Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/djpxcH2_73s0I4QORj6-m9MDTSE.roa
File: djpxcH2_73s0I4QORj6-m9MDTSE.roa (raw, json)
Hash identifier: CVZ3F+hLrV7VEgDN+MFK4Pqg+INi1dfMLWIZiNqr4bw=
Subject key identifier: 76:3A:71:70:7D:BF:EF:7B:34:23:84:0E:46:3E:BE:9B:D3:03:4D:21
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 1989DC51
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/djpxcH2_73s0I4QORj6-m9MDTSE.roa
Signing time: Sun 08 May 2022 03:26:56 +0000
ROA not before: Sun 08 May 2022 03:26:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203857
IP address blocks: 2a06:a005:5ec::/48 maxlen: 48
2a06:a005:851::/48 maxlen: 48
2a06:a005:4d2::/48 maxlen: 48
2a06:a005:4d7::/48 maxlen: 48
2a06:a005:850::/48 maxlen: 48
2a06:a005:4d5::/48 maxlen: 48
2a06:a005:4d6::/48 maxlen: 48
2a06:a005:5eb::/48 maxlen: 48
2a06:a005:4d4::/48 maxlen: 48
2a06:a005:5e9::/48 maxlen: 48
2a06:a005:5ea::/48 maxlen: 48
2a06:a005:5ef::/48 maxlen: 48
2a06:a005:5e8::/48 maxlen: 48
2a06:a005:5ed::/48 maxlen: 48
2a06:a005:5ee::/48 maxlen: 48
2a06:a005:5e3::/48 maxlen: 48
2a06:a005:4d3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 428465233 (0x1989dc51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: May 8 03:26:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=763a71707dbfef7b3423840e463ebe9bd3034d21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:36:d3:9a:6d:06:a0:d8:00:06:a4:b1:ed:42:
07:67:02:dc:3d:26:ef:f5:35:07:43:4b:46:21:fb:
df:81:21:5d:32:fd:08:af:38:40:ee:8e:1b:ab:ab:
92:a5:89:eb:6a:60:9c:97:21:28:ad:92:9c:cb:06:
c0:ba:38:61:4d:61:2e:27:05:52:7f:a7:14:c6:cf:
9e:67:6e:a7:2f:f2:3c:13:ff:6f:1c:5f:cf:27:83:
54:2a:d2:bc:13:30:76:d4:d3:c6:85:53:30:48:1c:
4c:79:d6:b9:21:a7:a4:06:9f:2e:84:db:cb:e1:f2:
83:d7:02:fd:1c:93:69:60:44:bd:9c:21:56:e7:73:
ae:25:77:33:9d:50:d5:bb:86:44:7a:f1:12:46:29:
6e:19:1f:28:13:3a:b2:60:b0:0d:02:f1:f3:38:21:
1f:d7:4e:b1:2e:63:61:b6:43:2f:8e:87:3e:3c:e0:
a4:02:70:4b:d7:24:c0:6e:32:64:b4:59:4b:5a:8a:
94:3c:14:ff:e5:1d:db:49:cf:cd:1c:e6:19:af:11:
43:45:52:30:55:a9:ca:a1:a7:d8:3e:a3:ac:85:0d:
32:77:1c:2e:5c:ea:9c:89:d4:9e:fc:8f:8c:1e:df:
53:da:16:18:2d:f9:af:96:c2:57:cf:47:4b:ce:38:
27:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:3A:71:70:7D:BF:EF:7B:34:23:84:0E:46:3E:BE:9B:D3:03:4D:21
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/djpxcH2_73s0I4QORj6-m9MDTSE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:4d2::-2a06:a005:4d7:ffff:ffff:ffff:ffff:ffff
2a06:a005:5e3::/48
2a06:a005:5e8::/45
2a06:a005:850::/47
Signature Algorithm: sha256WithRSAEncryption
48:7f:b3:40:18:77:d3:57:6d:33:45:5b:71:9a:35:68:20:9a:
18:ab:fc:44:0e:9c:b5:af:48:00:19:76:3b:75:5d:24:d2:c3:
cb:54:1d:b7:74:7a:93:df:eb:46:34:60:7f:87:df:f1:a5:c8:
e5:cd:54:14:ed:75:bc:f3:a8:59:82:2b:6d:ad:84:96:28:6d:
d7:88:3b:2a:d1:c6:4c:f5:bf:4f:68:31:fe:04:39:69:b4:69:
28:4e:8b:ce:9d:c4:78:be:4f:c0:35:63:be:00:b9:b6:7e:b3:
e8:d2:58:07:b6:85:a9:54:4c:5a:81:2c:f8:d6:a4:c6:47:44:
ec:be:05:65:d1:6b:ef:f1:69:cf:2f:f9:73:43:ad:d3:c4:e7:
83:09:26:43:70:48:9d:33:64:20:23:9b:be:26:38:45:dd:76:
e2:6a:04:0c:eb:0b:0c:83:60:c0:b5:5f:40:68:97:18:18:ac:
e0:4c:b5:b1:4c:bd:61:60:93:3e:12:99:06:63:80:ea:b2:07:
64:10:ef:8d:d4:50:ba:30:7d:14:06:27:27:62:34:f9:fc:77:
ac:25:41:66:9a:e8:8a:2e:d6:0c:73:76:cc:89:b5:48:87:86:
8c:5e:67:7d:37:f8:22:e9:39:6d:b8:00:ef:f9:b5:d7:79:89:
3e:de:5f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:21:11 2025 by rpki-client