Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/fOR8YiM_Ud5qNpCZ5-D2rsKKG0Y.roa
File: fOR8YiM_Ud5qNpCZ5-D2rsKKG0Y.roa (raw, json)
Hash identifier: It49XfnuvuYIEWdbPRW1hDXOjC6GLx9NjDKv8I+dmTU=
Subject key identifier: 7C:E4:7C:62:23:3F:51:DE:6A:36:90:99:E7:E0:F6:AE:C2:8A:1B:46
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0183B6910DAE9D61A975FF87D6D7E253150E
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/fOR8YiM_Ud5qNpCZ5-D2rsKKG0Y.roa
Signing time: Sat 08 Oct 2022 07:48:22 +0000
ROA not before: Sat 08 Oct 2022 07:48:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 142594
IP address blocks: 2a06:a000:1d0::/44 maxlen: 48
2a06:a000:1c0::/44 maxlen: 48
2a06:a005:16d0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:b6:91:0d:ae:9d:61:a9:75:ff:87:d6:d7:e2:53:15:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Oct 8 07:48:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7ce47c62233f51de6a369099e7e0f6aec28a1b46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3e:cd:aa:b6:1a:db:84:69:3b:ca:bc:92:5f:
be:e7:6f:36:15:a6:93:7a:bd:ac:39:ea:de:85:c2:
9d:f5:a6:11:44:bd:a9:b5:4f:e4:c0:87:ca:4c:09:
21:e1:ae:f0:c5:e9:80:5e:91:74:85:ec:8f:f6:52:
e9:c6:6b:21:97:8e:39:3f:9d:a9:a7:cb:41:fd:c8:
2d:bd:10:ca:ff:31:c3:e0:25:bf:6f:b3:40:64:77:
b4:70:3b:64:98:0b:66:a2:2d:bf:68:9c:d0:dd:21:
f9:61:7a:fc:71:69:f1:1b:54:a4:a8:8e:63:62:9f:
8e:d5:06:c9:52:5c:f5:d6:d6:b5:fb:5f:24:15:ac:
50:c8:86:63:92:f9:80:13:1e:f2:02:86:a0:9e:0c:
40:22:bf:d5:f8:83:44:bd:c0:38:f7:38:a9:b2:73:
50:f7:e2:e9:37:c0:8e:69:c6:52:8c:66:2a:ed:d0:
5b:03:a2:75:5c:88:ec:22:5c:7b:f5:e0:87:3a:ed:
c4:5c:68:79:8f:2a:a9:30:8e:a4:fe:e5:41:1c:87:
86:3d:22:e2:13:91:ed:64:f5:93:42:20:50:12:8c:
08:5d:5f:3a:cb:15:59:76:ad:36:d2:c9:80:1c:74:
05:6f:e0:6f:14:be:df:70:d1:34:80:c6:7e:a2:62:
31:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:E4:7C:62:23:3F:51:DE:6A:36:90:99:E7:E0:F6:AE:C2:8A:1B:46
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/fOR8YiM_Ud5qNpCZ5-D2rsKKG0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a000:1c0::/43
2a06:a005:16d0::/44
Signature Algorithm: sha256WithRSAEncryption
7e:3f:f8:10:e7:e9:e0:0c:21:34:47:2e:7a:f5:3d:17:a5:06:
47:bd:7c:79:0e:59:a7:07:d8:1a:b9:19:d3:6b:83:23:62:fb:
47:48:de:70:00:b4:52:9f:f2:30:48:06:b3:dc:b8:e1:14:bb:
47:69:03:77:a0:91:07:f3:26:72:c8:80:43:ba:74:81:62:b8:
fc:97:6f:63:31:09:8d:5b:10:5f:d4:8b:ac:1b:c3:4b:5d:73:
d4:18:86:59:e5:25:ca:47:c8:a9:a7:fd:c9:4f:d6:dc:3d:f2:
00:3c:f9:f3:a0:21:25:1e:4b:59:6a:b9:ae:32:f6:e4:40:d5:
b3:c5:5f:3c:06:3e:48:d1:b2:d9:95:d4:ac:ae:63:c6:86:e1:
bd:5c:38:bd:81:b6:0c:38:56:89:12:46:a2:01:67:40:02:46:
71:cd:4a:89:3e:50:8a:fc:33:d2:e2:0a:30:3c:bc:b3:dc:60:
80:a4:f6:cd:14:f5:c3:81:b9:8a:ca:e5:14:ef:88:8a:e4:e5:
21:de:55:a7:52:54:81:5f:e0:04:85:22:7b:00:e7:c0:23:c4:
9a:83:98:a0:25:30:ba:1a:ed:53:b6:e6:2d:d6:a1:09:dc:68:
59:0f:ea:21:5a:69:86:e3:a4:aa:7f:20:b7:f3:60:a1:02:77:
5f:18:85:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:45:23 2025 by rpki-client