Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/p7vul_uiflPqVXN8tKEEqua-DFg.roa
File: p7vul_uiflPqVXN8tKEEqua-DFg.roa (raw, json)
Hash identifier: xNoEPjk8USKW53F/u1GD3wEZy6uS3EaRKX5FwLfSsZw=
Subject key identifier: A7:BB:EE:97:FB:A2:7E:53:EA:55:73:7C:B4:A1:04:AA:E6:BE:0C:58
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0183D68757359A858CE8E3BCFAE258BBC4A6
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/p7vul_uiflPqVXN8tKEEqua-DFg.roa
Signing time: Fri 14 Oct 2022 12:45:37 +0000
ROA not before: Fri 14 Oct 2022 12:45:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213105
IP address blocks: 2a06:a005:1d30::/44 maxlen: 48
2a06:a005:18e0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d6:87:57:35:9a:85:8c:e8:e3:bc:fa:e2:58:bb:c4:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Oct 14 12:45:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a7bbee97fba27e53ea55737cb4a104aae6be0c58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:06:14:b4:3b:a3:67:51:02:c7:04:4e:7d:5e:
84:8c:ed:bf:08:6d:9a:80:c9:1b:8c:8c:f2:4e:e6:
78:12:91:54:95:c3:29:04:cd:58:22:9b:b3:06:21:
b2:93:41:3f:b1:5d:d8:6a:b9:7e:24:0d:40:f9:ad:
d2:47:d3:68:87:6b:62:79:5b:68:9f:28:5c:82:15:
9f:99:db:56:6e:32:46:c2:08:c8:dd:34:19:08:45:
0d:51:1e:43:0d:f6:14:be:ac:a6:e9:38:fd:be:38:
ad:2e:7f:3f:c7:90:97:43:f3:5e:b6:b7:f3:0d:5b:
f8:c6:fa:23:bc:93:3c:64:bc:f1:44:2b:d2:64:6a:
16:5b:79:e0:2b:07:e3:80:86:fb:0e:8b:c2:a9:06:
c6:b8:38:f5:a9:ef:29:bb:2a:77:ca:23:76:94:ca:
11:66:80:cc:cc:c9:1b:37:ee:f6:f8:e8:2b:b1:50:
48:22:58:22:24:5f:90:91:6c:c2:4a:ac:ca:24:df:
8e:a6:05:98:be:d9:7c:66:80:29:a5:13:72:71:ec:
91:a1:3c:9f:7c:c9:47:bf:2a:6f:9b:bb:2f:4e:a9:
0d:5a:04:a8:2f:95:47:8b:ce:38:69:e7:0e:2c:2b:
60:d0:5e:dc:fb:aa:e1:fe:2b:99:37:b1:97:39:74:
a9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:BB:EE:97:FB:A2:7E:53:EA:55:73:7C:B4:A1:04:AA:E6:BE:0C:58
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/p7vul_uiflPqVXN8tKEEqua-DFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:18e0::/44
2a06:a005:1d30::/44
Signature Algorithm: sha256WithRSAEncryption
0b:fb:44:48:f0:3b:1c:f4:5d:71:0d:31:89:0e:a2:e4:6e:db:
0b:76:82:c9:2b:8d:28:73:99:f3:2f:b4:f0:fc:51:15:4c:29:
0d:46:f7:06:c0:18:c3:ed:fc:7c:44:c4:f1:2a:d2:40:88:40:
bc:d6:25:8b:79:15:18:d9:b1:be:f6:6b:29:08:cc:1d:0e:77:
42:60:ef:61:ae:73:27:f8:14:29:d7:e2:c7:5b:27:60:4a:97:
c3:14:1f:e5:28:a6:a7:8b:5e:e0:e2:26:17:95:69:07:59:7a:
f6:86:18:b3:4d:7f:01:78:10:23:57:65:7f:4f:6b:02:a9:46:
91:72:46:3d:8a:51:50:29:77:27:2b:b8:83:e4:e1:43:8e:8d:
c9:21:00:6e:2d:b9:7e:e5:f2:dd:f7:49:19:04:40:d8:72:c5:
43:db:1d:5d:0d:10:90:1a:3d:52:7d:79:dc:52:05:1a:db:2b:
4e:a4:bc:db:da:e4:4a:7a:f9:34:f1:6b:b0:45:bb:57:b4:7f:
7e:ea:43:73:dc:7a:4a:f2:73:60:8c:73:1d:d1:f3:d3:13:24:
58:f6:5a:93:ef:e1:ed:bf:ba:47:94:0f:9a:34:ca:41:06:88:
75:dd:7d:7f:5d:2e:f2:80:bd:7a:b4:af:0e:07:14:0d:f4:85:
49:75:a1:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 09:58:08 2025 by rpki-client