Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/rzGCqr_Y8dUsLHgqAa8jTbgX6is.roa
File: rzGCqr_Y8dUsLHgqAa8jTbgX6is.roa (raw, json)
Hash identifier: H43nAeesJw24agrx//V6kWMFDl55huGY1PP6i3IJYi4=
Subject key identifier: AF:31:82:AA:BF:D8:F1:D5:2C:2C:78:2A:01:AF:23:4D:B8:17:EA:2B
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 17C36249
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/rzGCqr_Y8dUsLHgqAa8jTbgX6is.roa
Signing time: Wed 06 Apr 2022 04:24:29 +0000
ROA not before: Wed 06 Apr 2022 04:24:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44570
IP address blocks: 2a06:a004::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 398680649 (0x17c36249)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Apr 6 04:24:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=af3182aabfd8f1d52c2c782a01af234db817ea2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9f:a3:74:5d:b4:f0:80:b6:8c:a9:81:fb:94:
b4:86:32:73:1b:99:45:97:ba:2c:6c:1d:66:d7:f3:
cc:88:a3:cd:8a:86:f8:45:a7:2e:61:34:d4:60:3d:
a7:cd:82:6a:8e:2a:e8:72:31:d9:4a:83:75:c0:73:
03:99:45:7d:f0:e5:9e:f6:7a:01:6a:db:e1:4a:e3:
b6:52:84:6c:77:0e:77:f6:95:d3:77:75:0c:17:4e:
32:74:84:d7:04:56:84:c7:f7:87:05:72:c9:3a:87:
2e:46:9f:1f:f4:4d:14:d9:81:ab:95:7c:5a:7f:ad:
c5:f9:f5:49:3e:7e:0f:be:d9:8d:c2:19:37:80:c0:
6f:e7:35:fe:69:ef:89:ee:6d:d8:ab:f2:58:5d:49:
87:9f:bb:bf:c4:7f:7a:13:c4:24:de:bd:d4:28:7d:
06:04:66:f4:ff:de:0b:a7:8e:70:76:13:85:25:be:
45:7b:e0:8b:e1:df:54:c9:17:1d:ac:e1:54:25:67:
6d:17:21:8d:18:0f:fa:b7:7b:17:be:11:8d:7c:fb:
8a:64:89:ee:99:88:dc:1d:54:c7:a1:98:97:d6:b8:
98:d6:c9:0f:0e:03:ea:7d:87:a6:35:6f:94:f5:1e:
38:77:c5:04:c5:89:c3:7d:b5:39:fb:4b:7f:9a:75:
32:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:31:82:AA:BF:D8:F1:D5:2C:2C:78:2A:01:AF:23:4D:B8:17:EA:2B
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/rzGCqr_Y8dUsLHgqAa8jTbgX6is.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a004::/32
Signature Algorithm: sha256WithRSAEncryption
32:bb:fb:28:4f:6a:c3:a0:12:ea:22:3d:81:c4:ce:07:ae:02:
e3:0a:47:78:2b:88:ae:a0:ec:1e:f6:51:c3:f9:9f:90:bc:78:
d9:3a:f4:3f:82:51:6f:b7:a4:d7:20:69:a4:df:22:a4:af:cc:
4a:04:f7:f5:3c:77:7c:72:3c:4a:b0:65:18:07:ff:17:43:31:
df:34:75:84:49:56:52:b9:9e:47:7f:83:94:47:58:86:bb:e8:
e5:d2:3f:7c:d4:f0:d7:74:ae:8c:4f:c4:b6:b3:e7:ad:ea:f8:
82:4e:19:f2:fc:8d:b0:8b:e6:6f:0a:5d:a7:ec:7c:54:8b:2a:
89:fa:90:39:39:68:27:dc:cf:3d:2e:fc:b2:fc:44:8c:14:d5:
2c:b6:e7:81:98:00:f4:72:53:c4:d7:93:59:a5:27:6f:7d:6a:
fc:60:49:7f:25:f4:e4:2b:cf:49:5d:e3:aa:ca:7b:1e:58:b6:
2a:12:d2:b2:56:e8:09:32:5d:07:3c:45:2e:48:29:8d:06:c5:
4d:12:5b:58:55:bb:ed:39:e8:f5:95:d9:0a:14:b8:cf:9b:6a:
18:56:8e:28:9e:e0:8e:73:60:34:3f:9c:b4:2d:53:71:36:58:
c9:a4:5f:68:f6:3c:87:1f:2e:11:da:d6:35:39:01:b1:b0:45:
20:f4:bd:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:03:29 2025 by rpki-client