:bc:0b:b2:c0:cc:8e:17:0c:97:ee:00:
1d:c9:ff:b5:1a:ac:02:d0:b8:b9:5c:97:27:7e:10:b3:94:e3:
7a:6f:79:39:51:11:ba:14:c6:88:01:93:07:06:85:52:70:29:
f2:13:0e:43:83:b5:5d:01:8b:20:76:0f:aa:f0:d7:72:77:05:
87:87:57:a8:05:7d:76:21:b0:33:bf:5e:5e:7f:fe:0c:05:43:
5a:63:17:ed:a9:6e:66:5a:a2:ab:01:93:42:42:fe:ff:e8:f0:
e9:ea:53:5d:9e:b3:c3:0b:eb:6d:7b:f2:bb:cb:87:30:4a:85:
77:5b:50:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 03:41:23 2025 by rpki-client