Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/gBVxNEvrEME30SjXtIGgcoC8qoc.roa
File: gBVxNEvrEME30SjXtIGgcoC8qoc.roa (raw, json)
Hash identifier: iCWDl3iZcneVaYh+W0EgKCy2Rb+jt+izc/NTkhmveNY=
Subject key identifier: 80:15:71:34:4B:EB:10:C1:37:D1:28:D7:B4:81:A0:72:80:BC:AA:87
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01830908ED92301B927EAB285CCA272B95DB
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/gBVxNEvrEME30SjXtIGgcoC8qoc.roa
Signing time: Sun 04 Sep 2022 15:05:23 +0000
ROA not before: Sun 04 Sep 2022 15:05:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210320
IP address blocks: 2a06:a005:1b60::/44 maxlen: 48
2a06:a005:d80::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:09:08:ed:92:30:1b:92:7e:ab:28:5c:ca:27:2b:95:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Sep 4 15:05:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=801571344beb10c137d128d7b481a07280bcaa87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a3:d5:8c:b3:e4:06:03:35:c3:ed:ec:66:ec:
a7:dd:ea:9e:42:5a:17:6d:e2:75:91:fa:fa:ed:57:
9f:47:59:17:99:d2:57:60:7b:54:6b:83:32:01:eb:
6e:ed:69:07:c3:f1:aa:63:6b:8b:64:c9:52:f7:0a:
91:07:1a:78:9c:82:93:b7:d8:3a:8e:17:e4:df:d7:
21:e8:96:ab:a0:31:c4:e3:ee:4b:03:3d:a3:aa:64:
23:40:c4:89:ec:ef:75:3d:b0:68:18:8e:09:92:bb:
53:0e:fc:49:68:57:ac:27:0e:2c:08:d3:95:5e:c7:
48:70:b8:8a:3a:f7:e6:46:f0:15:28:13:ee:6d:9e:
89:ef:4b:e6:cb:4f:0c:5e:d4:6f:4a:26:73:f7:d0:
2e:51:6f:be:f8:86:54:dd:49:26:51:d2:16:fa:08:
20:e2:52:cd:43:e3:99:fc:81:81:fb:e0:e9:86:f2:
da:7b:f9:c7:3f:b7:06:1b:bf:82:b6:b2:18:47:e2:
21:18:99:3f:17:ca:85:ce:7d:de:85:b7:e0:4c:9e:
5c:4d:71:ec:d1:4f:ab:02:9b:5c:3f:3f:20:7c:62:
ad:ec:7a:0d:c4:5f:32:41:92:ac:f8:d6:9a:77:06:
3b:dc:66:be:54:54:fd:9c:f4:d8:61:f9:25:a6:16:
1e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:15:71:34:4B:EB:10:C1:37:D1:28:D7:B4:81:A0:72:80:BC:AA:87
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/gBVxNEvrEME30SjXtIGgcoC8qoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:d80::/44
2a06:a005:1b60::/44
Signature Algorithm: sha256WithRSAEncryption
73:4b:51:7b:f1:d5:43:52:c6:0e:35:7f:a8:b0:1d:b4:2b:31:
01:19:8f:ee:79:63:af:2f:f5:90:19:11:b3:9f:0b:f0:1f:9e:
02:3e:93:5e:fd:af:4e:69:f9:e0:9d:f4:45:22:02:74:2d:0a:
69:de:a1:73:99:ee:7f:e7:de:21:e2:06:e2:4e:44:fa:31:46:
8b:1e:e0:dc:bd:e9:90:02:dc:62:d8:ff:56:f1:bd:49:6d:8b:
20:58:7d:0d:d5:8e:02:e6:42:e0:0d:51:7e:ce:4a:95:1c:56:
60:bc:b5:aa:4e:ed:1f:f2:3f:2c:d5:d7:da:87:c6:69:7b:b3:
c1:31:cb:e2:a1:8d:1d:57:e0:06:2b:65:de:f3:a2:99:15:01:
49:c2:0b:a7:8d:8d:f6:01:df:b7:b1:25:a4:67:99:bb:fc:a1:
38:5f:15:d9:b8:c3:92:65:2d:8e:d1:19:f2:89:41:53:cf:ab:
43:43:d1:7c:22:64:38:05:6c:3a:8c:51:15:ec:a3:9a:1f:34:
ed:74:53:86:03:d2:b8:a1:d6:fa:2d:82:38:4f:b8:d3:1c:e2:
f0:31:41:e6:11:e3:49:70:b7:06:60:99:e5:6a:34:13:a6:9f:
87:a7:c1:9e:33:5d:0c:84:3b:40:db:fa:ee:97:49:73:c7:6f:
7a:d6:a0:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:38:17 2025 by rpki-client