Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/rjuNr2QGBKWuG77c7bQA7pFRh-s.roa
File: rjuNr2QGBKWuG77c7bQA7pFRh-s.roa (raw, json)
Hash identifier: 4HBmQj4Z84RfSCiB8EHb+QpjaLqOXRaOu6KDm5NE4wQ=
Subject key identifier: AE:3B:8D:AF:64:06:04:A5:AE:1B:BE:DC:ED:B4:00:EE:91:51:87:EB
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 1A067AD4
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/rjuNr2QGBKWuG77c7bQA7pFRh-s.roa
Signing time: Tue 24 May 2022 10:35:15 +0000
ROA not before: Tue 24 May 2022 10:35:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205531
IP address blocks: 2a06:a005:5b4::/48 maxlen: 48
2a05:dfc7:1000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 436632276 (0x1a067ad4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: May 24 10:35:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ae3b8daf640604a5ae1bbedcedb400ee915187eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3a:22:d4:92:fb:05:90:7c:50:e2:67:ae:1f:
29:2e:bf:8c:b7:89:b9:83:45:b7:79:88:bf:fd:58:
6c:7c:90:b3:fa:0f:b8:5b:64:aa:43:62:a5:87:7a:
16:f6:e3:3f:9d:b9:c9:c4:cc:68:a4:6c:f7:d3:31:
61:d7:fc:cc:c8:0c:58:a6:1e:1f:da:ad:36:ce:20:
eb:96:dd:12:73:65:c8:f7:c1:f6:15:64:30:ea:00:
43:cf:8c:61:d9:0d:90:1e:07:84:06:23:32:91:39:
39:f1:b7:4a:36:e1:28:46:f6:4a:c7:08:74:9c:4a:
44:09:5f:af:51:3f:84:67:ab:b5:6b:4c:d5:98:56:
29:b9:65:f7:df:73:df:0f:01:f3:29:8a:22:06:3e:
0b:09:c3:b3:01:89:cf:b3:31:e9:54:e8:0e:5e:9a:
dc:fc:bf:1b:df:c1:d3:fd:f8:25:1b:40:69:aa:fb:
2b:e1:e5:d7:b3:81:68:c2:eb:20:62:33:b3:e2:e9:
53:d1:c1:4b:6b:54:8f:01:d2:c2:ce:6d:07:90:d1:
1a:17:3f:96:73:dd:bd:f3:c8:98:20:5a:a7:9d:72:
1d:77:43:6b:fb:93:d3:bf:f7:95:66:66:f3:b2:19:
82:33:7b:03:86:f0:1c:14:3f:d9:7c:78:c3:87:36:
84:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:3B:8D:AF:64:06:04:A5:AE:1B:BE:DC:ED:B4:00:EE:91:51:87:EB
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/rjuNr2QGBKWuG77c7bQA7pFRh-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc7:1000::/40
2a06:a005:5b4::/48
Signature Algorithm: sha256WithRSAEncryption
94:24:8d:95:06:6e:fa:63:2a:55:cb:3a:2f:19:27:71:d0:67:
48:88:b1:b9:ff:c8:90:c1:b2:ca:4e:1a:33:af:9c:7f:71:54:
e6:34:78:e4:9f:59:bc:a0:be:e0:48:f8:79:4f:5f:6c:92:27:
f4:a8:cf:96:a0:e4:3b:07:20:f4:21:72:32:09:8c:f3:f5:53:
e4:6a:bc:5e:79:d8:51:dd:7b:ce:5f:20:bb:d1:82:49:72:10:
07:12:b4:7e:39:97:f1:ac:ce:36:a6:c7:79:c5:9b:98:82:ae:
cf:03:7f:4b:14:94:8a:13:5f:09:df:48:16:05:c1:3f:6f:0a:
6a:40:70:fd:13:85:ed:72:0e:c9:40:17:ba:ac:5c:2a:98:95:
ce:0b:13:5a:6c:59:b8:68:fa:83:f9:6c:f4:bc:bd:a6:1e:11:
85:a7:45:ed:ba:46:8b:56:0f:92:4e:68:e6:64:81:04:cd:75:
ad:ff:5f:6b:a1:b2:eb:a8:be:a5:ed:84:8a:e6:35:25:06:92:
cc:b0:3e:9b:47:e9:db:ca:f3:9d:a3:0a:92:9f:19:59:48:ea:
9c:92:2c:69:9c:59:31:59:b9:98:3e:11:ab:80:62:30:25:78:
61:ff:38:e3:9a:60:95:54:24:ad:17:34:6b:da:71:df:a4:51:
76:ac:ae:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:08:13 2025 by rpki-client