Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/iYjyVkdDEEW4emY5wzVCTUrdXxs.roa
File: iYjyVkdDEEW4emY5wzVCTUrdXxs.roa (raw, json)
Hash identifier: PKRSJrjm8bZEt46ItHQjUArmzp5gv8lYoAzrhzj08qg=
Subject key identifier: 89:88:F2:56:47:43:10:45:B8:7A:66:39:C3:35:42:4D:4A:DD:5F:1B
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0183F992D3768ECBED27365D09B497AC961B
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/iYjyVkdDEEW4emY5wzVCTUrdXxs.roa
Signing time: Fri 21 Oct 2022 08:04:52 +0000
ROA not before: Fri 21 Oct 2022 08:04:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202255
IP address blocks: 2a06:a005:1503::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f9:92:d3:76:8e:cb:ed:27:36:5d:09:b4:97:ac:96:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Oct 21 08:04:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8988f25647431045b87a6639c335424d4add5f1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ac:9e:89:ab:9f:eb:a8:62:5f:a7:81:07:52:
9d:eb:fd:bf:9a:2a:89:4a:02:61:61:24:fa:0d:f1:
20:b2:90:b1:36:5c:71:87:08:62:56:07:d9:40:35:
24:1e:4d:ca:d3:fb:21:1d:b6:1e:ba:f9:e5:e4:fa:
6b:f5:f4:29:75:86:1c:11:5b:99:91:50:4f:37:64:
db:87:8c:1b:eb:6b:59:11:eb:bd:a3:5e:6f:03:e3:
66:9b:a7:ed:96:75:84:5d:6a:c2:04:ea:3c:77:58:
8e:d1:94:d3:33:88:a9:ac:f3:8a:11:56:86:55:06:
d7:fe:0c:3b:7e:04:1f:d0:2b:27:cd:ee:44:42:65:
41:28:fb:16:ae:48:b2:b4:35:7c:46:9c:8b:54:8f:
a5:8c:48:05:3d:a6:47:d2:2a:48:a9:9e:c0:c3:44:
65:b9:34:2c:4d:1e:03:48:dc:3f:1f:4a:7b:0a:70:
06:6c:ae:4c:83:96:c1:4b:3e:58:a0:fc:ab:9c:7e:
cc:bf:14:95:c0:34:dc:ce:a7:bf:ce:45:b7:81:c2:
3d:6e:1c:e5:82:2e:20:57:fa:4a:00:c8:1b:10:a2:
b9:b5:d9:36:24:a4:ce:4b:43:60:08:02:92:f7:ec:
0b:59:cf:85:9d:23:2e:93:eb:e6:54:55:29:0c:51:
2f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:88:F2:56:47:43:10:45:B8:7A:66:39:C3:35:42:4D:4A:DD:5F:1B
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/iYjyVkdDEEW4emY5wzVCTUrdXxs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1503::/48
Signature Algorithm: sha256WithRSAEncryption
04:55:c9:f5:98:3d:db:e6:12:0e:36:d9:ed:56:9f:09:f3:e8:
c4:b7:aa:0d:34:87:41:a9:d0:16:d0:1b:90:e8:f4:e7:3a:4b:
38:ec:15:16:31:89:ad:c3:dc:5e:cc:f6:b7:48:b3:76:2d:56:
e3:f9:12:e2:43:a6:8c:1f:fd:cd:99:21:04:a8:6a:20:da:c6:
52:a3:5b:57:26:66:31:9d:f0:9f:a6:88:7f:e1:df:4f:1e:97:
4d:67:df:1c:c3:69:c2:ae:07:98:05:c1:5e:75:32:cd:00:5d:
3a:a7:68:b9:1e:a5:65:8f:e6:88:69:db:46:eb:73:0f:ef:db:
35:52:e5:1e:5f:12:fd:64:92:69:c4:8e:ee:89:6e:15:4c:e6:
5f:c5:5b:ae:83:75:42:a3:01:f6:a3:29:64:95:59:ab:b8:14:
e3:2e:4f:93:e6:e3:3b:14:96:2d:59:e5:93:52:13:84:bc:00:
25:78:e6:f9:3c:91:99:87:5f:fd:35:ed:3d:59:3e:35:70:93:
fc:70:b1:fd:3a:ea:f1:0b:12:fb:89:92:c7:ab:fc:07:8b:5a:
14:87:ff:ef:80:8e:7b:f6:b6:97:93:24:b3:7f:71:9f:dc:bb:
da:51:e8:85:eb:8d:1f:e2:f2:ab:91:f9:d9:bc:aa:7a:89:83:
04:e9:4d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:48:46 2025 by rpki-client