Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/kiLBNelccNId7wZMVmbPudLP8pU.roa
File: kiLBNelccNId7wZMVmbPudLP8pU.roa (raw, json)
Hash identifier: WsJTh3foZlaeDhHRWYtVn+d1m63oGJhSz17XlzH7EW4=
Subject key identifier: 92:22:C1:35:E9:5C:70:D2:1D:EF:06:4C:56:66:CF:B9:D2:CF:F2:95
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01828FF434FAC7B4624F453D9D5F7632C084
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/kiLBNelccNId7wZMVmbPudLP8pU.roa
Signing time: Fri 12 Aug 2022 02:48:42 +0000
ROA not before: Fri 12 Aug 2022 02:48:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61228
IP address blocks: 2a06:a005:5ad::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:8f:f4:34:fa:c7:b4:62:4f:45:3d:9d:5f:76:32:c0:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Aug 12 02:48:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9222c135e95c70d21def064c5666cfb9d2cff295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e9:50:88:ce:cb:b2:dd:7a:52:83:28:98:e9:
59:43:1e:de:c7:75:d7:96:18:b5:e0:48:99:c1:c5:
65:7b:cc:fb:21:69:33:62:71:60:89:ea:16:8d:22:
43:60:1d:8b:fa:6a:0a:c7:00:ce:e9:f9:0c:76:b6:
5d:19:06:4e:8f:39:1a:50:e0:4f:4a:5b:46:d9:44:
22:26:25:6f:80:3c:44:44:bd:1f:4b:49:7f:e1:fd:
66:a6:50:ac:d3:de:8e:59:61:31:3a:11:98:44:18:
3e:8c:75:b0:dc:7b:53:85:b5:ba:09:d2:6c:6a:51:
c5:af:2c:33:34:77:82:ce:f0:13:66:f2:35:05:26:
4a:67:64:6b:03:38:6c:a2:84:dd:50:e3:e9:32:27:
00:ef:49:76:a3:03:53:a8:82:80:9b:4f:46:9c:2e:
ff:a0:2f:d7:f0:cf:3d:51:17:8c:cd:41:73:ae:ee:
4e:c0:42:f2:57:2c:c8:46:dd:83:4d:bf:b1:7f:62:
b9:d8:f1:b2:d6:f0:4d:b8:bb:d1:59:50:ea:df:4f:
2a:f0:82:80:cb:d2:67:14:e4:0a:89:ae:b3:14:da:
ec:a9:91:b9:0c:ed:33:d0:eb:d8:7c:24:bc:59:f0:
85:85:eb:75:d9:26:21:c1:c8:18:b4:7e:20:41:fe:
75:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:22:C1:35:E9:5C:70:D2:1D:EF:06:4C:56:66:CF:B9:D2:CF:F2:95
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/kiLBNelccNId7wZMVmbPudLP8pU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5ad::/48
Signature Algorithm: sha256WithRSAEncryption
60:94:21:e8:94:fc:c8:eb:67:07:6c:26:c6:69:b7:85:a1:0f:
2c:67:46:0d:e5:bc:d8:db:a1:2a:50:eb:8e:45:68:e4:62:9a:
fe:0d:e2:0f:a9:27:b4:9e:8e:7f:64:9e:19:ac:de:31:47:b2:
9c:07:b4:10:e9:32:c9:22:17:b5:42:21:40:5b:e6:50:3a:12:
b8:af:73:a2:b5:b5:48:e6:7b:f2:12:f4:c7:84:cc:2e:dc:b9:
d1:1e:55:b0:37:33:07:a1:94:0c:59:46:ea:5e:5c:15:32:ab:
0a:0c:64:d2:ac:f0:6c:46:55:6f:bd:0b:ae:b0:26:7e:8e:f3:
38:7e:71:a6:70:41:c6:a8:f6:39:76:22:83:fd:56:4e:3c:cf:
0b:40:af:2b:1d:a1:e8:93:90:78:9d:1c:cc:a1:35:27:25:38:
eb:09:4f:ed:7e:49:70:82:8c:0e:00:6f:55:2b:d0:1b:17:ff:
07:16:30:ae:ec:10:26:23:18:26:f9:71:83:15:b8:f0:a2:89:
5b:f0:60:bf:a8:2d:5f:4e:e8:dd:e2:40:38:80:61:c1:35:e7:
8c:0e:df:9b:3f:d4:09:9b:05:95:28:9e:4a:55:61:20:7a:d2:
84:fe:f5:6b:56:04:8b:2f:45:1c:aa:37:77:86:59:32:00:49:
67:57:e9:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:10:59 2025 by rpki-client