Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/is6ndYdWUfAbS_Ucub1-mssulPE.roa
File: is6ndYdWUfAbS_Ucub1-mssulPE.roa (raw, json)
Hash identifier: PF7GxtF0g3EJnux0W7GhW2pQkCLRic4D7TMkfNCc9ek=
Subject key identifier: 8A:CE:A7:75:87:56:51:F0:1B:4B:F5:1C:B9:BD:7E:9A:CB:2E:94:F1
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 1898C222
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/is6ndYdWUfAbS_Ucub1-mssulPE.roa
Signing time: Fri 22 Apr 2022 14:02:12 +0000
ROA not before: Fri 22 Apr 2022 14:02:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208223
IP address blocks: 2a06:a005:4de::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 412664354 (0x1898c222)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Apr 22 14:02:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8acea775875651f01b4bf51cb9bd7e9acb2e94f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3d:66:45:d7:b9:bd:72:72:2a:dc:60:e3:61:
dd:40:b8:36:02:22:e0:0f:bc:7e:a6:8e:a5:8f:71:
f4:5f:29:bd:7d:35:ff:db:a1:ec:f8:5e:e7:f1:e2:
4e:df:bf:1b:68:eb:13:02:30:f3:b3:36:15:62:e0:
47:75:33:d6:7b:40:85:09:24:ac:98:4d:cc:6b:89:
39:e1:ce:23:78:b3:50:56:2c:5d:f6:28:c2:51:f9:
eb:41:0c:48:ca:bf:64:a5:cc:44:3b:95:7f:1a:08:
1f:de:ca:3a:94:ff:5b:72:89:43:3d:07:30:59:0d:
85:5a:37:ca:e9:ed:d9:74:83:76:c2:d6:c8:26:3c:
f6:bf:7b:23:ef:20:a2:85:b5:f2:e5:ed:fd:0e:95:
a2:93:e4:77:62:8d:74:23:4f:5a:98:bc:49:67:a4:
8a:f6:81:cc:36:ca:eb:86:3c:41:8b:8d:4c:27:6d:
43:da:aa:a0:15:87:4e:61:3b:3c:06:36:de:52:15:
88:a1:1a:bc:49:c7:94:5a:63:98:90:81:c9:78:ba:
b3:2b:95:f8:dd:ef:ae:d8:51:d4:10:04:aa:6f:0c:
51:18:16:b3:d3:28:2b:e7:2c:63:cf:4e:45:9c:5c:
25:a5:18:98:49:a1:63:1f:c3:47:d0:8a:5e:22:c9:
8b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:CE:A7:75:87:56:51:F0:1B:4B:F5:1C:B9:BD:7E:9A:CB:2E:94:F1
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/is6ndYdWUfAbS_Ucub1-mssulPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:4de::/48
Signature Algorithm: sha256WithRSAEncryption
48:2d:9b:06:11:ae:03:71:27:f8:6c:c0:62:77:e1:00:fe:e5:
7c:03:b0:4f:5e:b2:20:c8:e2:15:57:76:3c:2d:0a:c7:b9:6f:
63:14:68:45:90:43:c2:19:bb:8b:62:6e:cb:c7:e7:3a:36:3a:
e7:cb:69:55:96:c2:1f:8b:7a:ce:cb:34:27:c9:f9:52:d7:b0:
2f:e0:86:87:15:50:9b:d5:06:60:91:f6:98:c0:5a:e2:30:63:
30:d2:18:e9:08:75:80:f2:80:d4:05:11:74:4d:57:c4:6e:21:
2c:e5:3a:9f:e5:a9:e8:09:53:76:39:52:dd:19:e0:c0:24:6c:
8f:a9:80:dc:7e:a0:50:70:c2:46:c6:1a:97:51:8c:da:5f:6e:
67:7d:d5:13:12:7f:b3:dd:f3:d2:ad:1e:2a:83:fa:50:45:02:
97:81:5f:ff:cf:d0:ad:81:b4:a0:86:fd:6a:ae:b9:94:16:b8:
ad:11:9a:c1:82:d0:a5:5a:a6:b7:2b:00:c6:5a:da:98:85:14:
7f:71:dc:dc:0a:b3:e3:d0:84:3b:fd:3c:52:70:a2:92:e7:9c:
05:71:50:15:f1:e9:56:96:d6:2f:50:26:b4:99:65:ce:dd:6b:
93:6a:64:43:61:7c:1e:5b:cd:db:02:9a:08:c5:6a:de:cb:9d:
b2:60:7e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 09:59:29 2025 by rpki-client