Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/e1RARTKtlpNI5tkt3AYC5lxZtXg.roa
File: e1RARTKtlpNI5tkt3AYC5lxZtXg.roa (raw, json)
Hash identifier: GX/LpABGP7WJ3SENmKSa8bH88VHaNja3KyoBY6ANyio=
Subject key identifier: 7B:54:40:45:32:AD:96:93:48:E6:D9:2D:DC:06:02:E6:5C:59:B5:78
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 018472E3EFEDDE77E6A9CC175FEB2649EDC7
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/e1RARTKtlpNI5tkt3AYC5lxZtXg.roa
Signing time: Sun 13 Nov 2022 21:27:31 +0000
ROA not before: Sun 13 Nov 2022 21:27:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44570
IP address blocks: 2a06:a004::/32 maxlen: 48
2a06:a000::/32 maxlen: 48
2a06:1280:1000::/36 maxlen: 48
2a06:a003::/32 maxlen: 48
2a06:a005::/32 maxlen: 48
2a06:a005:18b0::/44 maxlen: 48
2a06:a005:1a70::/44 maxlen: 48
2a07:54c2:b00b::/48 maxlen: 48
2a05:dfc7:1300::/40 maxlen: 48
2a05:dfc0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:72:e3:ef:ed:de:77:e6:a9:cc:17:5f:eb:26:49:ed:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Nov 13 21:27:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7b54404532ad969348e6d92ddc0602e65c59b578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:37:e4:d7:d9:46:69:17:82:91:a0:80:f3:83:
4e:10:e4:52:9e:0d:51:4e:ef:18:ab:0f:fa:74:44:
b2:c1:06:76:0c:be:39:bd:46:ba:e5:46:c6:31:82:
07:2d:44:f1:11:6b:9e:d5:da:3a:f8:fb:d5:c3:fc:
ae:82:19:f8:bb:e9:82:02:02:2a:23:86:04:fd:ed:
64:8d:83:6d:dc:48:f8:e6:3e:b5:60:31:0c:f5:a6:
03:8a:b0:da:be:fc:fc:9a:d4:b1:82:c4:25:9f:21:
9f:86:d0:19:89:19:92:2f:49:41:02:1f:09:e9:b3:
32:62:28:84:b8:03:7b:f8:1f:77:9b:3c:b7:96:72:
39:6a:a8:16:96:cf:03:75:56:65:c3:30:ef:96:67:
78:79:07:1a:13:49:ef:59:36:04:06:7d:3e:53:fa:
99:43:5a:bb:10:20:bb:e7:5b:a7:b9:41:b9:f9:3a:
dc:27:2f:13:b7:f3:cb:f8:fd:40:17:92:78:c5:cd:
9f:f0:c2:c9:8f:fc:17:c8:9a:94:b0:af:66:8d:1a:
27:58:7e:15:41:0a:b2:d1:d3:e9:b9:1c:7e:ce:2b:
fc:02:8d:31:3d:3d:e8:92:15:db:90:3b:92:70:ef:
57:31:2e:30:52:2f:e1:4f:53:a6:11:1e:4e:ea:d9:
50:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:54:40:45:32:AD:96:93:48:E6:D9:2D:DC:06:02:E6:5C:59:B5:78
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/e1RARTKtlpNI5tkt3AYC5lxZtXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc0::/32
2a05:dfc7:1300::/40
2a06:1280:1000::/36
2a06:a000::/32
2a06:a003::-2a06:a005:ffff:ffff:ffff:ffff:ffff:ffff
2a07:54c2:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
2a:76:e6:65:c8:2e:43:8c:6c:88:38:14:e8:f4:7e:ed:48:91:
22:b7:16:60:1e:72:ed:85:db:3e:79:9b:c3:14:9a:2b:9f:2e:
21:b4:60:74:ae:a1:f6:ac:6a:9b:d2:5b:6f:46:da:79:7a:bb:
b0:f8:cf:92:0d:8d:54:06:a6:e0:35:f6:e7:85:07:47:a5:72:
5a:b3:27:d7:93:e4:a2:09:18:45:a8:05:75:cc:09:79:13:fc:
d0:b1:48:b9:2e:f0:bf:de:8d:0c:58:fb:a5:0f:38:14:4b:b3:
c9:5c:6d:b8:dd:b2:78:17:cf:8a:b7:0a:bd:32:e3:8b:ea:07:
1a:f0:30:8c:22:8b:ba:59:9f:a6:5a:f2:ac:68:09:a8:27:e8:
4e:6f:b9:5b:71:aa:58:e2:44:35:a5:85:97:fb:3b:4b:ec:b9:
3b:69:31:ac:3b:68:fc:e8:1f:be:cc:fa:8b:db:a5:fa:5d:d8:
27:cc:65:5f:bc:22:c7:20:69:ea:3e:54:2d:a2:14:98:02:b2:
ef:dc:7c:b7:40:32:d8:ef:e8:16:c7:4c:2e:be:95:bb:6d:b6:
88:8d:b1:72:c4:14:2b:a1:f4:31:40:a7:30:33:05:49:52:8b:
d5:8f:52:61:b8:cf:75:3b:59:b9:1a:eb:4e:96:bc:06:05:9b:
e9:fe:d0:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:09:32 2025 by rpki-client