Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/0d6655-c0eb-4626-96d5-e63c91adce7f/1/a5BvzhKkKgNIrlfggpHqvjOR9aQ.roa
File: a5BvzhKkKgNIrlfggpHqvjOR9aQ.roa (raw, json)
Hash identifier: dEnnR8B+4ToU5y7KFBIs83RELZnLbdh/fDQM1Q9oIpA=
Subject key identifier: 6B:90:6F:CE:12:A4:2A:03:48:AE:57:E0:82:91:EA:BE:33:91:F5:A4
Certificate issuer: /CN=5485c8ef037cb897c8e94cf621c5a37d651c5ea5
Certificate serial: 0194221FECE9BD088CF6FB6EA3D053AB6E95
Authority key identifier: 54:85:C8:EF:03:7C:B8:97:C8:E9:4C:F6:21:C5:A3:7D:65:1C:5E:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/0d6655-c0eb-4626-96d5-e63c91adce7f/1/a5BvzhKkKgNIrlfggpHqvjOR9aQ.roa
Signing time: Wed 01 Jan 2025 13:48:25 +0000
ROA not before: Wed 01 Jan 2025 13:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199086
IP address blocks: 2001:678:4cc::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:ec:e9:bd:08:8c:f6:fb:6e:a3:d0:53:ab:6e:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5485c8ef037cb897c8e94cf621c5a37d651c5ea5
Validity
Not Before: Jan 1 13:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6b906fce12a42a0348ae57e08291eabe3391f5a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9b:1d:53:8b:97:0e:c5:b9:58:ba:7e:cb:93:
c9:88:8e:24:fe:f6:f1:22:33:cb:05:3e:28:16:fb:
44:3c:b1:4a:a7:e8:33:21:d2:fa:fe:84:8b:93:46:
ab:00:f5:50:d2:b3:04:ef:dd:e2:3e:5c:76:7b:4c:
d8:4c:36:c0:a1:ae:51:ee:78:ce:86:d6:58:bf:08:
fc:fd:4a:d5:a1:19:3e:d4:1c:31:1f:26:88:87:7c:
08:80:53:a9:46:6a:fe:c5:49:e6:6e:9a:c3:47:d4:
26:04:e2:e0:a4:e0:98:6a:cf:52:7a:0d:2f:e1:77:
00:c5:f1:6c:07:e6:ae:09:59:17:bb:2a:33:d8:f7:
32:46:95:56:08:63:04:29:d2:ae:be:e7:24:bb:56:
8c:8c:29:0a:47:41:26:f7:2b:49:5f:9a:3b:09:79:
3c:78:3f:e0:ed:6c:06:ef:9e:4a:53:6c:b2:35:7b:
3b:20:b2:ef:d6:1f:c3:0f:16:b5:72:11:91:f8:bb:
bb:a5:a7:00:cc:c4:fd:3a:d7:b2:e0:d8:c2:1c:0a:
e9:c2:e1:6f:e1:a5:b0:4b:11:6e:80:37:bb:02:86:
77:68:dd:b4:26:30:43:c1:c2:13:1b:c3:45:bd:c7:
63:08:f7:98:b8:e4:52:50:dc:89:74:10:26:d6:2a:
ab:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:90:6F:CE:12:A4:2A:03:48:AE:57:E0:82:91:EA:BE:33:91:F5:A4
X509v3 Authority Key Identifier:
keyid:54:85:C8:EF:03:7C:B8:97:C8:E9:4C:F6:21:C5:A3:7D:65:1C:5E:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0d6655-c0eb-4626-96d5-e63c91adce7f/1/a5BvzhKkKgNIrlfggpHqvjOR9aQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0d6655-c0eb-4626-96d5-e63c91adce7f/1/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:4cc::/48
Signature Algorithm: sha256WithRSAEncryption
10:b3:ab:28:99:ff:a0:80:fe:bd:94:11:e0:ef:ae:89:c5:0a:
75:8f:e3:63:ff:11:2b:b0:47:11:24:47:17:f7:c8:81:ae:d1:
dc:09:ed:63:7a:0f:af:e1:5a:5c:02:2c:84:c1:38:53:c1:05:
56:3d:e1:a3:3f:ea:79:2e:c5:4d:4a:30:a1:37:bb:b9:7a:15:
a4:0d:ca:0b:d2:8f:a2:e3:a9:da:1e:a6:78:51:47:4f:9c:19:
e9:10:1f:ec:16:81:85:78:13:f3:ce:14:6d:8a:ff:c9:b2:50:
28:45:c0:ae:01:02:47:be:1f:88:f7:13:f0:bc:80:ac:72:f4:
61:e9:56:0b:79:d1:92:96:76:6a:8b:0a:42:ee:a5:34:78:59:
b8:7a:c9:ca:69:96:dc:0a:f1:93:93:58:6d:fc:a9:e0:46:98:
63:10:57:43:4f:5b:c2:be:f0:b6:38:8a:b6:82:b1:af:db:1e:
cf:23:95:d3:64:3b:a9:03:60:4d:41:0b:7c:d3:0a:5f:29:9d:
e6:9f:84:5e:f0:0a:bd:05:61:01:82:46:19:42:ca:59:d8:13:
3c:8c:a7:68:a0:f1:2a:6f:71:4e:b9:d1:ee:6e:e4:b3:56:2a:
64:f3:2c:69:74:87:f9:dc:51:b0:ae:e6:52:ef:c2:fe:4e:f2:
e7:46:62:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:48:01 2025 by rpki-client