Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/pV3AByft93kMSKTIXqwmtf27_x8.roa
File: pV3AByft93kMSKTIXqwmtf27_x8.roa (raw, json)
Hash identifier: 9e5+DsIbKi9jbnPOBrdEHlXkCyYQViBJPGEOoaGhHJM=
Subject key identifier: A5:5D:C0:07:27:ED:F7:79:0C:48:A4:C8:5E:AC:26:B5:FD:BB:FF:1F
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 018278A579242A8851E830E50FA734D6A489
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/pV3AByft93kMSKTIXqwmtf27_x8.roa
Signing time: Sun 07 Aug 2022 14:11:26 +0000
ROA not before: Sun 07 Aug 2022 14:11:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203453
IP address blocks: 2a06:a005:5a2::/48 maxlen: 48
2a06:a005:1670::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:78:a5:79:24:2a:88:51:e8:30:e5:0f:a7:34:d6:a4:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Aug 7 14:11:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a55dc00727edf7790c48a4c85eac26b5fdbbff1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:54:31:2d:31:a3:3b:dd:37:12:7f:21:7c:3b:
eb:ac:21:85:a7:0a:cc:77:8a:ac:48:aa:c5:da:4f:
23:cb:8e:48:74:97:c4:6f:25:b5:26:8b:f1:6e:ef:
3b:16:d3:ba:91:69:c2:6d:b5:eb:47:7c:f4:50:6b:
7a:9e:cc:47:8e:26:16:cc:13:c7:10:48:55:62:77:
68:e0:46:9c:91:15:50:25:91:49:1d:c6:7f:af:10:
2c:8d:4d:bf:ea:9b:95:ef:a8:08:a8:f7:79:e1:66:
18:89:c9:25:56:15:30:40:e3:98:76:3a:da:ef:a6:
21:76:83:11:ec:b0:87:a8:19:53:3a:5c:d2:d5:08:
54:2a:f8:c5:a7:77:45:cb:b6:af:12:c4:9b:f1:90:
ee:3e:40:b7:98:aa:9e:ee:25:9e:d9:ce:d4:81:32:
d1:6b:ab:6f:7d:2d:cc:51:9d:be:9c:1f:d2:ee:e7:
6c:77:20:9d:2c:66:78:24:40:0a:bd:dd:21:f7:93:
d6:fd:f4:6e:a3:0b:72:cc:bf:93:66:70:8e:da:2b:
1c:77:b7:f0:fc:07:8d:2e:10:f8:7e:64:f1:92:a1:
91:51:25:c7:1f:d9:63:d9:b5:10:4e:66:fc:ef:03:
ef:dd:95:78:7c:9d:c0:07:dc:4a:f6:b4:15:57:a2:
74:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:5D:C0:07:27:ED:F7:79:0C:48:A4:C8:5E:AC:26:B5:FD:BB:FF:1F
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/pV3AByft93kMSKTIXqwmtf27_x8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5a2::/48
2a06:a005:1670::/44
Signature Algorithm: sha256WithRSAEncryption
27:1a:b8:5f:73:c2:11:c9:6e:44:b2:27:12:9f:5f:29:00:c2:
22:2c:e7:2f:9e:46:cb:28:13:60:c8:71:2c:13:3e:16:60:33:
d3:b9:fe:0a:0b:32:2c:38:fd:65:d0:c7:60:ad:68:f0:3d:6f:
1e:1b:94:d0:6a:95:e4:a3:b2:61:f5:86:f1:d9:29:0a:64:f6:
b2:94:02:ef:da:18:17:d1:5f:21:55:26:03:97:d7:62:1a:5a:
e4:d0:d3:22:e5:39:9f:33:ff:54:14:19:c8:e9:9b:96:af:2c:
35:8b:46:3f:55:b9:16:ff:5b:72:aa:a3:e7:50:1a:0b:45:be:
28:86:00:a0:3f:af:11:9d:0b:5f:11:f4:0f:55:60:52:93:10:
f3:23:a5:28:f3:c5:b9:0d:21:e7:23:d9:53:08:2c:d1:9d:00:
7e:12:a5:a3:ca:09:94:2d:fc:b3:b1:74:f0:f0:86:37:71:1b:
9b:a6:52:6e:6e:32:19:44:9a:42:e8:07:07:9b:1f:86:df:52:
a4:b5:dd:41:85:71:b0:e8:e1:3e:be:fe:3e:40:a6:dd:29:40:
18:32:0b:77:32:78:60:3e:b2:ab:49:89:aa:ca:73:7a:7a:dc:
fe:4e:0c:4b:4e:1d:bf:71:1c:76:63:b6:23:a9:94:8a:c3:51:
16:3a:3c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 09:59:37 2025 by rpki-client