Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/usJgpbr7-hFX7Fm7Z2VxlPfU-mQ.roa
File: usJgpbr7-hFX7Fm7Z2VxlPfU-mQ.roa (raw, json)
Hash identifier: qocS3ZOyIEIinfsFVOABWd1KSKfzEko4304nh0ufvOs=
Subject key identifier: BA:C2:60:A5:BA:FB:FA:11:57:EC:59:BB:67:65:71:94:F7:D4:FA:64
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 1B0D35EB
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/usJgpbr7-hFX7Fm7Z2VxlPfU-mQ.roa
Signing time: Mon 20 Jun 2022 18:58:45 +0000
ROA not before: Mon 20 Jun 2022 18:58:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204550
IP address blocks: 2a06:a005:d26::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 453850603 (0x1b0d35eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jun 20 18:58:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bac260a5bafbfa1157ec59bb67657194f7d4fa64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:36:0e:c6:cc:44:8e:c7:59:cc:53:53:74:ae:
dd:c3:c0:a0:47:b6:a7:ac:82:d3:c4:73:10:79:9b:
a1:63:46:1f:7c:f3:db:34:dc:8a:d0:83:8d:a9:32:
4c:6b:61:9a:40:57:e4:b6:13:af:5a:4b:71:b7:d8:
6d:2f:a7:1a:60:62:29:99:e5:02:96:78:cd:45:d1:
ba:3b:93:ca:12:a3:21:6c:70:bb:be:11:9b:30:71:
ae:c7:f6:6e:96:29:eb:a4:5c:ca:6a:69:63:e5:3f:
af:62:f1:bd:65:3e:a8:df:4f:30:3e:40:47:8a:c3:
f8:22:c4:07:17:21:db:ea:7c:7e:c6:24:a6:2f:21:
71:d6:2c:73:d9:69:b9:b4:26:f4:04:b6:c2:5d:9c:
bc:2b:f7:07:e6:7f:20:85:de:4d:35:43:5a:61:40:
23:8d:01:95:86:16:ed:c7:21:eb:54:cf:d7:09:fe:
35:16:00:40:56:5c:85:68:ff:cc:30:a4:a9:09:09:
fb:40:04:79:10:ac:60:dd:88:53:42:e3:e9:af:0e:
22:73:85:fe:46:3d:e9:22:14:ad:a2:9f:c1:f8:09:
73:a2:96:31:78:c2:87:dc:bf:e6:c8:d8:bd:bd:72:
20:55:04:3c:f4:c0:2a:20:1b:86:79:8d:95:bd:f6:
fc:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:C2:60:A5:BA:FB:FA:11:57:EC:59:BB:67:65:71:94:F7:D4:FA:64
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/usJgpbr7-hFX7Fm7Z2VxlPfU-mQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:d26::/48
Signature Algorithm: sha256WithRSAEncryption
32:b2:4a:d3:89:f6:c6:05:2c:f9:f7:ac:b8:f9:93:25:c2:6d:
6c:08:b1:dc:a6:05:30:f8:75:48:45:c1:43:d3:4e:81:ef:c5:
67:51:0b:b8:35:8b:e1:c1:1f:a0:d8:75:b1:01:7c:bf:f1:9c:
38:58:3e:a2:d2:2d:2e:a0:4d:b2:b6:4b:bd:bb:82:e3:d8:16:
11:c6:6b:8b:cb:bb:4b:9b:96:05:10:54:37:67:50:e3:aa:02:
4d:7c:9d:09:e7:9d:82:78:ff:6a:bd:14:64:cd:74:df:d9:07:
7b:13:60:97:a3:b0:d5:20:ec:6a:65:7b:d5:63:02:f7:9c:8b:
d8:12:90:a0:2c:12:ed:cf:15:09:a7:35:1a:b4:62:4d:94:8f:
17:51:4d:79:18:38:66:fa:9e:50:83:4f:77:de:3b:ea:c3:a2:
bc:42:30:f6:30:df:db:19:2d:9d:7a:88:aa:52:05:f9:cc:d5:
19:57:1b:2d:b9:e0:3e:13:a6:40:23:40:f5:de:d0:53:e1:ea:
54:a1:1a:d7:49:b8:dc:a4:bd:27:e2:99:12:62:6d:d4:cd:32:
e4:6c:b6:59:c9:63:b1:a0:a1:26:f0:98:c4:b7:69:ad:f9:a3:
a1:83:9e:d8:5c:96:b2:8f:f6:80:56:e3:0e:8d:2d:a3:e1:12:
03:5f:ae:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:09:27 2025 by rpki-client