Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/xe6MXCWTviyWSg9ipaj9DpXU3IY.roa
File: xe6MXCWTviyWSg9ipaj9DpXU3IY.roa (raw, json)
Hash identifier: K2xwWcEsl01sKmbf+yMp9OEoIE80bTcA5u0bQ9YGXOs=
Subject key identifier: C5:EE:8C:5C:25:93:BE:2C:96:4A:0F:62:A5:A8:FD:0E:95:D4:DC:86
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 16C0C20D
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/xe6MXCWTviyWSg9ipaj9DpXU3IY.roa
Signing time: Tue 15 Mar 2022 23:43:34 +0000
ROA not before: Tue 15 Mar 2022 23:43:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 147028
IP address blocks: 2a06:a005:4::/48 maxlen: 48
2a06:a005:5::/48 maxlen: 48
2a06:a005:6::/48 maxlen: 48
2a06:a005:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 381731341 (0x16c0c20d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Mar 15 23:43:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c5ee8c5c2593be2c964a0f62a5a8fd0e95d4dc86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d2:a8:00:19:bb:76:8f:f7:34:e4:e3:4f:28:
6e:91:c3:e1:a0:b8:80:b7:45:37:29:8f:af:7b:93:
d7:56:46:31:91:c3:d8:ac:ff:3e:e0:77:fc:97:9c:
61:4c:d5:f5:7d:86:74:33:72:fa:67:b3:41:d0:cf:
bf:b4:c5:2b:8b:2f:20:97:47:23:fa:c8:ff:6a:e1:
78:d9:42:9d:a4:7d:ac:30:4b:16:b9:ca:b5:27:fc:
f8:35:ea:e8:d4:88:d7:94:1a:e9:71:8b:2c:9a:0f:
e1:6c:8f:e1:90:da:f1:d5:66:21:fb:00:44:6a:fe:
81:75:37:a0:7d:05:05:8a:ef:8e:ba:4e:ad:69:b8:
d5:b8:58:ef:ec:98:8d:4c:64:28:19:0c:36:48:6e:
32:7b:42:15:38:e1:88:34:86:b2:45:71:a4:df:ee:
4a:2c:ea:2e:86:22:a8:a7:ad:d0:d6:60:a2:6f:a5:
d4:68:e7:15:e0:96:18:c5:52:5c:44:e8:0c:f0:d1:
55:80:36:9c:28:59:32:f9:08:d0:f7:08:0f:e8:44:
2c:a9:3e:1b:a7:7e:2e:0f:59:be:1d:e5:16:3e:3e:
ae:8e:10:ce:e9:38:6d:53:31:57:a1:7a:a1:09:14:
0f:00:d7:5b:d2:2e:c5:8e:16:7e:97:02:88:5d:6c:
fb:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:EE:8C:5C:25:93:BE:2C:96:4A:0F:62:A5:A8:FD:0E:95:D4:DC:86
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/xe6MXCWTviyWSg9ipaj9DpXU3IY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:3::-2a06:a005:6:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
04:56:dd:33:95:c7:e0:61:c6:5c:a5:ae:65:0d:3b:c9:28:dc:
83:64:b8:ec:94:3e:30:d3:4a:31:2e:07:ab:f4:e4:da:b9:02:
41:6e:3a:b4:a7:86:cd:07:4b:72:13:da:d1:42:a9:74:64:f3:
74:0f:1e:80:9d:07:30:b7:10:c9:61:6a:9c:d1:4b:b9:83:d1:
6d:66:de:54:c4:a6:7b:4d:82:66:04:06:20:7b:48:f0:c2:ab:
b9:51:bb:21:40:c8:d7:a9:26:4d:1f:7a:93:08:4b:d1:0e:b4:
95:ef:d0:e0:47:61:bd:54:26:01:a8:87:e7:6e:9b:71:de:c5:
f3:08:09:08:2b:42:b9:16:da:0e:a9:b6:c0:1e:cd:7d:e1:3f:
57:a4:80:08:d7:8f:6d:92:f9:ba:0d:6e:7c:0b:96:f3:9e:f2:
76:ff:d4:b6:85:1e:38:42:6c:75:0b:5c:83:dd:7a:78:c7:09:
31:30:c5:5d:ba:d0:ac:cb:0b:c7:d6:8d:fe:9c:0b:97:30:24:
33:02:9a:1e:34:bf:52:f8:a1:1a:f7:5e:2f:93:c0:e4:c3:29:
f2:d7:cb:fd:86:40:d9:92:0b:0a:1c:94:25:ed:6e:5b:6d:05:
17:9c:d1:0e:e6:6a:6d:c1:98:ee:51:4f:f7:fa:22:e8:af:7f:
08:6d:1f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 16:20:48 2025 by rpki-client