Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/oUOqxr2WFkGrg7Jz5ODAdv1XCkc.roa
File: oUOqxr2WFkGrg7Jz5ODAdv1XCkc.roa (raw, json)
Hash identifier: dsBOjxlkzN02Ry80JDthp9JzOL52oQEcQL1NQk1l1Wg=
Subject key identifier: A1:43:AA:C6:BD:96:16:41:AB:83:B2:73:E4:E0:C0:76:FD:57:0A:47
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 1A1FE389
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/oUOqxr2WFkGrg7Jz5ODAdv1XCkc.roa
Signing time: Wed 25 May 2022 23:35:15 +0000
ROA not before: Wed 25 May 2022 23:35:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208223
IP address blocks: 2a06:a005:770::/44 maxlen: 48
2a06:a005:890::/44 maxlen: 48
2a06:a005:4de::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 438297481 (0x1a1fe389)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: May 25 23:35:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a143aac6bd961641ab83b273e4e0c076fd570a47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:44:7f:00:b9:34:79:13:c5:1a:ef:24:3f:79:
66:6f:68:be:cc:2c:a3:a5:23:8e:0f:9b:00:3a:b4:
75:a1:cc:d9:ac:80:c2:43:2a:9b:4c:df:b2:41:98:
83:37:09:00:d9:a9:65:17:d8:ca:8c:da:82:e5:d3:
a9:fc:0a:96:fe:d0:11:51:43:c8:4f:72:1d:d3:3e:
8a:ac:05:d2:9e:fe:c4:f0:f2:f3:1d:28:72:61:f5:
f1:77:f1:e8:b7:77:15:7e:c9:54:2f:8b:79:ea:52:
b8:f1:98:65:e7:83:b7:15:fc:8c:ee:42:2d:72:fe:
28:52:ff:ad:50:17:46:02:9f:a9:31:99:1c:5b:d3:
4c:3e:0a:8c:0d:f7:73:6f:6f:fb:35:4a:5d:01:f8:
4c:3c:66:32:a8:4b:e1:fa:38:2a:6e:b5:14:5a:5d:
c7:86:c9:e6:70:5f:97:c2:92:9c:5a:34:93:39:3d:
e2:e6:10:90:77:af:88:21:39:d5:4f:dc:1c:8e:d4:
79:f8:71:03:d0:89:0b:0e:6a:c0:ad:9c:45:24:65:
dd:c7:27:08:f6:82:6f:66:5f:8c:37:3e:de:99:a0:
f6:16:86:1e:e3:8a:1c:c5:cf:da:5e:2b:bc:05:e6:
4b:43:62:c4:4d:2c:71:68:c4:cd:e5:bc:3f:cf:62:
7e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:43:AA:C6:BD:96:16:41:AB:83:B2:73:E4:E0:C0:76:FD:57:0A:47
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/oUOqxr2WFkGrg7Jz5ODAdv1XCkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:4de::/48
2a06:a005:770::/44
2a06:a005:890::/44
Signature Algorithm: sha256WithRSAEncryption
7e:df:64:fb:9b:5d:66:bf:33:16:ba:a5:5b:ac:71:5e:87:f0:
21:49:8d:d7:48:be:f0:c6:b6:37:3d:a8:5a:30:55:d0:b7:35:
25:c0:76:80:63:ac:d3:d4:61:0e:ac:49:a4:53:8e:b0:a9:f2:
dd:7d:4e:e3:5b:a2:e6:f1:ca:56:fe:37:f5:12:74:55:14:6e:
9b:95:43:59:55:0b:e0:f3:80:a6:1b:81:09:d8:ed:27:6d:97:
10:55:cc:d8:8b:cb:98:cd:2f:7d:cc:91:3d:41:7b:f9:36:ca:
94:8e:15:a7:df:3a:ff:81:34:fd:03:a0:04:f5:c9:4e:ab:75:
63:31:48:54:a5:7f:49:52:e5:3b:1c:25:ee:58:11:23:0b:68:
10:83:21:02:3a:7c:41:33:24:9f:69:e9:1f:20:6a:d4:24:ad:
5e:5a:a1:4a:6c:76:37:81:b5:94:77:c6:d9:2c:16:52:ca:a7:
43:4c:27:73:94:cd:d2:3d:c8:09:3d:cc:73:d2:6b:e8:0f:06:
8d:1a:09:6b:c8:99:c9:b5:96:20:6f:ed:02:31:d5:48:93:6a:
b9:88:81:8a:94:7b:98:a3:c1:c8:3a:8c:36:d9:67:98:1c:1a:
91:e7:b5:8a:5f:57:0f:90:bd:a8:80:e9:24:bc:3c:c1:56:3b:
97:bb:fa:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 04:04:28 2025 by rpki-client