Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/pbfPaWYYC3DSjZdFIqCAx5JdaGI.roa
File: pbfPaWYYC3DSjZdFIqCAx5JdaGI.roa (raw, json)
Hash identifier: 3T03cFLpTxFlSpBsi2vNmXO0YlE6wc+Te0+iBMKfna0=
Subject key identifier: A5:B7:CF:69:66:18:0B:70:D2:8D:97:45:22:A0:80:C7:92:5D:68:62
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01842051A311E2F63BD9B69B7AA77FF2CFC9
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/pbfPaWYYC3DSjZdFIqCAx5JdaGI.roa
Signing time: Fri 28 Oct 2022 20:38:51 +0000
ROA not before: Fri 28 Oct 2022 20:38:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201818
IP address blocks: 2a06:a005:2010::/44 maxlen: 48
2a06:a005:20f0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:20:51:a3:11:e2:f6:3b:d9:b6:9b:7a:a7:7f:f2:cf:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Oct 28 20:38:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a5b7cf6966180b70d28d974522a080c7925d6862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3b:c0:0a:ef:0e:4d:3d:e1:4c:33:43:56:6e:
0f:c6:1e:b6:c7:e5:a6:62:cd:5d:24:0f:46:1b:12:
fb:a1:49:da:92:46:ad:de:c9:fd:2a:29:6c:8b:32:
51:b7:b9:6f:02:50:ba:46:cd:2b:fc:b7:d7:19:ce:
25:d6:3b:a6:d4:63:1e:0e:d4:99:78:af:30:ec:0d:
6d:b1:97:1b:ce:98:8c:d6:b8:8c:e0:9b:ab:3b:29:
67:3f:9c:cd:d6:89:53:7b:16:1d:0d:52:fd:63:0c:
5b:d1:47:5f:23:36:88:be:c8:18:4b:cc:8f:11:cf:
39:2d:3d:42:2f:16:81:66:2a:ed:2e:a7:67:e1:e0:
9e:a0:da:9a:af:67:8a:97:f3:ed:bc:58:b6:95:8c:
cd:04:af:7c:51:37:f8:b0:e1:45:99:85:b0:fe:db:
93:66:2b:95:0d:83:34:1d:82:e4:5d:4c:a3:81:b0:
39:88:f1:8f:f3:a4:93:7f:6e:56:0e:75:67:e7:53:
ae:4e:b3:47:ca:03:3e:9b:d6:1d:ae:14:27:a5:48:
ef:55:93:c0:1a:be:20:2b:8a:c2:3a:65:cc:b1:96:
25:f8:34:bf:97:c8:54:8d:75:ee:74:29:b9:6f:d2:
fb:68:db:ec:08:22:1e:c5:d8:4f:91:48:31:15:e5:
29:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:B7:CF:69:66:18:0B:70:D2:8D:97:45:22:A0:80:C7:92:5D:68:62
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/pbfPaWYYC3DSjZdFIqCAx5JdaGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2010::/44
2a06:a005:20f0::/44
Signature Algorithm: sha256WithRSAEncryption
2a:f0:04:42:cc:f1:f4:ca:1a:0a:ad:cf:90:0e:77:9c:c9:ff:
5a:ed:4f:f2:ab:ea:e0:86:e5:cf:9a:0a:ae:fd:89:20:ee:cd:
e7:3c:91:66:6f:45:48:4a:e2:45:fb:84:5a:bb:4f:fc:72:63:
9c:34:16:e0:40:91:a8:aa:02:8d:c0:20:1f:3e:9b:02:30:99:
27:67:a3:01:37:47:6a:35:96:5e:ee:c0:f7:8e:8c:41:9d:0d:
57:d7:ff:9e:3c:ae:68:28:f3:a2:5e:c4:28:49:0e:e6:32:50:
b8:fc:3d:a5:9a:ae:2d:07:91:51:a6:46:cd:66:7a:2b:e0:6c:
aa:9b:82:3f:23:7c:f9:7b:50:88:9f:ab:8c:d6:f4:13:f7:0b:
fd:75:b9:b6:48:18:f8:a3:18:52:a2:61:95:7a:2e:34:2b:e1:
98:1a:6c:f9:a5:3b:ba:2f:11:ef:fc:b6:25:6f:a3:95:65:1f:
af:9f:a6:8a:ba:65:03:80:3a:33:6b:d7:db:bd:46:ab:de:ab:
41:a3:8e:55:1a:f0:88:d8:26:ae:e2:0d:c3:45:2a:fc:79:90:
0f:6c:4b:c3:4a:dc:ea:a7:bf:8d:0c:41:9c:17:92:5a:a2:09:
35:7e:c0:5d:82:3f:67:ad:c7:31:a4:62:c4:6a:20:5e:8d:ea:
c0:69:2d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:13:27 2025 by rpki-client