Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/rtRTwGeJVhe33lpN6fT1E0Nwy14.roa
File: rtRTwGeJVhe33lpN6fT1E0Nwy14.roa (raw, json)
Hash identifier: g4b4FZzF7umqMblCBMzz4amPEXUUMqm5q3ICuhr4qK4=
Subject key identifier: AE:D4:53:C0:67:89:56:17:B7:DE:5A:4D:E9:F4:F5:13:43:70:CB:5E
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01823957AF4033E1B283AA8F3686255ED214
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/rtRTwGeJVhe33lpN6fT1E0Nwy14.roa
Signing time: Tue 26 Jul 2022 07:10:23 +0000
ROA not before: Tue 26 Jul 2022 07:10:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203804
IP address blocks: 2a06:a005:1340::/44 maxlen: 48
2a06:a005:1350::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:39:57:af:40:33:e1:b2:83:aa:8f:36:86:25:5e:d2:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jul 26 07:10:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aed453c067895617b7de5a4de9f4f5134370cb5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:23:3c:1a:72:b2:d4:c8:c1:cc:d4:7a:ce:9b:
a2:ab:08:19:fe:91:78:9c:ff:cb:a2:00:a6:d4:2a:
b8:f8:9b:a2:9f:2c:cb:19:d3:4e:30:ed:63:03:d8:
15:e9:c8:b4:f8:fb:5f:5a:d4:bd:a2:d2:c6:c0:7d:
3f:5e:9b:51:3b:5f:ae:eb:5b:fd:09:24:29:cb:b3:
ac:a6:64:98:57:a4:13:a3:3f:38:27:dc:e1:0d:35:
77:93:55:86:18:ab:da:b7:f2:f6:e4:4d:a5:35:b0:
47:c5:18:1a:38:06:2f:f6:35:e1:ca:17:3d:60:59:
cc:46:8d:30:23:04:0b:df:6a:e7:8e:61:c8:97:ff:
e9:97:e5:f8:49:68:8b:6a:14:3d:f6:36:ef:96:54:
58:ca:57:af:71:e8:c7:4c:a8:20:dd:df:6c:13:f4:
a8:0f:d8:09:da:4e:2d:6f:37:55:d5:9e:7a:03:71:
f7:b6:98:99:f1:17:11:1e:6a:0c:12:04:49:0a:6c:
9f:66:fd:9f:ba:f7:ce:9c:c2:6e:8a:28:05:0a:55:
74:bd:bb:63:f7:83:a6:1f:3d:dc:c8:32:35:0f:40:
03:f9:13:a8:2b:21:94:c6:fa:6d:fe:ed:22:47:76:
88:84:c0:54:30:09:e9:90:0d:60:5e:b2:06:b4:51:
4b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:D4:53:C0:67:89:56:17:B7:DE:5A:4D:E9:F4:F5:13:43:70:CB:5E
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/rtRTwGeJVhe33lpN6fT1E0Nwy14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1340::/43
Signature Algorithm: sha256WithRSAEncryption
12:06:74:b0:74:fd:7f:3c:25:cf:b0:81:69:dc:bb:e2:d8:8e:
9f:b6:a2:5f:d9:a5:0a:d4:1d:db:20:da:9c:e5:b0:e7:18:33:
53:c6:a6:b8:6c:79:4a:49:53:04:49:f2:2d:4b:a1:3c:d3:5b:
25:dc:b0:eb:31:c7:d6:a6:32:84:17:1e:31:7e:64:7d:2c:3d:
d8:ce:6b:68:f9:d0:27:30:a1:41:23:4d:41:d0:ce:fe:d5:91:
28:f0:ca:50:9c:8b:0f:46:8e:22:5a:7c:f2:a8:53:2c:c7:ff:
8a:58:1d:a0:0f:3f:9e:78:93:db:07:16:f7:b7:9f:dd:37:1d:
56:be:fe:25:fd:55:0c:7e:1e:a9:f8:e7:9e:49:80:24:64:d9:
89:83:0d:d7:d2:4a:c5:e0:d5:51:d7:37:26:62:45:3e:39:b8:
12:b0:74:7e:b8:5f:ec:75:b0:00:69:aa:57:b8:50:9c:43:43:
33:a3:52:fb:07:fb:da:c4:e0:dd:f2:6d:3a:c7:37:35:b5:b6:
94:6a:fd:00:17:8e:13:56:30:d8:c9:db:da:56:10:29:50:af:
c4:00:bb:f2:a0:d2:e3:53:16:fc:b7:49:45:2d:e7:75:a4:1f:
e7:7d:74:7e:ca:76:e1:ae:10:1c:b8:80:fa:c7:e4:d8:4a:04:
f9:44:97:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 09:59:39 2025 by rpki-client