Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/erT54pHuq_9ZE5U3JOfABoiOxmA.roa
File: erT54pHuq_9ZE5U3JOfABoiOxmA.roa (raw, json)
Hash identifier: V2sSizFzDtW5MSOTdcKdhUL5didkQdIbILmjEjJYwYg=
Subject key identifier: 7A:B4:F9:E2:91:EE:AB:FF:59:13:95:37:24:E7:C0:06:88:8E:C6:60
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01849E852B4814815D8D27234D9AA89EEE8C
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/erT54pHuq_9ZE5U3JOfABoiOxmA.roa
Signing time: Tue 22 Nov 2022 08:47:18 +0000
ROA not before: Tue 22 Nov 2022 08:47:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211390
IP address blocks: 2a06:a005:2370::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:9e:85:2b:48:14:81:5d:8d:27:23:4d:9a:a8:9e:ee:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Nov 22 08:47:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7ab4f9e291eeabff5913953724e7c006888ec660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:42:63:af:6e:24:03:c0:d6:48:76:07:e7:07:
e4:bd:33:cd:fd:07:d6:56:c4:f0:04:19:45:65:f9:
49:e9:ef:08:f8:4c:93:1c:22:f2:8e:54:22:96:b1:
44:73:33:ac:1f:b4:d9:cf:dd:43:db:a8:7a:fd:be:
39:42:b6:72:af:89:86:00:b3:a0:97:42:8e:59:ae:
38:9c:95:2e:dc:fd:6b:1f:d7:2b:de:c2:a4:12:8e:
09:ca:d5:0f:f3:12:10:5a:99:3c:fd:e6:53:17:5c:
55:95:63:f3:3b:95:87:52:7b:f5:c2:15:d5:49:f2:
28:86:c7:e4:85:39:83:70:47:10:28:d2:36:f6:de:
1b:7f:b7:40:78:b1:32:be:45:6d:6b:e1:4d:2b:9f:
10:df:cb:c8:22:da:a7:72:33:04:3f:c3:cf:cd:e4:
d2:a9:ec:f7:a7:aa:8a:b7:b7:eb:8f:07:57:59:3d:
cb:26:5e:79:ad:67:ec:7d:df:49:dc:02:c3:97:35:
1e:10:ca:5c:a3:fc:77:b3:97:3f:a4:1f:1d:2c:5e:
30:cd:9f:9a:4e:e8:53:f8:ca:53:52:b6:0e:5d:b9:
66:6f:07:72:80:f0:98:97:b4:f4:56:be:35:2b:82:
c0:ab:42:5e:98:73:1c:cb:a5:61:52:25:1b:97:3e:
93:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:B4:F9:E2:91:EE:AB:FF:59:13:95:37:24:E7:C0:06:88:8E:C6:60
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/erT54pHuq_9ZE5U3JOfABoiOxmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2370::/44
Signature Algorithm: sha256WithRSAEncryption
55:17:68:28:95:89:91:94:e0:f0:1d:0b:cd:06:4a:44:ba:77:
4e:61:50:c6:8e:ba:7a:e2:09:d8:37:9a:e7:9c:e3:dd:fe:18:
84:67:2b:03:05:71:0f:4f:4c:2b:57:98:da:8e:e6:4e:01:8f:
19:ee:7c:86:ee:fe:c2:e9:b9:c0:98:84:c8:1b:51:f0:66:4e:
24:a9:94:a5:2b:46:db:d7:42:df:ac:1b:e5:24:b0:7a:88:5f:
d4:b0:10:ad:61:a3:27:d4:3a:70:58:5f:9a:72:ae:b3:37:bd:
23:6e:92:84:48:78:73:de:31:27:e0:98:09:9b:53:66:7a:f2:
cb:b4:b2:46:b9:5d:52:da:e3:a7:c4:9f:90:c1:69:12:6c:a7:
82:ae:6d:22:0c:c5:19:c9:7e:a5:59:b6:bf:47:39:ae:04:fe:
73:65:93:db:d4:11:46:51:85:05:3a:fd:ea:fa:a9:45:46:d8:
e2:4b:1b:65:2a:f3:88:0c:53:1e:a1:06:90:32:f8:fa:e8:6c:
b2:81:3b:84:52:98:f6:1a:93:f3:08:b1:3f:06:96:a0:4a:a7:
e9:a3:67:9b:e6:a7:b6:f3:d7:c4:b1:d3:40:c0:ec:02:02:82:
86:aa:f1:a4:7e:72:59:d2:64:43:43:65:b9:6a:07:b6:56:4b:
dc:b3:be:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:08:14 2025 by rpki-client