Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/es1vWDvz5SwsS4XuAKjM-DiuT-Q.roa
File: es1vWDvz5SwsS4XuAKjM-DiuT-Q.roa (raw, json)
Hash identifier: a1pQUDLmIRzVqWqgvB5u+br2qlVW5nGvSD2zoC/qhtI=
Subject key identifier: 7A:CD:6F:58:3B:F3:E5:2C:2C:4B:85:EE:00:A8:CC:F8:38:AE:4F:E4
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0184C1C6CB977BCD57F75116E8A64518210B
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/es1vWDvz5SwsS4XuAKjM-DiuT-Q.roa
Signing time: Tue 29 Nov 2022 05:05:41 +0000
ROA not before: Tue 29 Nov 2022 05:05:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205965
IP address blocks: 2a06:a005:2240::/44 maxlen: 48
2a06:a005:2410::/44 maxlen: 48
2a06:a005:2420::/44 maxlen: 48
2a06:a005:23a0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c1:c6:cb:97:7b:cd:57:f7:51:16:e8:a6:45:18:21:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Nov 29 05:05:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7acd6f583bf3e52c2c4b85ee00a8ccf838ae4fe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a9:b0:e7:a9:ed:f9:c8:6f:55:e5:74:d4:dc:
93:f1:cc:17:6d:ec:87:28:51:ef:40:16:1a:e2:3c:
eb:3f:8b:ee:29:6c:84:f1:5f:32:cb:74:58:36:84:
08:7f:89:3e:ac:14:90:17:b9:d8:af:2b:3b:38:83:
ae:69:53:24:63:6d:e6:b5:29:90:c2:66:f6:87:7e:
eb:33:c9:6c:a9:35:69:22:32:33:0a:dd:c8:89:3e:
ac:16:6b:da:80:e6:f3:7c:cd:29:e5:22:2e:90:34:
35:1e:f7:f3:15:8b:6b:28:a0:49:bf:28:c2:e6:c3:
e3:1f:94:fc:0f:6d:7e:6d:b4:43:ce:8e:9b:2b:1b:
1c:8e:d4:eb:ba:ca:1f:dd:db:d9:dd:90:d2:f5:67:
47:fd:bf:08:ff:96:9a:0b:5c:d5:39:18:5c:71:c7:
85:e1:b5:a0:72:62:4d:97:4a:4e:ee:90:4e:86:eb:
31:87:bf:43:a1:32:95:14:a9:4a:85:02:3d:bd:42:
50:06:d4:6f:a3:7c:16:18:32:fd:a5:b6:eb:3e:cb:
99:f2:b6:6f:e0:22:42:52:a0:74:81:b9:f6:69:8c:
48:3f:7d:fb:2d:59:b3:4e:3b:08:49:3f:52:1b:52:
11:e5:c6:fc:d6:36:1d:80:72:15:c1:f8:40:a8:26:
b6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:CD:6F:58:3B:F3:E5:2C:2C:4B:85:EE:00:A8:CC:F8:38:AE:4F:E4
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/es1vWDvz5SwsS4XuAKjM-DiuT-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2240::/44
2a06:a005:23a0::/44
2a06:a005:2410::-2a06:a005:242f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
47:5d:e2:0b:78:cd:b8:f5:e7:bd:67:09:45:06:16:95:66:ce:
d7:77:d0:8e:56:40:22:45:47:4d:e4:86:09:6c:84:17:27:36:
ed:65:de:4e:0b:44:3b:4e:fa:d6:9e:f0:cf:0b:9e:c2:e9:f5:
8b:d1:56:ae:2c:cb:3c:4d:19:72:d6:00:de:e6:d0:cf:bd:43:
83:9a:4a:d8:22:d9:46:00:bd:e7:86:eb:ed:0e:95:35:c2:6e:
11:7b:1b:d3:68:b7:c5:89:4b:0b:19:0e:0b:ec:0c:55:48:19:
18:ed:1a:9f:81:41:3f:e5:8e:97:45:df:35:ca:71:d8:e1:b1:
d5:87:07:73:ec:c4:10:69:a8:45:e0:4b:8c:bb:22:60:b6:22:
6b:72:f2:e7:90:73:5b:b9:d7:21:3c:58:fc:67:c6:0d:b1:a5:
ef:b8:c4:2c:7d:c8:c3:8d:a0:37:ea:ae:2d:44:53:32:d7:d9:
3a:78:54:31:3f:d2:e8:8c:9d:69:0e:f5:87:00:3b:ca:7b:59:
38:64:e7:bc:91:83:95:cc:8a:11:17:6e:e6:4d:0c:0e:90:e1:
02:66:35:57:8b:19:88:97:41:d5:8b:fe:48:e5:9f:78:43:b8:
a8:74:dd:c8:41:15:4a:9c:47:b9:18:59:33:54:04:e6:38:d0:
3b:56:f0:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:18:30 2025 by rpki-client