Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/mpwwyDGnTFvCNsPw9VaMf6AyC2c.roa
File: mpwwyDGnTFvCNsPw9VaMf6AyC2c.roa (raw, json)
Hash identifier: EBjPm6fvrq/pooFO+PWpgU7D9ebVTEchWdBVz0DJuNw=
Subject key identifier: 9A:9C:30:C8:31:A7:4C:5B:C2:36:C3:F0:F5:56:8C:7F:A0:32:0B:67
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 018272EF0B47D2AFE57C0FDFAD184CA48B84
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/mpwwyDGnTFvCNsPw9VaMf6AyC2c.roa
Signing time: Sat 06 Aug 2022 11:34:04 +0000
ROA not before: Sat 06 Aug 2022 11:34:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203472
IP address blocks: 2a06:a005:600::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:72:ef:0b:47:d2:af:e5:7c:0f:df:ad:18:4c:a4:8b:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Aug 6 11:34:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9a9c30c831a74c5bc236c3f0f5568c7fa0320b67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:1b:03:bd:08:22:1e:ee:ac:e2:30:3e:9a:1c:
10:8e:cf:f4:4e:c8:9f:fa:17:31:23:21:f9:58:4b:
a7:99:e1:d0:ca:aa:33:5a:05:ba:e9:fd:4a:a4:2d:
56:cc:aa:47:63:f5:bd:74:1a:70:b6:80:8c:5a:71:
75:da:2b:7d:80:63:c3:02:5e:de:1e:a5:f1:33:24:
16:23:06:46:91:77:fd:ec:9e:21:38:ff:5c:03:fe:
f1:f6:c3:33:bc:54:26:96:39:e2:64:33:19:77:b5:
a9:8a:8a:fd:00:06:4f:1b:d2:82:de:6d:96:0d:52:
d5:a7:9b:a0:e8:23:a6:80:45:e2:a7:ba:c3:79:89:
45:61:2c:00:04:47:26:bf:5e:fa:73:04:d2:45:73:
72:2d:6d:5d:65:6a:b1:d9:fe:6e:3f:d4:f9:e5:19:
01:5b:8c:f6:5d:a1:47:46:45:20:4b:7b:78:54:3f:
d4:c9:c5:7e:5b:8d:df:5a:09:e9:07:0a:3a:48:9f:
52:85:17:2d:24:24:6c:50:52:ed:06:1d:52:7a:03:
d3:55:19:88:19:82:a0:f3:e4:fd:4a:70:dc:9c:e4:
0c:1d:cc:0c:d6:7e:78:7b:83:cb:9c:8e:f0:73:35:
aa:a4:b4:01:fb:9f:a0:0e:ad:1c:1c:bd:c7:58:6c:
0a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:9C:30:C8:31:A7:4C:5B:C2:36:C3:F0:F5:56:8C:7F:A0:32:0B:67
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/mpwwyDGnTFvCNsPw9VaMf6AyC2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:600::/44
Signature Algorithm: sha256WithRSAEncryption
4e:a8:45:ba:b2:c2:24:4c:2d:71:a3:19:52:02:52:03:b8:93:
e3:4d:c5:f7:e2:cd:56:a1:c0:01:ed:cc:6f:f7:42:36:bf:82:
ee:4c:4d:90:e1:93:19:7a:c2:97:15:ad:de:89:dc:4c:f8:f0:
6d:29:e2:9f:94:39:c1:a9:53:f2:5a:ac:b4:15:c0:9e:19:9a:
ce:d5:4a:78:54:97:3d:4b:c3:fc:75:64:73:a1:44:f2:f8:2d:
d7:f0:c4:55:6c:f0:b9:15:e7:39:52:06:0c:2b:3b:42:c2:8c:
d0:39:b3:ab:18:28:0b:6b:9b:08:a1:35:e3:01:c3:fa:00:62:
05:7f:2c:e1:7c:ec:8f:e4:6c:8a:57:ba:3e:ce:58:46:0a:ae:
2a:cd:91:a5:f9:1e:b4:98:53:b0:ae:cf:82:61:b2:b2:ef:2d:
68:e0:26:b5:60:8a:68:11:97:19:26:2b:ed:eb:53:0a:67:63:
c7:2b:40:52:08:5b:81:ca:b1:57:6e:79:8b:fe:04:41:43:ff:
77:16:0f:23:43:23:ad:37:75:72:ee:51:5d:22:e5:92:8e:22:
4a:77:20:4c:1f:79:52:af:d0:67:34:6b:b0:8c:16:9f:06:e1:
c4:44:88:0b:33:36:c5:42:e7:08:cf:b6:af:34:8c:e8:db:4c:
6c:6e:56:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:02:14 2025 by rpki-client