Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/l4Ef9TJ3_w4ULomaIfpylvvFaTs.roa
File: l4Ef9TJ3_w4ULomaIfpylvvFaTs.roa (raw, json)
Hash identifier: 3fGKv2G6o2yzPjJxkxZQMtbS6Nos7UxiMFrTPaXPaOE=
Subject key identifier: 97:81:1F:F5:32:77:FF:0E:14:2E:89:9A:21:FA:72:96:FB:C5:69:3B
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 19B01880
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/l4Ef9TJ3_w4ULomaIfpylvvFaTs.roa
Signing time: Tue 10 May 2022 12:32:03 +0000
ROA not before: Tue 10 May 2022 12:32:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 149506
IP address blocks: 2a06:a005:8d0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 430971008 (0x19b01880)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: May 10 12:32:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=97811ff53277ff0e142e899a21fa7296fbc5693b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:df:a9:a3:31:8b:dc:73:c1:0b:7d:03:cf:fd:
5e:f9:07:e0:f8:3b:92:83:ad:13:15:72:9b:85:53:
1e:f5:ed:01:18:71:c0:e8:fb:1b:a9:e5:70:ae:28:
f3:98:8a:ff:f6:4c:02:be:80:96:8e:3d:d9:da:f7:
93:ce:5b:4b:f1:57:59:f9:f4:de:09:1e:51:ef:49:
ea:3e:e1:e5:09:e0:bb:17:6a:57:02:47:33:65:63:
f0:d7:04:6e:12:28:bb:a7:43:8c:3b:a7:c9:3b:35:
74:d4:cb:65:a4:83:08:a9:44:bf:92:b2:34:65:66:
78:ad:95:c5:c9:e8:53:84:05:94:03:09:b6:b6:11:
5e:c6:88:17:5e:0f:41:a8:94:d4:ed:b3:63:19:04:
85:37:fa:5c:f2:f8:a4:34:05:95:9e:5b:49:16:b6:
b0:a0:e0:17:95:50:c2:19:2e:dc:46:12:d6:50:2d:
87:77:5c:04:61:1e:f4:2a:54:57:ff:c5:19:b3:f0:
78:17:b1:bc:69:01:d9:53:d2:f6:b9:4b:66:ce:c6:
8f:b6:50:86:aa:51:2c:c7:3e:3a:04:58:fb:ac:ca:
1d:fe:1e:00:55:78:05:50:e3:29:54:99:49:40:a1:
2d:0c:c0:36:e3:46:85:9b:b6:3b:ce:66:81:bb:40:
e3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:81:1F:F5:32:77:FF:0E:14:2E:89:9A:21:FA:72:96:FB:C5:69:3B
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/l4Ef9TJ3_w4ULomaIfpylvvFaTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:8d0::/44
Signature Algorithm: sha256WithRSAEncryption
7c:f9:6d:f2:d3:e9:e9:be:96:66:55:10:ef:82:2c:37:3e:5c:
f2:ed:00:dc:b2:9e:18:9f:e6:b8:bb:7e:f3:cc:a8:d5:53:93:
c4:84:5b:6c:29:d3:1c:c0:ac:47:91:41:fe:4d:26:d6:b8:32:
03:eb:dc:94:29:8f:b6:d9:7c:1e:33:cd:3d:41:a8:ad:18:42:
ed:11:cb:1d:c2:86:1a:09:78:e7:b9:58:be:59:38:a5:1d:f5:
e2:82:70:a7:97:34:08:2c:7a:66:9f:fe:2b:0d:11:2f:59:1e:
73:53:d3:bc:32:7d:62:62:fe:5c:24:22:b2:d8:f7:35:03:9b:
4b:62:b0:1a:39:a9:7a:11:bf:f6:83:6a:97:f1:16:bc:f4:ce:
96:d7:84:7f:78:cf:66:cd:83:42:de:12:b7:6f:2b:75:6e:25:
79:e6:1f:5a:9b:02:a2:d7:3e:aa:4b:5a:c9:42:fb:86:7c:29:
ab:22:4f:b6:57:96:9b:6a:5d:cc:45:c9:0d:d4:49:c4:93:73:
94:10:17:c2:1d:8b:e8:d4:07:97:b8:be:70:12:84:9d:af:42:
6b:09:fe:6d:3f:f5:27:51:00:3e:bb:9b:bb:0c:09:a2:12:d1:
5f:fd:d0:5e:c7:0b:7f:15:c5:c8:f0:7e:4c:99:b3:4e:11:34:
9b:5e:3a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 09:59:34 2025 by rpki-client