Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/dbpbhHe2p8Xr8fvfGMGiYkhFGUQ.roa
File: dbpbhHe2p8Xr8fvfGMGiYkhFGUQ.roa (raw, json)
Hash identifier: V1uwoIb3XRFliXHyx+tiOZHC477gOJBUXgeabdDQ/k4=
Subject key identifier: 75:BA:5B:84:77:B6:A7:C5:EB:F1:FB:DF:18:C1:A2:62:48:45:19:44
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 018305171A2415ABC2076A0BA34C738A80A8
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/dbpbhHe2p8Xr8fvfGMGiYkhFGUQ.roa
Signing time: Sat 03 Sep 2022 20:42:23 +0000
ROA not before: Sat 03 Sep 2022 20:42:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206271
IP address blocks: 2a06:a005:437::/48 maxlen: 48
2a06:a005:a15::/48 maxlen: 48
2a07:54c2:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:05:17:1a:24:15:ab:c2:07:6a:0b:a3:4c:73:8a:80:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Sep 3 20:42:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=75ba5b8477b6a7c5ebf1fbdf18c1a26248451944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fa:96:97:15:a5:fa:70:0e:fa:fe:22:0c:85:
cf:3b:8b:3e:af:d0:77:f4:6c:4b:ca:40:73:25:f6:
45:39:e2:bb:ce:f1:0f:96:15:76:c4:7f:6f:d2:40:
9c:fc:19:22:67:4a:f7:ac:58:ae:6f:84:76:58:85:
d6:44:a5:6c:c0:a2:2c:e2:65:53:bd:84:d5:2f:d1:
96:51:76:0d:c7:43:8a:e0:20:9f:67:4c:98:ca:07:
5b:bb:af:eb:63:bd:b6:ae:0b:3e:e5:77:9f:0d:9f:
8f:28:9e:de:a8:c7:47:bf:1f:f2:f4:a0:55:b0:05:
59:ed:f8:97:ae:86:e4:b3:3b:66:a9:e6:70:a7:d9:
71:5b:de:a9:a1:bb:eb:3f:65:7b:ef:74:42:36:64:
6d:b6:06:f4:1f:c4:3a:64:c8:c1:a3:09:c7:f6:44:
9c:69:3d:13:85:50:01:2f:63:e9:cb:75:25:48:a2:
d5:82:b7:3a:7f:d9:69:df:9a:26:14:1f:c0:10:c3:
db:27:8b:82:b0:f0:79:0f:46:3f:c5:d0:1a:78:d9:
0d:8e:65:13:f6:d1:8e:6b:60:cc:86:4d:8a:6b:fd:
8f:43:79:d8:cc:5b:e3:1c:69:53:49:4c:cf:b9:de:
32:b8:b7:6a:49:78:75:2f:31:39:41:04:0f:9c:db:
a7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:BA:5B:84:77:B6:A7:C5:EB:F1:FB:DF:18:C1:A2:62:48:45:19:44
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/dbpbhHe2p8Xr8fvfGMGiYkhFGUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:437::/48
2a06:a005:a15::/48
2a07:54c2:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
42:a3:69:dd:4d:33:25:f7:98:66:71:a9:07:75:e7:4e:97:76:
c4:9d:e8:56:b1:89:04:98:fe:70:99:69:c9:1f:43:a5:eb:a6:
85:de:05:65:fd:2f:b0:61:b9:72:6a:84:7d:6e:d6:79:80:68:
ad:e0:ce:f8:b3:8d:69:ea:83:31:14:82:59:98:13:2b:65:3b:
5e:43:e3:84:c0:cb:38:ea:9a:38:83:a1:39:0f:46:49:a0:68:
27:e2:44:83:9f:b1:f4:c4:1d:a9:38:99:c8:30:4d:46:23:c3:
e9:da:20:6c:db:82:d3:9a:bb:ee:6c:76:02:1e:97:9f:aa:69:
7c:39:8c:c1:16:3f:58:a1:5f:6a:bb:85:bf:de:6d:45:b8:ca:
a2:ad:e4:22:b3:0c:bb:8b:f9:79:06:c9:e5:8b:81:aa:59:df:
ed:ce:b5:60:e8:ab:59:4e:a6:2b:1f:6e:44:15:bb:2d:2b:6a:
18:06:50:0c:a4:76:e0:68:72:a2:53:ea:50:bb:ad:c0:6c:29:
af:6c:9a:11:27:eb:4e:3e:e9:bd:35:94:81:06:6f:14:6a:e8:
4d:67:f6:b6:0e:53:ab:09:bc:b8:21:42:cf:27:31:d3:87:d5:
44:b9:c1:8e:75:41:9b:7a:d6:52:5f:44:3d:6f:43:87:83:b6:
40:2e:cf:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 22:04:27 2025 by rpki-client