Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/mMuiEgGp-vkiYo_3frynCBfXZWo.roa
File: mMuiEgGp-vkiYo_3frynCBfXZWo.roa (raw, json)
Hash identifier: FLjR2lirRZ7ZQeZVx+6MsPoaUFXvl5qIXmfKUp6+qH4=
Subject key identifier: 98:CB:A2:12:01:A9:FA:F9:22:62:8F:F7:7E:BC:A7:08:17:D7:65:6A
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0182A47D17E9DB0C2838A0CEA46583F60964
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/mMuiEgGp-vkiYo_3frynCBfXZWo.roa
Signing time: Tue 16 Aug 2022 02:30:37 +0000
ROA not before: Tue 16 Aug 2022 02:30:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44570
IP address blocks: 2a06:a005:4::/48 maxlen: 48
2a06:a004::/32 maxlen: 48
2a06:a000::/32 maxlen: 48
2a06:1280:1000::/36 maxlen: 48
2a06:a003::/32 maxlen: 48
2a06:a005::/32 maxlen: 48
2a06:a005:a::/47 maxlen: 48
2a06:a005:43d::/48 maxlen: 48
2a06:a005:5::/48 maxlen: 48
2a07:54c2:b00b::/48 maxlen: 48
2a06:a005:6::/48 maxlen: 48
2a06:a005:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:a4:7d:17:e9:db:0c:28:38:a0:ce:a4:65:83:f6:09:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Aug 16 02:30:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=98cba21201a9faf922628ff77ebca70817d7656a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ce:ce:ba:4c:e9:37:5b:1a:6a:66:d1:52:0d:
7e:bc:7b:cd:8e:05:f5:a6:7c:77:5e:f1:8c:73:19:
a9:9c:1f:98:38:f0:01:8f:d7:33:cf:ea:de:ea:d6:
c5:1f:02:2d:00:38:e4:04:ec:b0:f9:50:da:8d:d8:
34:68:ca:32:45:11:b0:68:16:c2:c1:b4:0c:d5:bf:
5f:f5:be:ec:e6:98:ef:d2:ca:56:79:fc:bb:21:fd:
e6:cc:68:c3:3b:4e:db:60:4f:ac:6d:99:a8:92:89:
2b:29:62:69:38:11:01:7a:28:3c:f7:6e:21:2c:d2:
08:c7:ec:16:96:2c:7d:b3:1f:58:a8:ae:8c:56:5e:
bc:bb:38:92:4c:d6:aa:22:0b:c9:de:6a:dc:2b:52:
e5:b8:84:4d:58:51:a3:c4:d2:8e:67:eb:91:4c:d1:
77:88:16:ae:58:c7:5a:0a:82:61:10:04:bc:5a:84:
ee:dd:ea:a4:aa:5d:99:64:a1:d6:48:c1:d9:c8:e6:
76:9a:ec:f8:ba:5d:c4:a5:3f:c7:46:89:7e:02:83:
32:46:7e:5f:cc:7b:dc:67:44:c6:6b:15:c8:39:33:
b7:b7:31:7b:64:f2:62:17:d5:9e:90:09:20:f6:ed:
fe:dc:11:4c:ab:dc:eb:49:1a:f6:54:89:7c:ee:56:
1b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:CB:A2:12:01:A9:FA:F9:22:62:8F:F7:7E:BC:A7:08:17:D7:65:6A
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/mMuiEgGp-vkiYo_3frynCBfXZWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1280:1000::/36
2a06:a000::/32
2a06:a003::-2a06:a005:ffff:ffff:ffff:ffff:ffff:ffff
2a07:54c2:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
5b:2d:be:16:0a:5c:06:be:6b:28:9b:ab:8c:ed:d3:26:c8:b7:
1f:e1:3a:62:54:50:6d:69:3a:8c:fb:cb:f5:0e:43:1d:ca:e3:
77:d0:de:f8:bf:77:85:b1:bb:24:4d:88:ac:c0:26:e9:06:f3:
e3:3d:a8:bc:54:c1:50:77:61:ca:b4:2f:11:96:4e:c5:6c:fb:
21:7f:a5:12:d2:90:8c:00:b6:99:04:cf:54:1a:e7:0c:90:c5:
07:38:0e:f9:4c:8d:6f:5e:05:a3:91:9c:73:a5:ee:39:c8:f1:
f9:68:52:b3:09:86:6b:bc:a0:f8:6e:1d:6b:02:54:da:8b:01:
99:e1:25:15:7d:eb:51:74:73:f0:1e:b9:a1:9a:c5:d4:2d:f8:
06:35:8f:3b:99:8f:30:f9:44:8f:a4:6e:98:36:08:0a:9f:ef:
e3:97:28:09:33:ee:79:31:8c:ed:42:39:31:2d:9b:a4:bb:f0:
8e:74:0c:db:9c:8e:7e:df:ad:9f:8d:8b:d8:b3:54:d4:3f:cd:
5f:16:91:a8:42:bf:1c:e6:35:eb:c2:6f:8a:7d:ce:29:23:ea:
c0:a2:83:33:78:b7:20:17:12:c9:34:ce:ce:c5:a8:09:ec:23:
37:d7:d6:f5:a8:08:72:07:5a:cb:5f:e1:96:10:ea:bc:d4:f7:
ae:08:69:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:09:40 2025 by rpki-client