Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/yrHDxchRciLiwD7WcBNYGnyAQlU.roa
File: yrHDxchRciLiwD7WcBNYGnyAQlU.roa (raw, json)
Hash identifier: M/6lWfStvpjAxUTWgbL3I9ggSaydj3zg6eN17icw7aU=
Subject key identifier: CA:B1:C3:C5:C8:51:72:22:E2:C0:3E:D6:70:13:58:1A:7C:80:42:55
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0184BE8C1516A6008DB4691CBF4C99C3C970
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/yrHDxchRciLiwD7WcBNYGnyAQlU.roa
Signing time: Mon 28 Nov 2022 14:02:42 +0000
ROA not before: Mon 28 Nov 2022 14:02:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210562
IP address blocks: 2a06:a005:1c7d::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:be:8c:15:16:a6:00:8d:b4:69:1c:bf:4c:99:c3:c9:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Nov 28 14:02:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cab1c3c5c8517222e2c03ed67013581a7c804255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:78:ec:7f:d4:39:0f:30:6b:33:91:32:20:72:
13:58:6a:5b:97:48:cb:2c:b4:7d:f0:e9:d8:f3:28:
77:32:98:6c:9f:70:b2:ad:9a:2f:5f:28:fa:a9:11:
44:32:e2:01:b0:5e:0e:3f:6b:0c:e5:b4:86:f3:bd:
b5:4d:e4:e0:29:f5:24:ed:fb:b2:5a:d5:1a:3e:f6:
c4:42:2c:94:b6:46:90:6f:92:b0:17:5b:27:b4:67:
d3:f1:55:6c:88:5b:5c:06:47:0e:a7:bb:8a:1b:ee:
1a:43:48:f0:3e:87:9e:7d:63:1f:48:2f:a3:d7:0f:
4e:99:0e:47:87:11:77:9b:2a:26:f5:77:fb:ca:b9:
89:77:38:d3:d2:a3:f5:9f:5b:d1:4c:fa:cf:68:c5:
54:29:ee:fe:49:a8:b7:2d:e6:40:c4:69:61:bf:82:
0c:30:81:7b:ef:3c:a4:7a:dc:67:4d:a6:9e:0d:dc:
a3:f3:ff:11:42:96:01:7f:d0:85:ce:99:59:69:8c:
a2:1b:06:9b:83:da:9c:33:94:a1:ca:01:bf:4e:48:
26:cc:a2:86:72:46:28:7d:e6:f5:7e:2e:a0:99:fc:
e0:f2:8c:c5:2e:12:e5:ba:f7:64:bc:5a:1a:e6:6b:
38:19:70:53:43:57:d1:a1:9e:99:a9:dc:6a:5d:de:
d0:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:B1:C3:C5:C8:51:72:22:E2:C0:3E:D6:70:13:58:1A:7C:80:42:55
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/yrHDxchRciLiwD7WcBNYGnyAQlU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1c7d::/48
Signature Algorithm: sha256WithRSAEncryption
2e:2e:41:8b:c6:d6:c2:6c:68:68:21:e0:cd:c8:72:d6:d9:4e:
2b:88:d9:82:e1:79:60:ce:76:54:e4:bf:50:32:a3:da:2b:7a:
16:80:a5:d9:46:40:9b:00:63:c1:09:d3:e9:19:61:1f:0e:9f:
3a:04:11:ee:ef:98:8c:cc:ed:29:b7:4f:53:fd:8c:c2:10:6d:
50:ec:32:3f:1f:75:14:77:77:d2:8d:4b:7e:38:47:16:dd:62:
01:84:ea:40:89:d8:71:8c:67:d8:45:59:86:a4:07:dd:db:59:
dc:a9:32:59:da:72:3f:01:37:17:16:ae:8d:a7:9a:68:e1:90:
e4:18:f7:5b:43:cc:9e:8b:f7:d9:22:e6:f1:e1:54:fb:d2:77:
96:6b:c4:16:f0:dc:93:e4:ee:36:e6:da:50:e6:55:7f:2f:15:
da:9c:f9:e1:49:60:ca:ea:51:b3:68:f5:cb:e0:ad:b2:78:8e:
ae:6e:5f:42:5e:e1:8d:62:ca:11:71:37:6f:bd:5e:bc:9f:25:
8a:79:23:73:eb:62:12:70:f2:65:b0:06:27:72:72:76:5d:de:
ab:25:39:37:b3:85:b2:73:85:04:9a:21:a5:f7:72:80:42:bc:
53:9e:34:ba:dd:b2:89:87:1c:b0:83:34:3a:dd:b9:6d:3b:53:
32:df:67:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:16:43 2025 by rpki-client