Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/g5qitI1kQK55XgqKsRyO2tpel_A.roa
File: g5qitI1kQK55XgqKsRyO2tpel_A.roa (raw, json)
Hash identifier: 6adD/v7POpmOqAPED1fJ6zm+Drspgw85JFJaoOZ6SwU=
Subject key identifier: 83:9A:A2:B4:8D:64:40:AE:79:5E:0A:8A:B1:1C:8E:DA:DA:5E:97:F0
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0184415FD8A09B0227201148A3AB5A2FD0CF
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/g5qitI1kQK55XgqKsRyO2tpel_A.roa
Signing time: Fri 04 Nov 2022 06:41:51 +0000
ROA not before: Fri 04 Nov 2022 06:41:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203888
IP address blocks: 2a06:a005:150a::/48 maxlen: 48
2a06:a005:d22::/48 maxlen: 48
2a06:a005:1550::/44 maxlen: 48
2a07:54c2:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:41:5f:d8:a0:9b:02:27:20:11:48:a3:ab:5a:2f:d0:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Nov 4 06:41:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=839aa2b48d6440ae795e0a8ab11c8edada5e97f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:80:a0:46:fa:71:c0:d1:f6:d4:3f:df:46:60:
55:50:a2:b2:c3:59:fc:44:af:88:9f:a1:74:4c:4c:
e3:f8:dc:92:10:4a:48:4f:73:1f:bb:dd:a6:bd:73:
a7:94:97:db:0d:19:a7:bf:25:4f:b0:fc:a5:f9:c6:
7b:5e:68:92:7f:63:2d:55:f9:12:0b:21:cf:47:b4:
0d:c9:5d:15:40:d4:b0:01:30:d1:c0:06:74:7b:b2:
70:f1:fb:f6:1b:ca:8d:88:88:4f:d0:c0:95:36:af:
e8:6e:bb:be:9e:b7:e5:ab:54:85:5c:d2:11:77:05:
a3:df:e1:0c:a1:37:fc:bd:f2:2d:66:b1:15:19:a3:
92:a8:a9:ee:4f:b6:b6:57:5b:33:a4:e9:17:40:14:
97:bd:64:4e:21:3a:e9:76:3b:88:66:e6:2d:af:7a:
54:bd:50:32:b3:26:ba:fa:46:0b:7f:bb:dd:f6:ad:
6b:a0:bc:2d:e9:9b:7a:d3:c6:1e:cb:25:4c:3a:33:
b1:04:05:76:ba:22:6e:2c:cc:b4:b9:d3:ed:85:48:
2c:60:be:8b:9b:51:d8:eb:2e:e5:3d:c4:f4:25:79:
7e:5e:4d:01:d4:bf:65:36:3d:dd:57:25:55:61:9f:
e3:41:d0:89:d5:13:25:05:5d:e5:ad:ac:44:48:bc:
34:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:9A:A2:B4:8D:64:40:AE:79:5E:0A:8A:B1:1C:8E:DA:DA:5E:97:F0
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/g5qitI1kQK55XgqKsRyO2tpel_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:d22::/48
2a06:a005:150a::/48
2a06:a005:1550::/44
2a07:54c2:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
11:2a:e9:c5:de:91:2b:89:82:70:8c:e4:22:29:eb:08:fb:d4:
6f:72:0c:06:fd:af:6b:d8:ee:d0:2f:6d:5b:16:13:29:df:c6:
7d:74:25:b3:c5:a6:5f:ab:34:2b:48:b5:e8:cc:ea:7d:36:d1:
38:9e:a5:85:69:ad:5a:d0:d6:a5:7d:43:98:fc:09:a9:70:6b:
b6:48:9c:e5:2a:35:ea:70:7a:f3:af:3c:59:4d:84:97:97:47:
8d:4d:08:65:d2:b5:23:34:cc:9e:11:81:13:16:27:dd:d3:3e:
59:48:a4:45:64:c2:d9:07:e0:0a:42:cf:df:af:ab:76:d6:24:
9e:8b:c3:ef:ac:5c:20:3e:5d:8c:75:ad:87:1e:a1:4e:31:70:
e0:b6:6c:65:8f:aa:5b:e8:df:d9:a5:4f:27:a8:ba:bc:a6:1f:
8e:d7:29:35:79:7e:ec:d1:f6:62:60:61:19:58:e8:74:0f:c2:
31:45:88:32:9d:c2:2b:fd:be:d4:f7:fc:97:2b:6c:e4:01:74:
08:e0:b8:0e:5a:c5:63:89:c9:23:f8:30:12:a2:e3:28:a7:38:
4f:8b:32:4b:78:86:b4:bb:56:35:ae:f5:22:1c:92:61:70:e3:
c1:00:aa:18:85:94:41:bd:5c:4e:aa:32:9f:9d:ce:3b:7c:25:
4b:f6:39:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:21:09 2025 by rpki-client