Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/tocKnxTFhdBHE7dXm7noXqw1fPk.roa
File: tocKnxTFhdBHE7dXm7noXqw1fPk.roa (raw, json)
Hash identifier: 7daYr4SOc7T46xRvj318Dcwgg2QcFj2jTYIPlsaCBsg=
Subject key identifier: B6:87:0A:9F:14:C5:85:D0:47:13:B7:57:9B:B9:E8:5E:AC:35:7C:F9
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 1B2ABEE6
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/tocKnxTFhdBHE7dXm7noXqw1fPk.roa
Signing time: Tue 21 Jun 2022 21:07:45 +0000
ROA not before: Tue 21 Jun 2022 21:07:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204518
IP address blocks: 2a06:a005:d90::/44 maxlen: 48
2a06:a005:e70::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 455786214 (0x1b2abee6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jun 21 21:07:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b6870a9f14c585d04713b7579bb9e85eac357cf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0b:60:f5:31:2a:7f:c8:de:0a:a5:1f:17:5f:
18:de:b4:0f:25:89:6c:ff:d7:d2:1b:b4:43:0c:2c:
49:10:10:0b:38:4a:bb:32:f5:7a:f8:e5:08:44:a7:
83:35:14:88:38:2e:48:78:dd:93:b2:18:a7:5b:4e:
2c:48:e1:a1:3d:c1:c4:84:c8:ca:bc:51:da:81:76:
d5:79:78:df:98:40:53:13:85:52:e3:53:11:83:fd:
29:c5:e1:59:13:f4:6f:b4:f5:45:fd:4e:71:2e:f0:
f9:f5:e3:03:7e:63:21:e2:8a:2f:f0:d2:48:da:e4:
a4:c2:d3:5b:39:82:2f:4b:1a:38:12:45:eb:59:7f:
e9:c8:4e:53:f4:ef:f8:3c:1f:af:03:bc:53:2c:54:
c3:35:ed:b7:9a:b1:86:4a:d8:a0:e5:bf:a7:13:1a:
7d:9d:ec:35:75:a7:17:e9:ae:bd:79:39:4e:ab:0c:
30:80:d8:b4:24:16:2d:46:f1:4b:12:7e:ea:bb:6d:
cf:26:6b:9e:23:f7:9b:b5:43:89:eb:97:90:00:72:
b4:cb:8d:e9:05:28:dc:fc:74:0a:f1:db:52:c4:a7:
00:be:e3:0b:ba:3c:1b:df:96:3f:3b:1f:57:c7:3f:
6d:63:47:00:52:fb:54:29:fd:bb:6d:19:f7:0e:76:
e5:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:87:0A:9F:14:C5:85:D0:47:13:B7:57:9B:B9:E8:5E:AC:35:7C:F9
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/tocKnxTFhdBHE7dXm7noXqw1fPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:d90::/44
2a06:a005:e70::/44
Signature Algorithm: sha256WithRSAEncryption
63:74:44:c3:a4:bf:29:78:c6:13:5e:64:e0:12:d2:0e:ef:63:
3b:63:de:32:aa:76:6d:2b:c7:27:6c:53:f5:25:0f:65:c6:17:
1a:81:76:e5:18:e4:5d:f5:ea:fb:79:88:17:c4:36:50:7a:2a:
23:ce:67:9d:fc:2c:d6:5e:bc:3b:88:e7:76:2d:c2:9c:d8:43:
13:4e:fb:25:ae:85:c6:25:52:75:31:8e:80:ad:7d:f5:67:8a:
f5:fe:40:0f:cc:af:6e:8e:29:9e:ec:64:48:bf:8f:b4:28:48:
0e:d8:e8:34:39:80:69:df:42:fb:86:6e:95:8f:3b:df:49:93:
b8:c1:52:b2:60:c6:af:33:b5:45:f4:76:b6:7b:bc:7f:fe:5a:
fd:ef:22:89:4e:a4:6e:3b:83:98:1a:71:02:83:db:4f:79:a6:
f7:6d:a6:fc:82:79:79:e7:50:32:b7:6b:cb:30:00:7e:a4:f0:
aa:89:a9:f4:f8:34:65:94:23:64:d1:01:50:c5:ec:53:79:95:
7c:05:d2:2f:ab:3a:5f:7f:b7:a4:fc:62:c7:56:3a:3d:eb:81:
2c:56:56:76:f2:82:c9:2e:dd:46:82:68:39:13:71:ba:13:2b:
f5:ec:0b:98:55:86:cb:b3:c5:3e:f3:a6:4e:db:35:a2:f5:03:
79:ae:d5:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 09:59:34 2025 by rpki-client