Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/kMmDl5MEVFqQexnk4rl8X03NNS4.roa
File: kMmDl5MEVFqQexnk4rl8X03NNS4.roa (raw, json)
Hash identifier: 0Zuvj0bsgYsfD2b0K5qNj9qyum1QH1Z/9N7Kr83bwPA=
Subject key identifier: 90:C9:83:97:93:04:54:5A:90:7B:19:E4:E2:B9:7C:5F:4D:CD:35:2E
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01831A24371499155134DBB4969F91A4D5DD
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/kMmDl5MEVFqQexnk4rl8X03NNS4.roa
Signing time: Wed 07 Sep 2022 22:48:44 +0000
ROA not before: Wed 07 Sep 2022 22:48:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202911
IP address blocks: 2a06:a005:1bc0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:1a:24:37:14:99:15:51:34:db:b4:96:9f:91:a4:d5:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Sep 7 22:48:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=90c983979304545a907b19e4e2b97c5f4dcd352e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:d5:59:57:f1:d0:d7:90:a0:f0:6a:09:0a:6b:
00:e9:45:45:cb:83:46:d0:26:aa:58:e7:2e:18:d0:
e4:37:c7:29:4a:dc:53:37:60:31:ef:ca:04:75:c0:
8a:35:4e:bd:37:da:bb:74:e0:b3:89:82:f1:83:4d:
e4:99:66:db:04:6f:01:d0:dd:40:31:04:e8:53:39:
23:da:b9:d0:35:99:ef:dc:d6:a0:98:03:16:45:b8:
97:09:80:9a:d2:d4:38:c1:4f:6d:af:6f:07:67:e2:
20:b2:ba:72:e9:ec:cd:e3:c6:60:29:ee:b5:34:62:
4f:1a:87:d8:b0:ee:96:d9:69:16:5f:4c:f5:c8:2e:
14:2d:bc:78:e6:a8:37:b3:9e:0e:2f:7a:08:5e:6a:
46:b2:f6:cd:bc:53:87:e8:34:58:e3:e9:c9:5d:ad:
41:ad:1f:81:61:01:d5:d2:2c:cd:b9:24:75:bb:6d:
7a:d2:9d:03:27:12:00:7a:c2:22:1d:06:c1:c4:ea:
61:45:e5:97:be:d4:ba:0b:bf:a1:0b:7e:cc:a0:af:
c8:e9:11:62:16:cf:9c:04:6a:d5:c7:d7:79:d2:1b:
aa:a6:07:0b:bf:7d:38:38:b7:40:c6:89:3e:e1:f2:
cd:9b:f3:50:69:e0:3d:36:0a:8f:f4:c2:0d:d8:0b:
12:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:C9:83:97:93:04:54:5A:90:7B:19:E4:E2:B9:7C:5F:4D:CD:35:2E
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/kMmDl5MEVFqQexnk4rl8X03NNS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1bc0::/44
Signature Algorithm: sha256WithRSAEncryption
77:e5:bb:f4:2b:e4:b2:59:ff:22:95:d5:40:5e:27:b3:25:6e:
5d:e1:7c:c1:7f:91:f2:f5:88:ec:18:94:0b:db:32:de:c4:56:
e3:b4:62:1a:b1:37:63:a9:58:31:24:c4:23:5b:4a:cc:44:f5:
7b:84:bc:d2:70:02:1c:17:13:37:74:13:01:28:5c:af:28:48:
38:b0:2d:2c:3e:f1:e1:a7:61:03:98:09:cc:d1:6f:b6:76:59:
c1:2d:af:e9:07:1c:8e:30:75:6e:41:0d:ed:df:9b:8f:7e:85:
f2:ce:18:85:7b:c4:98:bd:da:bc:66:a6:ed:c3:6f:fd:1a:62:
be:3f:5d:40:5a:83:3c:3b:7e:f5:4e:a6:da:1a:0d:70:19:44:
63:05:9c:3e:53:5b:8a:13:34:cb:f2:ab:50:72:d9:6c:68:ae:
b2:aa:ff:90:3d:17:d8:41:24:0a:19:f0:41:b6:30:c6:51:85:
1a:90:dc:f3:d7:f1:08:82:72:a5:cb:a4:b4:2b:9e:1a:59:9d:
94:00:af:0d:37:a0:36:59:b2:4e:20:45:e7:74:37:e2:72:47:
2c:c7:bc:0e:9d:d4:bd:a8:ae:df:e7:a2:97:88:08:f9:f3:70:
af:35:92:74:26:a9:81:fe:5b:b4:ad:54:3f:f6:98:56:12:83:
41:7f:a1:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 17:18:28 2025 by rpki-client