Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/x5DsqgUmyQGNDio_JR54hANqyXQ.roa
File: x5DsqgUmyQGNDio_JR54hANqyXQ.roa (raw, json)
Hash identifier: PXJ3rd/LLfEUWUPg+kunaPTiqKuii1SdJ0R+WrME+KE=
Subject key identifier: C7:90:EC:AA:05:26:C9:01:8D:0E:2A:3F:25:1E:78:84:03:6A:C9:74
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0184B8D0F32AA1CB5E7FC374B13F4981B836
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/x5DsqgUmyQGNDio_JR54hANqyXQ.roa
Signing time: Sun 27 Nov 2022 11:20:12 +0000
ROA not before: Sun 27 Nov 2022 11:20:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203843
IP address blocks: 2a06:a005:150a::/48 maxlen: 48
2a06:a005:108f::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:b8:d0:f3:2a:a1:cb:5e:7f:c3:74:b1:3f:49:81:b8:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Nov 27 11:20:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c790ecaa0526c9018d0e2a3f251e7884036ac974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b6:8a:55:fd:13:76:e4:58:c8:48:ea:6a:ea:
63:c6:3e:ce:f9:be:3b:4f:4f:8b:35:29:3e:84:6a:
44:07:0c:e6:af:a9:e9:23:c2:6a:45:19:ae:36:07:
84:ee:09:ab:b2:5e:f3:e0:33:d0:a5:41:2e:c5:fb:
e8:ea:ed:6e:8a:bd:39:8a:b1:da:e9:83:7f:a3:16:
ee:e3:f1:fb:fa:51:d5:5d:cc:84:b5:07:a9:44:b8:
b5:d9:77:22:6d:6f:29:58:43:f5:8f:28:37:18:28:
43:a8:61:aa:88:2c:e4:74:0b:6b:a4:66:3e:8b:91:
ab:1e:e6:14:15:2a:bc:14:ed:fc:9c:1d:d7:f1:bd:
c4:5e:83:f0:ce:20:db:4a:cc:44:40:69:7d:bf:0b:
9c:29:af:11:93:bf:50:d0:1e:7e:2b:2b:78:1d:3f:
e4:e1:14:e9:4b:83:28:2f:11:6c:fa:24:5e:aa:63:
42:5b:a9:c2:7e:a0:f7:24:2f:0a:ad:c2:09:0e:4c:
42:ee:1f:bb:70:fa:99:b2:42:0f:e8:47:21:f5:29:
a3:cd:2d:90:45:fa:1e:3f:7c:37:2b:09:2d:9f:9d:
9e:43:7f:fc:bf:d7:f7:2c:ee:a0:e3:41:34:4d:6a:
2f:ec:10:d1:7b:1c:dc:c8:d3:d8:59:b0:8d:3a:ea:
a5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:90:EC:AA:05:26:C9:01:8D:0E:2A:3F:25:1E:78:84:03:6A:C9:74
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/x5DsqgUmyQGNDio_JR54hANqyXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:108f::/48
2a06:a005:150a::/48
Signature Algorithm: sha256WithRSAEncryption
13:4c:67:95:60:66:0e:33:fd:56:cd:5a:43:8f:9b:65:7a:70:
89:04:a0:a8:25:5c:31:e1:9e:40:1a:0e:85:2d:bf:3b:7a:16:
f9:34:a0:ca:08:c3:8c:47:31:e0:d7:4c:68:8c:92:31:7c:bf:
fc:0e:19:ae:58:cf:e5:f8:5a:b9:d3:d8:6a:ff:5f:7b:d3:b3:
4c:e3:d4:a5:3c:ff:51:c7:33:ca:c9:2b:ab:33:27:8b:29:96:
6b:d7:03:85:86:73:0d:db:ba:c4:c8:5a:aa:d3:1a:39:5b:68:
23:53:34:e2:f8:00:a3:99:b0:26:7b:ed:ad:af:dc:1b:30:14:
50:f8:6d:58:11:08:54:5e:b2:be:56:bf:9d:44:70:24:61:0e:
64:65:f4:ea:2e:a7:53:2a:36:78:d4:83:5c:94:1b:08:6f:af:
d0:2f:83:08:94:12:1e:8a:eb:37:c2:92:99:3b:00:75:6c:8d:
9a:12:97:d9:58:91:95:4c:3d:46:c7:4c:a9:41:ff:49:79:c4:
a7:e7:a8:38:44:9d:2c:e3:86:4b:ac:25:49:36:10:1b:cd:a1:
e1:79:75:97:02:3a:9d:e9:5f:56:44:14:fc:db:bf:f1:33:34:
72:cc:7a:42:be:6c:5b:1f:46:7f:12:6d:f3:4a:20:59:b5:39:
99:f7:7f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:16:30 2025 by rpki-client