Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/pDE0yGTD_OTznI1IBwS53a5_YkM.roa
File: pDE0yGTD_OTznI1IBwS53a5_YkM.roa (raw, json)
Hash identifier: 5TkpIF7waxxu8p9bIqXkx+3Qqhzac7l7t23KqU54NYE=
Subject key identifier: A4:31:34:C8:64:C3:FC:E4:F3:9C:8D:48:07:04:B9:DD:AE:7F:62:43
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0181E68FF8E8E3008A5FB7C1EDDB705FC9DF
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/pDE0yGTD_OTznI1IBwS53a5_YkM.roa
Signing time: Sun 10 Jul 2022 05:23:23 +0000
ROA not before: Sun 10 Jul 2022 05:23:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47689
IP address blocks: 2a06:a005:a18::/45 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:e6:8f:f8:e8:e3:00:8a:5f:b7:c1:ed:db:70:5f:c9:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jul 10 05:23:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a43134c864c3fce4f39c8d480704b9ddae7f6243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:24:eb:f1:a3:3c:75:5c:27:78:0f:d8:b5:5e:
75:c5:c6:95:9c:88:d9:e9:87:0f:8e:9e:1c:9d:37:
18:bb:a0:d9:1b:3a:5d:09:5e:8f:78:43:5a:56:af:
bb:36:d4:df:3a:b8:50:d8:9d:c0:27:c4:6c:87:6f:
e6:c5:f0:6c:1c:85:a0:41:12:6f:38:3b:15:78:63:
7b:bd:08:dd:a6:ba:c0:4e:88:47:e6:3a:28:5b:9e:
e1:07:7a:d7:f4:05:1e:44:64:ab:c0:f1:29:17:92:
b3:cf:de:ad:c4:86:78:17:fd:fb:9f:db:e3:9d:92:
06:6c:4d:b5:e5:5b:12:18:26:7b:d9:6d:5d:7d:e4:
38:4d:a6:f1:a1:4f:52:cf:15:d5:8a:e7:0d:33:db:
d2:b9:4f:c6:14:0a:21:4d:a1:f9:fe:6e:3c:8a:56:
25:4c:a3:6f:30:94:9c:9a:53:e0:9b:68:2c:2d:85:
56:80:e1:3a:66:75:d4:6a:64:ee:58:12:63:0e:ae:
9e:68:1a:98:87:b8:99:64:ab:22:0e:17:90:63:d3:
fc:d3:3e:9a:ba:6d:fc:2e:d5:5a:de:41:1a:7f:74:
26:62:a9:0a:b0:4d:49:ce:41:0d:ec:fa:4e:24:f5:
9e:cc:81:fd:1c:74:4d:66:9e:eb:a7:0c:7e:d3:b6:
19:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:31:34:C8:64:C3:FC:E4:F3:9C:8D:48:07:04:B9:DD:AE:7F:62:43
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/pDE0yGTD_OTznI1IBwS53a5_YkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:a18::/45
Signature Algorithm: sha256WithRSAEncryption
75:f2:f3:f4:c6:47:47:60:79:f6:db:18:e4:bb:26:44:8e:ca:
5a:9e:79:92:e6:a3:81:b8:b5:af:cc:49:a2:52:5a:0e:fe:cb:
62:69:a8:42:4d:82:e1:be:8f:b8:24:16:c9:45:f3:ed:53:28:
f6:c0:1f:c0:0e:be:eb:b9:58:26:c3:fd:80:9b:0a:19:16:98:
5e:55:01:3e:1b:21:47:4b:54:48:1b:75:83:ca:0c:89:38:f5:
7e:de:f4:38:82:46:ce:f6:0c:e6:49:f2:56:80:54:68:94:c1:
8c:9d:42:c5:0f:a7:a2:37:1f:5b:1e:15:c8:cc:ce:c0:d2:c8:
5d:f1:22:f0:53:66:ab:d3:70:53:54:e8:56:c3:2f:bc:62:5e:
f3:d5:67:c6:42:d1:65:d2:ff:94:09:85:11:e6:f8:dc:df:cf:
72:71:56:27:39:3a:05:e8:3f:03:46:d2:6b:f5:f0:e1:2e:2a:
1d:3c:7f:73:5d:d3:b3:2c:0c:af:e0:43:aa:24:0a:22:12:a9:
2b:de:56:a0:b8:e1:5b:c3:d3:6e:8f:7c:26:56:7d:25:20:ef:
ed:9c:3f:84:ba:ab:ae:6f:04:9a:a2:cb:14:2f:8c:7b:78:0e:
9e:f1:5b:1e:67:c3:5a:67:13:cf:c2:68:f7:9a:08:f7:bf:96:
bf:e7:57:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:09:27 2025 by rpki-client