Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/mWiJgjziUordbTonySBW-JIurcA.roa
File: mWiJgjziUordbTonySBW-JIurcA.roa (raw, json)
Hash identifier: gyoRSJJXjNwZTntyTZ/YgtTzJ9PUikJbzX/rhzqVh28=
Subject key identifier: 99:68:89:82:3C:E2:52:8A:DD:6D:3A:27:C9:20:56:F8:92:2E:AD:C0
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01824B3ECFFD1DDFDD63A8536747F93097B8
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/mWiJgjziUordbTonySBW-JIurcA.roa
Signing time: Fri 29 Jul 2022 18:36:23 +0000
ROA not before: Fri 29 Jul 2022 18:36:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210013
IP address blocks: 2a06:a005:1510::/44 maxlen: 48
2a06:a005:490::/44 maxlen: 48
2a06:a005:1460::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:4b:3e:cf:fd:1d:df:dd:63:a8:53:67:47:f9:30:97:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jul 29 18:36:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=996889823ce2528add6d3a27c92056f8922eadc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:98:bf:39:57:d8:fa:f4:e1:6c:22:88:30:10:
d6:80:fe:db:d9:35:8b:1f:8b:ef:4e:26:53:8a:f5:
2e:1e:29:17:9a:c9:53:2f:f8:c9:57:d0:eb:79:e9:
2a:46:0c:6c:86:da:b1:2a:22:39:c8:55:d7:dc:a3:
a3:7e:a5:7b:ea:9c:a8:26:c1:cf:45:0b:f5:0e:a7:
5f:36:b7:b5:ba:6b:da:86:29:46:24:2b:ed:6e:0a:
0f:08:b2:6c:34:f1:40:b8:c4:f1:10:8b:50:50:f8:
00:95:4c:de:85:0b:da:9b:ad:79:09:b2:e6:a7:cd:
b3:c7:0f:25:c5:26:61:09:e1:7d:36:ba:b5:b9:d3:
fa:e1:9d:d2:43:54:e8:04:0f:63:f3:6e:8a:f8:87:
57:68:9f:f6:37:0a:44:54:b1:b5:6b:ca:39:a8:05:
99:8e:98:cb:c1:d4:9c:8a:db:01:ef:11:fd:44:e7:
41:ba:0f:de:9e:b7:be:9a:c5:3f:88:6a:54:a5:a6:
3e:e0:00:24:29:28:ab:ca:75:42:b6:b7:ca:3b:dc:
d5:f2:54:6a:7b:31:b1:d1:16:1b:95:16:c4:a1:c4:
77:2b:68:50:aa:a5:82:22:b3:7c:93:3a:f8:2d:d7:
d8:89:fe:d7:cd:a6:58:a5:28:86:66:f5:01:34:ef:
81:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:68:89:82:3C:E2:52:8A:DD:6D:3A:27:C9:20:56:F8:92:2E:AD:C0
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/mWiJgjziUordbTonySBW-JIurcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:490::/44
2a06:a005:1460::/44
2a06:a005:1510::/44
Signature Algorithm: sha256WithRSAEncryption
65:97:83:a1:b9:fe:3c:39:97:d1:09:c6:cb:7c:60:b6:65:90:
83:4c:05:f5:46:0b:ad:63:a9:9b:2d:e9:6d:5e:99:50:f9:a9:
ed:4a:4a:46:30:a7:95:fa:1c:b3:29:f4:1d:54:4a:56:b5:a5:
dc:d3:63:7b:5a:65:c7:79:8a:4c:bd:87:bc:c4:1f:c3:95:47:
d2:fc:7a:6e:cb:a0:5e:99:3f:a7:87:1c:42:44:5d:75:e1:ce:
76:cb:3c:31:44:af:04:e8:9a:53:38:79:bd:e7:b0:f5:dd:d6:
7b:49:ce:7a:6d:82:aa:09:02:50:b0:8c:ad:7a:77:3b:e9:93:
2a:30:33:2d:e5:24:c5:b6:8d:bc:f0:1d:72:d5:79:22:13:00:
f7:b2:79:f0:a6:6a:e5:b9:b3:83:c5:50:6f:b1:fc:a9:4a:18:
ba:39:f5:bd:fc:7d:48:ea:32:78:c6:be:81:f7:d3:24:d1:a8:
d5:ae:8e:86:c1:f1:37:b6:87:54:65:20:10:ab:22:75:9e:62:
6d:3c:06:b9:04:0d:16:2b:67:05:27:7f:74:eb:62:24:3c:cf:
06:60:f9:f5:ff:fd:ea:51:9d:ee:e7:3f:16:58:b7:de:3c:ba:
cc:34:92:ec:1f:28:39:71:90:00:34:d9:d5:25:56:e4:c8:fd:
eb:db:0c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 01:56:20 2025 by rpki-client