Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/rEM1XytMhuhTWcVGPw40Q5oL5LA.roa
File: rEM1XytMhuhTWcVGPw40Q5oL5LA.roa (raw, json)
Hash identifier: /vLipJM5IOZQxKXmg0XzonLsCQKXqqCS61M1Lzyux3w=
Subject key identifier: AC:43:35:5F:2B:4C:86:E8:53:59:C5:46:3F:0E:34:43:9A:0B:E4:B0
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0184F4D461289AB963F59603AF8C9969C376
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/rEM1XytMhuhTWcVGPw40Q5oL5LA.roa
Signing time: Fri 09 Dec 2022 03:01:09 +0000
ROA not before: Fri 09 Dec 2022 03:01:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200879
IP address blocks: 2a0a:6040:f200::/40 maxlen: 48
2a06:a005:6::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f4:d4:61:28:9a:b9:63:f5:96:03:af:8c:99:69:c3:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Dec 9 03:01:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ac43355f2b4c86e85359c5463f0e34439a0be4b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:41:39:be:d2:67:15:3b:f7:b5:2f:ca:2c:14:
fc:6d:e8:c9:66:9c:72:e5:ef:e0:c6:14:2d:7e:fc:
0f:a8:be:ff:43:c7:89:ae:9a:d6:ee:84:8f:55:ef:
3e:00:2a:25:3a:c6:f7:7a:0d:8c:42:6e:97:b4:57:
c2:b5:c7:f5:a2:e2:20:31:87:98:15:f1:b3:5a:e8:
95:99:41:4e:7b:2c:0f:79:95:1f:0e:6a:62:16:bd:
34:68:b7:23:29:02:1d:7a:71:55:30:a4:73:82:84:
bb:74:b7:34:8f:53:78:fc:07:d3:00:37:f0:26:46:
1f:3b:44:d2:0e:5c:14:d6:8a:0d:b6:36:b5:94:17:
a3:38:04:65:84:40:7e:73:40:b1:ee:68:d4:fb:2a:
d1:5c:65:98:a0:6c:ba:49:09:c1:fb:57:7a:86:57:
d2:d7:94:5c:27:52:5c:8e:7f:c6:40:c3:79:97:9a:
0e:99:36:21:e6:e8:09:81:67:ce:af:08:92:d1:c5:
42:b1:89:f7:a2:8f:2a:14:21:48:c0:7f:97:a5:6f:
b2:24:f1:83:4f:9d:1b:57:53:42:2d:2f:ba:51:e6:
b8:e3:06:72:d7:5a:07:cb:e6:2f:eb:32:c4:d2:c0:
74:91:fc:7e:b7:36:a3:d7:5b:64:50:c9:2e:3a:92:
c9:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:43:35:5F:2B:4C:86:E8:53:59:C5:46:3F:0E:34:43:9A:0B:E4:B0
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/rEM1XytMhuhTWcVGPw40Q5oL5LA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:6::/48
2a0a:6040:f200::/40
Signature Algorithm: sha256WithRSAEncryption
07:58:b1:98:36:56:4e:d7:1f:d1:39:9e:69:0b:c7:42:9c:ea:
e5:ff:3b:f8:53:7d:ec:98:d4:77:af:11:08:33:16:93:10:7c:
83:45:8f:51:e5:f9:71:37:c0:2d:b8:60:a3:5a:c2:53:39:d5:
39:d9:b9:87:e7:0a:c1:89:71:7b:60:c9:dd:27:9d:89:3f:58:
5b:f4:38:58:0e:e2:6a:8a:de:65:0e:7c:ab:be:c0:49:81:63:
8b:fe:3e:e2:35:c6:dc:fe:46:c4:c4:9b:71:8e:7a:0d:16:43:
06:bd:25:c5:c9:2e:67:fd:d1:f6:7b:1b:15:4d:4e:4d:dc:b1:
29:1d:ee:27:0a:3a:43:a2:80:bc:62:eb:f4:f8:36:28:c5:17:
21:8f:3c:a9:67:e3:aa:03:64:34:f1:27:47:17:92:9e:4b:70:
0e:ea:f6:ce:7d:78:88:57:47:b8:39:8f:d1:76:a8:f5:5e:bc:
65:18:b1:5c:c3:00:8b:ba:f3:aa:86:aa:a9:18:cb:98:8a:57:
98:a5:8a:7b:ed:7c:13:d2:9a:10:ad:52:45:96:1d:05:f7:6b:
a4:f8:07:5a:39:99:da:73:dc:87:56:40:f9:68:a5:a3:53:58:
95:0a:2b:7f:fe:e2:4c:5a:01:3c:3e:ac:ac:2c:97:ad:45:75:
c8:d2:9c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:10:49 2025 by rpki-client