Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/vlT8wCcyAa8Y2V5rAXcB3Egy-Ds.roa
File: vlT8wCcyAa8Y2V5rAXcB3Egy-Ds.roa (raw, json)
Hash identifier: UkgL8Dj5iqHhvwq4D3QqB7vdRm3u77ad44482BGUU8k=
Subject key identifier: BE:54:FC:C0:27:32:01:AF:18:D9:5E:6B:01:77:01:DC:48:32:F8:3B
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 1A507D62
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/vlT8wCcyAa8Y2V5rAXcB3Egy-Ds.roa
Signing time: Mon 30 May 2022 21:29:14 +0000
ROA not before: Mon 30 May 2022 21:29:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211139
IP address blocks: 2a06:a005:2c0::/44 maxlen: 48
2a06:a005:2d6::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 441482594 (0x1a507d62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: May 30 21:29:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=be54fcc0273201af18d95e6b017701dc4832f83b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:55:15:dc:27:dc:0f:9e:3a:bc:cc:3b:bd:7d:
ea:2c:b4:68:48:6f:e0:62:fa:ac:07:9d:bd:d7:08:
8f:98:4c:5e:72:ec:56:5a:d6:bd:39:18:db:7b:6d:
d0:6c:51:c4:a4:c0:7c:db:25:78:b1:26:dd:4a:f0:
bd:ab:6f:43:99:45:61:47:d1:5b:60:cc:04:6e:dc:
f5:e6:87:88:20:3d:43:dd:6a:b8:f2:cc:76:3f:90:
61:23:78:d9:4d:2e:85:c3:7c:f0:be:1c:11:af:71:
64:b0:50:00:55:13:af:60:81:00:6e:84:ee:58:5b:
a5:f7:c0:b9:9b:1c:04:d9:63:e8:ee:a9:53:2c:76:
c0:52:e8:31:0d:32:79:83:2d:d9:d6:1a:69:57:29:
bd:b4:f1:c3:2d:11:ff:c6:b6:03:c7:17:9b:d4:d4:
70:68:a1:10:8e:fc:ac:de:28:5a:9e:90:de:9d:90:
24:e5:74:ad:b1:80:51:71:bb:70:eb:fe:15:34:ad:
1e:3b:4c:b7:23:dd:7c:66:7b:51:8b:a7:57:ab:2e:
e6:f8:cb:22:2b:b6:6b:80:b8:26:f2:80:0e:da:f7:
e5:51:01:59:ee:22:2f:0c:a7:cb:83:be:48:4c:d9:
08:7c:f4:fc:b4:53:05:f1:d6:02:41:ea:5b:1d:09:
c6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:54:FC:C0:27:32:01:AF:18:D9:5E:6B:01:77:01:DC:48:32:F8:3B
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/vlT8wCcyAa8Y2V5rAXcB3Egy-Ds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2c0::/44
2a06:a005:2d6::/48
Signature Algorithm: sha256WithRSAEncryption
92:20:26:01:65:3f:dc:59:a7:10:43:92:9c:21:d7:ff:89:0c:
7f:d7:50:57:11:2c:d1:2f:89:82:b1:b2:d1:bf:68:6c:99:ad:
66:25:a0:a5:64:7c:1b:33:81:90:38:c3:09:62:cb:6f:cb:5c:
62:39:20:d4:b0:47:bb:dd:bb:64:8b:81:0f:81:b8:07:31:28:
22:83:5e:36:03:55:6b:30:3a:86:6b:83:fd:42:b7:18:7b:c1:
50:fb:cf:3d:ac:bd:20:7a:ad:1a:21:7a:ce:bd:fa:09:38:1b:
8d:fe:2c:8c:af:12:64:db:40:f8:e1:0e:9f:34:de:cb:65:7b:
b5:73:cc:17:49:16:75:cc:e0:80:37:14:52:1e:52:71:84:b5:
41:15:b4:c3:63:e6:d1:18:76:9e:b8:e8:1f:26:0b:c6:e0:fc:
ff:3c:93:a4:26:08:85:95:14:d6:bb:49:93:5d:0b:d1:bd:db:
8d:76:99:08:04:b5:bf:89:c8:66:f8:4c:03:3d:6b:67:cd:be:
8f:bc:f8:f4:9f:b9:8f:05:a4:5a:8a:d6:a0:87:c0:32:ad:4f:
12:a4:4b:1d:03:40:b6:19:50:c3:49:1d:7e:da:f3:a0:e4:10:
d3:5e:a8:18:41:6c:eb:59:3b:2d:cd:14:07:07:00:6e:d6:39:
77:e6:34:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 09:58:07 2025 by rpki-client