Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/nIeEZ-sR01rn4g951oELnDVH6r4.roa
File: nIeEZ-sR01rn4g951oELnDVH6r4.roa (raw, json)
Hash identifier: gtoMYzsG2vR2H4YOJoq+jgdWE4HB7po3dLy1V9pssw8=
Subject key identifier: 9C:87:84:67:EB:11:D3:5A:E7:E2:0F:79:D6:81:0B:9C:35:47:EA:BE
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0184D001AFF9DD1DFD85F70BF4AF5AAA2479
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/nIeEZ-sR01rn4g951oELnDVH6r4.roa
Signing time: Thu 01 Dec 2022 23:24:42 +0000
ROA not before: Thu 01 Dec 2022 23:24:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200969
IP address blocks: 2a06:a005:1d51::/48 maxlen: 48
2a0a:6040:f400::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d0:01:af:f9:dd:1d:fd:85:f7:0b:f4:af:5a:aa:24:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Dec 1 23:24:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9c878467eb11d35ae7e20f79d6810b9c3547eabe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:64:53:fc:82:d3:94:36:b6:f8:bd:31:5b:fb:
64:4f:81:72:fe:ae:56:3c:a6:b4:e0:8e:14:27:c0:
d5:79:8b:d8:86:58:9f:12:3b:f8:6a:a1:73:f9:70:
14:62:df:57:e6:37:d8:d3:64:cf:91:99:d4:ae:fc:
ac:2d:04:6e:c4:64:5b:dc:05:21:86:7e:c4:53:21:
56:0f:6f:40:7c:ab:d2:29:68:90:db:6c:79:eb:12:
c3:3f:a8:3b:b2:5e:df:36:a7:3f:25:f3:28:34:09:
9b:44:5b:01:bb:e0:6c:02:db:56:8c:9c:41:5f:f9:
18:0e:4b:21:86:20:55:ad:14:a3:53:46:c9:c8:44:
c3:cc:8e:41:74:86:2f:ea:3d:ad:ef:4e:ce:42:2e:
cf:0a:26:9f:52:1b:1e:f9:64:18:26:27:a3:0e:2d:
df:78:54:55:9e:07:cb:c2:11:31:64:53:17:81:25:
2d:ed:ca:6c:28:aa:fe:66:9a:ce:7d:8f:3d:a9:6f:
a0:4f:b7:7d:94:31:4a:d4:66:56:57:a2:ed:00:4c:
c2:28:8f:34:f0:5c:6e:63:c3:f1:8c:c7:a2:56:e3:
da:8f:f8:a6:5e:a8:f9:ae:c7:20:f2:86:06:c2:7c:
95:d7:5e:e0:4c:ec:82:be:5a:20:3a:9d:c0:e6:f2:
18:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:87:84:67:EB:11:D3:5A:E7:E2:0F:79:D6:81:0B:9C:35:47:EA:BE
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/nIeEZ-sR01rn4g951oELnDVH6r4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1d51::/48
2a0a:6040:f400::/40
Signature Algorithm: sha256WithRSAEncryption
63:fa:60:ed:0a:b1:8b:fd:1b:64:0c:c8:73:fb:99:05:25:79:
26:4f:fa:32:43:62:a8:c4:1c:71:d4:b6:b7:d9:3c:df:06:50:
bd:4b:e7:6a:58:b9:cb:1c:2a:6a:2e:a4:da:fe:fe:b1:16:04:
99:0e:6e:e0:0f:2f:1b:18:89:a7:c2:a0:7e:33:12:80:2e:fc:
c0:03:fb:c9:9b:a0:3a:9e:7b:1b:63:36:3a:8d:57:8b:99:19:
cb:10:6a:f5:70:15:c4:a8:3b:dc:4e:db:2d:d9:d0:bc:37:d1:
53:86:93:9c:04:ac:37:5b:84:fd:00:14:a6:ee:1e:75:b5:88:
4e:1d:00:c8:5f:2d:20:6f:00:ad:fa:c1:e2:00:aa:32:aa:04:
45:96:11:d5:b1:6e:88:c5:7a:52:d3:34:52:10:52:1a:17:3b:
97:18:fd:f5:45:44:23:13:ef:8c:cc:2f:c5:c3:0e:f9:55:60:
4d:2b:ea:b4:b5:b8:8b:70:b6:bf:fd:78:12:a0:84:69:81:bb:
d4:bd:46:b5:11:ea:42:f4:b6:07:0a:9b:c6:e4:8e:95:36:af:
66:55:ef:5b:74:98:46:64:76:70:25:95:8f:2c:6c:1b:28:0d:
48:b4:4e:86:e6:85:64:24:a7:94:46:0d:7c:45:f6:50:01:35:
3b:d1:94:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:13:20 2025 by rpki-client