Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/LHSwq9dhjf4R9fXM5IA8uhFpL6w.roa
File: LHSwq9dhjf4R9fXM5IA8uhFpL6w.roa (raw, json)
Hash identifier: XW7Jr86/tnAt+7Ck/j+cc3v2/LB7e9CDmn6tbKfPd74=
Subject key identifier: 2C:74:B0:AB:D7:61:8D:FE:11:F5:F5:CC:E4:80:3C:BA:11:69:2F:AC
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 19972994
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/LHSwq9dhjf4R9fXM5IA8uhFpL6w.roa
Signing time: Mon 09 May 2022 00:05:30 +0000
ROA not before: Mon 09 May 2022 00:05:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208385
IP address blocks: 2a06:a005:854::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 429336980 (0x19972994)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: May 9 00:05:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2c74b0abd7618dfe11f5f5cce4803cba11692fac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:9c:62:95:27:64:fd:ae:cd:8d:d0:35:b3:0c:
62:32:45:e9:08:05:10:38:11:0c:1d:56:45:fd:bf:
5e:a4:24:89:4c:52:82:a9:8f:10:ae:a8:bd:7d:56:
0b:e8:bf:a9:16:c0:83:a7:a2:ba:fa:f3:16:b9:45:
cd:a6:5a:21:dc:40:76:58:fb:3f:78:45:bf:c2:5f:
1e:56:b7:09:7a:9f:bf:53:fd:9e:f5:3a:b2:62:cd:
77:e3:34:fa:31:90:e2:9a:b9:e0:6a:aa:c9:0c:b8:
9c:3c:89:a5:6c:09:25:69:4a:e6:3d:7e:70:03:13:
58:ed:8f:78:76:52:d9:8a:55:a3:cf:35:d1:7d:b1:
a2:87:b2:66:00:f5:6b:ea:ae:45:08:55:b1:99:83:
f2:51:9f:61:2f:48:01:cb:aa:4c:5a:9e:b0:60:14:
e5:13:2b:61:0a:01:0c:73:1f:2c:0a:f3:84:84:0d:
8b:95:7d:6a:06:eb:a8:38:c1:53:46:e9:30:91:5b:
64:93:79:cc:01:ad:99:c9:77:4d:c7:95:4d:9a:06:
e3:6d:5f:b3:3f:81:bf:7d:81:1a:eb:e9:ed:3b:8a:
06:f6:84:a0:ca:b4:ee:82:1a:43:60:09:4d:7d:2e:
05:ec:30:39:23:7b:1f:00:9d:de:be:e5:97:d2:eb:
3f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:74:B0:AB:D7:61:8D:FE:11:F5:F5:CC:E4:80:3C:BA:11:69:2F:AC
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/LHSwq9dhjf4R9fXM5IA8uhFpL6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:854::/48
Signature Algorithm: sha256WithRSAEncryption
1a:3f:a9:46:e1:73:c0:a5:e8:a0:f3:50:58:41:0e:5d:9b:27:
16:72:30:3a:8a:0a:42:e9:b1:88:c7:43:f9:e3:59:33:46:95:
16:9d:b5:2f:01:95:00:19:51:64:f5:a2:4a:00:f0:8d:a1:24:
86:5f:40:f4:ba:86:c8:35:e0:12:08:4f:14:fc:61:fa:20:e4:
95:07:08:95:a2:17:48:25:bb:84:78:9a:0c:4c:d9:49:45:61:
ec:27:a7:20:fc:b3:34:ba:d8:89:e4:31:a8:a5:dc:ac:3e:7b:
ff:84:fb:7f:1e:1d:a6:19:29:21:72:56:e4:9f:2a:96:7e:d0:
4b:8d:f6:88:1b:ba:4b:cb:99:8b:ad:ec:e2:29:06:61:f4:09:
6d:97:c9:9c:20:81:45:e9:7c:1d:e9:7d:bd:b2:cf:9c:32:71:
41:92:c6:f4:95:f8:e5:05:4d:28:4b:cf:5a:94:94:55:03:b4:
fb:6c:16:ea:f7:38:51:af:a5:15:18:35:3d:a0:8e:94:2e:c1:
cf:4e:f1:c7:7e:dc:a7:6a:db:2a:0d:7b:67:89:b8:73:52:5d:
bb:2c:b4:60:06:cf:33:6c:16:e5:f3:98:31:99:3e:d7:14:4c:
0a:16:1a:e8:0c:11:1a:66:42:b2:75:a3:0c:32:08:5b:68:7b:
76:66:73:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 23:24:18 2025 by rpki-client