Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/yiunJ5vXre0WrBG71OryE4BWMkE.roa
File: yiunJ5vXre0WrBG71OryE4BWMkE.roa (raw, json)
Hash identifier: kOC1Tobzfhr1LK2wUCQVsRU0UWPHpHf8d5fPIo4SQ58=
Subject key identifier: CA:2B:A7:27:9B:D7:AD:ED:16:AC:11:BB:D4:EA:F2:13:80:56:32:41
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0181D3CFF1790E23FEC88ADC2384A6256ED7
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/yiunJ5vXre0WrBG71OryE4BWMkE.roa
Signing time: Wed 06 Jul 2022 14:00:29 +0000
ROA not before: Wed 06 Jul 2022 14:00:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204268
IP address blocks: 2a06:a005:1000::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d3:cf:f1:79:0e:23:fe:c8:8a:dc:23:84:a6:25:6e:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jul 6 14:00:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ca2ba7279bd7aded16ac11bbd4eaf21380563241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5f:5b:8f:17:62:d4:7d:51:09:f6:ba:00:c5:
76:5f:a6:34:e4:e9:8d:e3:ad:8d:4d:53:2d:90:b1:
e7:29:12:85:94:c9:71:31:4f:7e:29:c3:6c:e6:a2:
1f:17:86:c9:53:27:3f:e5:53:22:de:f2:68:d8:ca:
ff:ee:ec:6e:b2:91:25:2d:10:aa:9d:74:7c:53:64:
e9:f3:49:bf:ca:62:0d:4e:79:59:ba:98:54:e1:64:
28:1f:5f:c0:d9:14:55:fc:09:e3:31:a7:24:eb:fc:
10:41:64:94:59:60:82:d3:9e:49:8d:1a:60:e8:09:
84:df:1a:5b:bc:e8:b4:e8:05:c2:f1:33:c9:6e:f4:
d4:5c:1a:c2:d6:18:9d:f4:3a:de:d9:08:e3:1a:9c:
5b:29:e3:b3:e1:49:84:e9:bb:a3:16:33:2d:b9:32:
f1:09:ce:3a:6f:34:a8:2e:76:0b:07:7a:04:ee:b1:
fc:7b:fd:7a:2a:55:27:5c:6b:6a:2c:9d:a9:fc:c5:
cd:34:aa:f2:1d:1b:e0:ae:eb:77:57:41:7f:c9:f1:
a1:dc:71:e2:b4:19:d4:82:88:97:52:b9:a8:60:03:
58:f8:e8:11:25:58:f3:d5:9f:a9:00:3d:3e:ce:ab:
6c:f2:90:36:e2:36:46:cc:46:d1:57:49:d1:94:61:
94:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:2B:A7:27:9B:D7:AD:ED:16:AC:11:BB:D4:EA:F2:13:80:56:32:41
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/yiunJ5vXre0WrBG71OryE4BWMkE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1000::/44
Signature Algorithm: sha256WithRSAEncryption
23:b2:81:03:93:5d:91:91:d2:b7:ce:eb:3e:f8:40:5e:5f:11:
f7:07:b8:57:18:d2:40:6a:1b:b3:09:b7:11:13:05:ae:c7:74:
b3:3d:b5:f1:0c:1f:49:33:41:72:2e:71:fd:76:21:cf:20:15:
26:85:bb:f4:52:75:03:ee:72:ab:4c:dd:02:aa:59:22:7b:d5:
58:61:95:7f:78:2f:48:a2:44:ef:f7:bc:b2:5c:dd:80:ce:b9:
73:e1:4a:43:86:22:c6:3d:d2:68:88:ec:da:e4:83:44:da:57:
09:5f:58:79:78:de:1d:2f:46:89:4f:6f:ef:26:37:ed:e8:ad:
cc:89:91:50:1b:39:8f:9d:2b:59:f8:e5:f8:bc:9a:7e:a0:d2:
db:01:83:b9:92:e2:13:8d:a0:79:a2:b6:01:18:46:a3:27:d2:
1d:35:a7:28:83:ca:b2:24:5e:d0:e8:b7:8f:22:3a:f0:54:ba:
bd:71:3c:e1:dd:64:6f:60:b1:2f:f6:d6:5a:79:97:27:d3:07:
fc:04:a6:69:8f:38:47:a6:64:1f:64:a1:99:22:f2:e5:59:50:
a7:36:84:7c:8a:47:8d:2a:51:88:d9:5b:25:3a:90:3f:83:ef:
bf:07:fa:3c:ee:d4:9b:ff:8f:92:56:88:d9:05:78:32:fa:5d:
ac:24:53:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:49:23 2025 by rpki-client