Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/u-3oJ0ulVml0TjAeSf2KKCOWtk0.roa
File: u-3oJ0ulVml0TjAeSf2KKCOWtk0.roa (raw, json)
Hash identifier: /8XxgbbtJRK9mmiULvwM+Vf9/dbxzUJFW5BY/JXlD7A=
Subject key identifier: BB:ED:E8:27:4B:A5:56:69:74:4E:30:1E:49:FD:8A:28:23:96:B6:4D
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 018256652ED3B5D4C9B96184A399E92DC5DF
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/u-3oJ0ulVml0TjAeSf2KKCOWtk0.roa
Signing time: Sun 31 Jul 2022 22:34:07 +0000
ROA not before: Sun 31 Jul 2022 22:34:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209861
IP address blocks: 2a06:a005:a05::/48 maxlen: 48
2a07:54c2:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:56:65:2e:d3:b5:d4:c9:b9:61:84:a3:99:e9:2d:c5:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jul 31 22:34:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bbede8274ba55669744e301e49fd8a282396b64d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ef:5c:6a:2e:16:ee:d8:a7:2f:a9:06:cc:cc:
af:77:db:30:01:cd:94:56:0f:61:ab:6d:e9:ba:ea:
87:f9:e5:96:a0:fd:75:30:a5:e2:6c:ac:99:4a:de:
65:0a:d0:f9:86:17:4a:c7:ca:ae:45:97:6e:84:43:
16:ec:b6:a2:4b:48:ae:e8:ef:e4:1c:df:15:c7:96:
2a:02:f3:ea:b0:8b:90:dc:92:7e:ba:76:69:ef:93:
4f:52:52:65:87:6a:dd:00:03:b1:3d:ea:d5:8b:93:
7a:9a:bc:79:63:eb:05:8e:9c:3a:b0:b6:d7:1c:1c:
b7:6f:84:05:f5:38:81:ae:90:f7:ba:65:09:61:bb:
8e:e4:3a:42:0b:62:0a:ea:a4:a7:b8:de:3b:b1:6e:
b4:4b:8d:c3:50:81:6a:11:73:26:dd:4c:df:21:64:
bb:46:f0:f1:f2:34:76:ab:43:97:83:c9:a0:dc:97:
a6:f6:b4:d3:1d:a0:c3:0a:be:f7:b4:f2:28:a1:85:
34:d8:45:e1:0e:ea:cb:b6:81:43:54:69:e6:06:c8:
72:f3:67:6d:9d:86:68:a2:71:44:36:1b:1a:53:e3:
89:cb:55:17:39:ed:68:9f:77:fd:ad:eb:84:4a:78:
8b:c2:7b:ab:30:69:12:5f:bc:8e:3d:53:7f:80:6d:
89:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:ED:E8:27:4B:A5:56:69:74:4E:30:1E:49:FD:8A:28:23:96:B6:4D
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/u-3oJ0ulVml0TjAeSf2KKCOWtk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:a05::/48
2a07:54c2:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
39:f0:01:2a:ca:d9:b4:5c:f2:46:6c:7d:a7:96:4a:2c:d3:54:
c7:0a:64:d1:94:be:0c:34:d1:85:26:59:0b:85:3d:20:06:e3:
2d:2f:ca:72:9d:4d:5d:99:ed:ea:85:e1:01:1c:95:b4:99:2a:
83:3b:b9:3e:4e:09:fa:a5:95:4c:f6:2f:fd:38:45:3c:ef:9d:
d0:f5:b9:5a:95:e7:54:3b:3b:c8:8a:a3:f4:3b:f1:4e:ae:fb:
1b:39:37:6c:da:8c:82:66:45:95:0f:58:cb:fe:7c:00:4b:98:
b7:31:71:77:4a:5e:02:4d:ad:de:4c:e4:00:8d:50:46:37:f5:
56:d8:21:c1:df:14:05:69:b4:e9:cb:60:19:3d:17:cc:c5:2d:
c7:ce:2f:e9:fc:b1:f8:bf:59:c1:d4:c0:60:3c:9a:7c:22:38:
3a:59:b2:13:4c:3a:b3:fd:c5:32:de:47:5b:a8:16:50:a8:0f:
8c:55:81:f8:ba:b2:8e:8b:bb:65:30:c2:be:bc:1b:00:1b:90:
14:f4:23:98:23:8a:e9:21:6f:1c:64:4c:d8:b2:d9:39:54:a1:
d5:7f:f6:43:1d:7d:a8:0e:4f:64:74:f1:02:c4:41:48:6b:f8:
01:eb:26:39:71:75:81:ea:42:89:b0:c8:4d:93:e8:c3:17:21:
50:53:91:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:09:37 2025 by rpki-client