Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/jY-NzNXKKoHWWg9lU8UH3BuaBzg.roa
File: jY-NzNXKKoHWWg9lU8UH3BuaBzg.roa (raw, json)
Hash identifier: YfouLwDErpZwmZaDS3JyJi1piICuvapl5ZCIxeoOw4g=
Subject key identifier: 8D:8F:8D:CC:D5:CA:2A:81:D6:5A:0F:65:53:C5:07:DC:1B:9A:07:38
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 17C4FADA
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/jY-NzNXKKoHWWg9lU8UH3BuaBzg.roa
Signing time: Wed 06 Apr 2022 11:09:47 +0000
ROA not before: Wed 06 Apr 2022 11:09:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200681
IP address blocks: 2a06:a005:1c::/46 maxlen: 48
2a06:a005:400::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 398785242 (0x17c4fada)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Apr 6 11:09:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8d8f8dccd5ca2a81d65a0f6553c507dc1b9a0738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d6:1a:34:41:ba:3d:70:f6:f2:04:26:c3:ee:
9b:e9:e5:4d:7f:f1:50:a6:f8:8b:70:79:d5:71:11:
1e:a4:f9:1c:c0:ef:cd:a3:29:bc:41:d4:00:60:b4:
63:4e:ff:82:be:8f:b7:fa:bb:e7:a6:b8:cd:83:e0:
a8:4f:97:5c:21:a0:2a:96:c3:60:2e:fc:52:67:b9:
e6:7d:4a:d4:ff:ea:64:b7:e3:bf:67:4a:db:cc:ce:
d8:6d:33:5c:3b:67:8d:30:f8:10:84:a5:6d:2e:c0:
71:62:52:ab:b7:32:12:8d:87:11:bd:c9:7d:3a:41:
f9:f6:27:5a:2c:57:ae:ff:3b:28:65:ce:af:d6:b5:
e3:4c:2c:fc:55:71:0d:55:a8:6a:22:1e:ec:0d:c8:
d0:75:89:09:02:99:ad:10:ae:98:5f:d6:53:53:66:
9c:44:e9:e9:9d:37:45:f4:80:03:22:06:1b:f3:1c:
27:6e:5d:3a:85:54:12:40:86:1a:0a:ff:a4:00:00:
72:aa:bd:80:b0:5b:42:38:b9:ad:b3:df:c8:4a:58:
18:03:6a:96:dd:6f:88:77:87:b9:d9:79:cb:fc:e1:
ac:71:f3:7e:7d:a1:17:74:db:62:83:96:e6:13:ef:
47:0a:ae:a5:7d:76:10:86:37:f1:ec:fb:03:fc:99:
1a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:8F:8D:CC:D5:CA:2A:81:D6:5A:0F:65:53:C5:07:DC:1B:9A:07:38
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/jY-NzNXKKoHWWg9lU8UH3BuaBzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1c::/46
2a06:a005:400::/44
Signature Algorithm: sha256WithRSAEncryption
67:35:32:63:6b:0e:96:83:ab:70:2e:fb:5f:ae:d9:15:d9:ac:
ef:64:01:f5:d2:1c:78:9d:d5:10:39:96:b9:66:e0:f2:96:1e:
24:d2:6c:be:8c:fb:31:a7:0a:fc:ba:6b:5b:40:f4:97:1e:61:
7e:f9:40:17:ad:5a:4f:df:8f:00:3d:1e:c0:80:7b:f4:6f:0b:
96:43:f8:a5:bd:f3:70:af:db:96:69:06:e4:db:16:c7:82:47:
ed:5f:d4:a4:1b:74:2f:ce:fb:0c:9d:96:14:66:0d:f9:33:75:
4c:42:4f:67:06:d0:19:66:0d:8f:d5:f3:77:48:02:9f:71:07:
81:28:eb:4d:ba:5d:85:81:8c:fd:7e:c4:d6:67:a4:97:49:c9:
06:94:ee:84:4f:ff:92:f4:d6:2f:07:a3:05:2e:b0:f8:be:c6:
0f:ee:93:86:ce:93:49:d0:1e:81:70:86:6a:87:78:4c:2e:3c:
53:2b:21:ef:f3:76:ec:b1:37:db:c0:7b:96:6d:ca:ba:50:51:
2d:d7:7b:ec:8f:90:88:f1:30:78:2e:61:5f:3c:c8:44:c1:d9:
93:a7:f7:23:1c:55:87:cc:b8:90:00:da:b8:81:82:2a:73:09:
cc:cd:e5:91:a6:03:d5:ac:ec:cf:72:28:69:a3:8c:59:be:54:
3f:09:63:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 03:32:08 2025 by rpki-client