Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/yo7vz1XFsyK6KRHQxYJik0ku0N0.roa
File: yo7vz1XFsyK6KRHQxYJik0ku0N0.roa (raw, json)
Hash identifier: AkWqEt3Jm232WiZT4JgoNaPLfh0EdAiT5e+gto+JGh4=
Subject key identifier: CA:8E:EF:CF:55:C5:B3:22:BA:29:11:D0:C5:82:62:93:49:2E:D0:DD
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 018405BC8C28D333142699A48789E2CC940E
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/yo7vz1XFsyK6KRHQxYJik0ku0N0.roa
Signing time: Sun 23 Oct 2022 16:45:53 +0000
ROA not before: Sun 23 Oct 2022 16:45:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202199
IP address blocks: 2a06:a005:1640::/44 maxlen: 48
2a06:a005:1505::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:05:bc:8c:28:d3:33:14:26:99:a4:87:89:e2:cc:94:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Oct 23 16:45:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ca8eefcf55c5b322ba2911d0c5826293492ed0dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3a:42:fa:c3:d3:ef:f5:18:6f:31:af:95:5d:
c1:9b:ed:fd:30:8e:89:dd:4f:cf:77:39:04:ff:fe:
eb:c9:0b:53:04:53:5b:e9:4c:fa:70:16:10:4b:e0:
0f:eb:55:1e:b7:4f:ce:2d:ee:9e:19:d0:07:cb:2f:
c7:7c:79:df:dc:97:33:ab:c2:ca:36:73:b1:bb:7d:
d0:3c:3b:61:59:52:c0:d9:a5:ec:bc:0f:a8:cd:7e:
ad:07:88:bb:9d:39:9d:8e:dc:24:0e:da:d7:b3:49:
26:20:43:1b:6d:7f:2c:d0:f4:01:5c:ef:10:67:a2:
69:e4:7a:d2:8c:c2:e2:a7:b0:c0:9b:82:44:0d:54:
6d:84:16:11:c6:19:78:12:f6:6f:09:cf:3b:a3:06:
b0:b4:b5:94:58:e0:23:eb:93:bf:48:76:28:13:20:
2c:8a:61:c6:57:cb:2f:65:43:49:02:f7:e3:e1:50:
04:1d:be:26:33:fd:10:56:82:82:dd:cd:71:7e:10:
1e:be:b9:b6:e7:9d:d2:24:4b:f9:0c:0e:c9:d2:80:
a1:9f:e9:c0:7a:98:9e:bc:ab:d6:a5:b2:e2:cf:8e:
98:97:61:d6:96:78:c7:a6:ca:60:83:10:8b:3f:45:
fe:26:04:52:24:36:b0:1b:3f:84:58:8e:67:b9:74:
d6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:8E:EF:CF:55:C5:B3:22:BA:29:11:D0:C5:82:62:93:49:2E:D0:DD
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/yo7vz1XFsyK6KRHQxYJik0ku0N0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1505::/48
2a06:a005:1640::/44
Signature Algorithm: sha256WithRSAEncryption
7f:45:d7:1b:54:a2:7d:44:fd:28:df:a3:be:6a:fd:59:25:a8:
aa:bc:0d:cd:33:bf:fe:4c:a8:a8:7a:9c:e3:cf:bb:9e:e4:9e:
9a:0f:67:5a:4a:a0:c9:8a:7a:4c:20:25:84:10:bd:27:8f:3d:
ff:87:04:71:fb:51:c6:8c:34:cb:da:5a:40:c0:37:a9:23:0c:
3d:f2:30:f8:f4:12:84:7f:dc:25:51:db:ee:b8:82:08:50:0d:
be:50:e7:8d:21:81:6a:2d:e4:88:b8:8f:bb:a9:94:df:46:74:
42:fa:11:95:be:b5:86:42:28:f2:dc:8e:d4:db:62:5c:d8:c4:
f1:aa:bc:a5:18:96:63:2b:fb:03:40:fe:13:f7:c6:a2:60:35:
08:c7:c2:32:9d:70:ea:bf:56:46:dd:aa:72:26:d6:1a:2a:7f:
a8:db:1b:23:9b:05:e6:cc:7b:36:b3:14:be:09:fe:0f:dc:4c:
ce:f7:13:eb:a8:02:bb:eb:a5:2d:69:79:fd:e3:4d:ee:74:16:
0b:a7:82:eb:16:51:4e:85:4e:36:d0:b9:ce:2d:a3:b1:e3:d5:
63:36:19:25:c7:71:9f:ea:e6:98:f8:17:77:23:fa:3b:a7:5d:
84:61:d6:a2:8a:5c:1b:94:6e:e9:d7:ba:2b:83:3f:d0:cc:b7:
9a:18:7c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:48:13 2025 by rpki-client