Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ifrd6B4ZF3oCC4LvyBoN0FiSsA0.roa
File: ifrd6B4ZF3oCC4LvyBoN0FiSsA0.roa (raw, json)
Hash identifier: mjU3xwMNxwN1gfYntRFVMkO3rXYbvvb3k4FARciNPkc=
Subject key identifier: 89:FA:DD:E8:1E:19:17:7A:02:0B:82:EF:C8:1A:0D:D0:58:92:B0:0D
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0183D611412B5B0044C2B934CF695E5A6B99
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ifrd6B4ZF3oCC4LvyBoN0FiSsA0.roa
Signing time: Fri 14 Oct 2022 10:36:38 +0000
ROA not before: Fri 14 Oct 2022 10:36:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202828
IP address blocks: 2a06:a005:43c::/48 maxlen: 48
2a06:a005:17a0::/44 maxlen: 48
2a06:a005:2dd::/48 maxlen: 48
2a06:a005:bae::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d6:11:41:2b:5b:00:44:c2:b9:34:cf:69:5e:5a:6b:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Oct 14 10:36:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=89fadde81e19177a020b82efc81a0dd05892b00d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:42:c5:9d:a6:38:c9:15:0a:5e:29:27:72:b3:
6e:ce:44:4e:fb:62:2f:38:a9:bd:66:e0:48:a4:df:
cc:78:6a:1c:6b:20:41:5e:e5:ff:73:c2:d1:ad:3c:
d4:4b:bf:0b:a0:2d:98:9f:c2:8d:32:86:27:54:f4:
73:54:ab:e1:e2:5a:e7:9f:cb:a8:f9:2a:4b:8d:bc:
90:5e:77:6c:a0:db:fd:b5:c9:bf:b1:0d:94:ba:a2:
09:e7:5f:47:26:1b:a8:ca:78:13:3d:cf:bc:89:b1:
43:55:d3:f3:c6:41:a6:91:52:6b:43:1c:eb:d9:1d:
a1:6c:a4:32:dd:8d:00:f6:50:44:d1:80:d2:f4:27:
e8:d2:d1:a3:08:ed:1e:39:f1:a8:f2:d4:a7:13:dd:
df:fe:62:6c:ce:cf:41:5e:52:c2:d7:14:38:9b:84:
5d:86:c1:26:18:dc:ec:cb:97:7d:f7:0c:40:9f:02:
0d:7b:f3:aa:84:ca:98:86:08:64:28:93:70:8b:cb:
a8:06:ec:6c:a2:d5:be:16:e1:40:57:b4:c8:93:09:
75:00:6a:ae:c6:ef:8a:6c:ac:34:20:4a:ee:7f:52:
32:02:5b:0d:a2:e1:92:4a:cb:06:3d:28:0d:4a:22:
4d:94:3d:84:f9:18:d2:7a:80:69:d2:8b:de:15:6e:
99:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:FA:DD:E8:1E:19:17:7A:02:0B:82:EF:C8:1A:0D:D0:58:92:B0:0D
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ifrd6B4ZF3oCC4LvyBoN0FiSsA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2dd::/48
2a06:a005:43c::/48
2a06:a005:bae::/48
2a06:a005:17a0::/44
Signature Algorithm: sha256WithRSAEncryption
5c:b4:13:81:fa:57:9e:7d:8b:e5:8d:17:01:51:a3:5f:9f:b8:
57:a8:2b:f1:dd:d7:3b:2e:77:0e:c7:50:d3:e5:55:fa:b3:de:
ed:8b:d9:de:f3:b5:46:8c:9f:aa:2a:e5:29:90:ed:c3:a4:ca:
a9:c5:6f:1c:80:64:16:70:35:79:df:19:2c:ac:6f:f2:20:4a:
f9:55:6c:df:47:c0:cd:21:d8:9d:7b:fa:8a:25:4d:a2:b9:1b:
f5:65:e9:f0:6d:c8:b5:40:ea:13:c2:a2:94:72:87:3c:12:ea:
e8:d9:4a:45:e9:36:fb:59:1e:5e:75:83:4e:de:a7:30:71:9f:
38:b9:1d:3a:84:01:21:5a:da:d6:1e:f7:33:ad:a0:bb:4c:eb:
81:0b:02:e2:28:a1:cc:85:f3:39:22:9d:18:05:0d:2c:bd:30:
44:62:0b:7b:cf:ab:37:e4:1c:1c:8d:23:f9:35:a0:30:c5:1b:
34:44:f2:ab:0a:4b:b4:40:d2:51:89:29:20:95:5e:8d:f3:d3:
f7:b7:af:8b:68:e6:77:f3:71:53:ea:8c:38:2c:39:0b:79:98:
72:3c:11:c2:62:80:7f:ba:ce:80:79:cc:ac:f6:bb:d9:b4:19:
78:c1:32:ee:3c:2f:af:bd:65:10:2a:ed:5b:b2:0c:24:10:97:
ee:f5:d7:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:06:57 2025 by rpki-client