Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/eZXf5a83KIw42YeOrrKdUKBETt4.roa
File: eZXf5a83KIw42YeOrrKdUKBETt4.roa (raw, json)
Hash identifier: NRnDlVIeFBT8h7Bx2mUnjy2rr4cZISiEY30flshJubc=
Subject key identifier: 79:95:DF:E5:AF:37:28:8C:38:D9:87:8E:AE:B2:9D:50:A0:44:4E:DE
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 018340EB790756914342CD14C07EBC27CAA0
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/eZXf5a83KIw42YeOrrKdUKBETt4.roa
Signing time: Thu 15 Sep 2022 11:31:57 +0000
ROA not before: Thu 15 Sep 2022 11:31:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204844
IP address blocks: 2a06:a005:1d00::/44 maxlen: 48
2a06:a005:1d60::/44 maxlen: 48
2a06:a005:1be0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:40:eb:79:07:56:91:43:42:cd:14:c0:7e:bc:27:ca:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Sep 15 11:31:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7995dfe5af37288c38d9878eaeb29d50a0444ede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:98:30:93:aa:81:f8:ff:0d:cf:da:60:22:09:
93:d6:22:d7:71:85:d9:28:6b:ad:d3:79:74:a8:76:
11:8e:2c:19:41:b1:83:5f:ae:d7:58:45:5e:24:3d:
36:0e:c7:55:58:e0:87:b0:d8:1a:c3:ca:fe:fd:3a:
98:2b:2b:b8:4a:fe:fa:7d:65:e0:41:db:a0:cd:66:
7f:40:f4:f9:29:45:40:54:86:a9:69:1a:54:34:e1:
19:e1:27:2e:68:81:1f:20:fa:ab:cb:4c:b6:41:0e:
a5:38:cd:ea:d1:1a:96:c3:8e:f5:9a:34:ce:1b:03:
7b:df:eb:bc:3f:dc:a3:ea:2d:f0:d0:56:b0:27:ab:
93:d5:28:29:1b:9e:b6:d0:50:a8:6f:0f:c3:f7:a0:
85:40:27:dd:52:93:c9:dd:03:b2:3c:63:63:a6:56:
aa:08:1b:47:61:be:6a:68:4c:44:14:b8:c4:8e:af:
d9:10:bb:ec:0a:30:fa:c6:d7:d7:20:b4:59:25:80:
38:b4:75:8e:c6:e3:0a:40:e0:8d:93:c6:0e:95:bd:
5e:ff:4d:3e:c3:d9:36:55:c5:1a:8a:0b:1f:7e:74:
d9:e2:4a:fb:f0:03:63:36:59:31:4b:11:7d:15:34:
5a:fd:8d:1a:60:2d:9d:34:07:c7:1d:dc:6c:9b:d1:
c7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:95:DF:E5:AF:37:28:8C:38:D9:87:8E:AE:B2:9D:50:A0:44:4E:DE
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/eZXf5a83KIw42YeOrrKdUKBETt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1be0::/44
2a06:a005:1d00::/44
2a06:a005:1d60::/44
Signature Algorithm: sha256WithRSAEncryption
1d:08:80:80:58:24:3d:70:1e:9f:38:ce:7c:c9:cb:41:b6:0e:
f6:3d:24:75:c4:2b:80:4b:98:3e:02:3d:7e:ac:58:4e:91:4d:
95:05:7b:56:f1:2a:ce:5d:1c:2e:1b:fa:ce:cb:8a:a6:23:6e:
11:a0:99:a0:9d:d0:1c:6c:a7:69:4c:97:41:8a:b2:e6:59:6f:
fc:2a:d2:83:bb:dd:1c:e0:ac:bb:4e:f1:dd:84:8a:3f:3d:0e:
45:ff:b7:c7:e9:a6:b0:a6:48:5f:ba:ff:fd:32:dd:1c:cc:0e:
94:0a:22:18:40:69:6a:08:ad:c3:fa:b9:60:0d:81:62:3f:1b:
86:97:a6:23:11:cd:08:92:6b:f7:11:f4:35:74:8b:79:41:af:
aa:3c:3c:c5:5a:0e:a6:69:57:a2:f4:91:f8:dd:d9:9a:24:5b:
fe:6e:e2:79:dc:b9:9b:5c:8b:23:90:12:d0:93:fd:73:46:33:
a9:46:2a:3f:1f:97:52:48:a7:c7:79:bd:ae:48:52:64:4b:61:
39:ff:a9:0e:35:3a:97:17:c3:ff:bf:51:3b:a2:26:f7:cc:32:
52:cd:fe:0a:d5:ee:85:97:ea:d5:f4:cb:07:50:92:ab:d0:c6:
bf:e8:70:39:75:36:ed:a6:a3:b1:95:71:4e:17:a7:e9:99:04:
42:9e:77:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:21:26 2025 by rpki-client