Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/1l4j-1nqk2Sj7eMLUd635axi0_4.roa
File: 1l4j-1nqk2Sj7eMLUd635axi0_4.roa (raw, json)
Hash identifier: kJfZTUlQ93CxbA2j/pLpiIls1GpmzU2vIGEIeBNOPvo=
Subject key identifier: D6:5E:23:FB:59:EA:93:64:A3:ED:E3:0B:51:DE:B7:E5:AC:62:D3:FE
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0184671D9C01850D1101AC2D6D9871C87D9F
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/1l4j-1nqk2Sj7eMLUd635axi0_4.roa
Signing time: Fri 11 Nov 2022 14:35:04 +0000
ROA not before: Fri 11 Nov 2022 14:35:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202199
IP address blocks: 2a06:a005:1640::/44 maxlen: 48
2a06:a005:1505::/48 maxlen: 48
2a05:dfc7:1700::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:67:1d:9c:01:85:0d:11:01:ac:2d:6d:98:71:c8:7d:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Nov 11 14:35:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d65e23fb59ea9364a3ede30b51deb7e5ac62d3fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5e:30:f6:5e:cd:e3:f0:bb:69:e4:38:56:59:
4d:43:b3:d8:19:2f:04:aa:40:18:9c:6e:3f:93:37:
7c:6c:75:de:78:00:fe:45:a0:32:b5:30:2b:40:89:
27:4a:af:e5:35:f3:c5:f9:93:1d:07:87:bc:37:82:
57:c3:14:14:2a:05:bd:e1:88:d4:05:8f:26:db:03:
15:46:3f:82:61:5f:cc:8b:24:e6:c2:2d:d1:23:9d:
fd:04:0d:c6:ad:65:a3:4d:1f:13:5a:39:5a:b3:71:
9e:ad:9a:5e:b1:2b:c1:61:be:82:9f:b3:48:0a:a9:
57:14:8f:f4:9c:c0:9d:46:cd:86:06:d9:e8:92:1f:
46:10:d0:47:5a:a6:07:dd:53:8c:30:7d:ff:41:69:
07:1e:76:74:47:7f:98:23:15:59:a5:a3:15:73:00:
71:41:54:01:f9:3b:6d:83:80:16:7e:f9:52:12:00:
fb:84:11:c6:0c:a4:96:30:1d:0f:53:6b:c4:45:ac:
af:66:35:19:96:e2:b5:30:52:08:b3:83:aa:17:2e:
4f:09:50:db:3e:15:50:58:36:f0:63:96:e6:83:82:
cf:51:4c:c8:9a:9a:2e:89:86:63:06:c0:7c:fd:53:
70:92:32:f0:9b:69:25:04:1c:ec:6f:ee:6f:2d:e2:
6f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:5E:23:FB:59:EA:93:64:A3:ED:E3:0B:51:DE:B7:E5:AC:62:D3:FE
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/1l4j-1nqk2Sj7eMLUd635axi0_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc7:1700::/40
2a06:a005:1505::/48
2a06:a005:1640::/44
Signature Algorithm: sha256WithRSAEncryption
09:d2:a0:0c:12:8a:33:0b:03:e0:f0:80:6d:df:a1:08:ef:7f:
da:1e:74:47:8f:59:be:71:ae:f9:dc:95:5d:3b:68:a9:13:83:
77:89:67:4e:e1:7b:eb:85:f8:cc:64:e3:41:83:fe:3f:02:19:
05:7c:7a:07:1a:c9:a9:15:e6:c9:51:e3:6b:be:b5:09:fd:3c:
a9:8d:1f:7b:ba:08:19:9f:58:3e:b8:ee:76:63:16:88:88:ef:
77:57:df:cd:27:9f:fc:aa:77:d2:a3:c9:5f:e1:f0:1e:c9:90:
15:28:f1:e2:6b:df:d0:91:d9:7d:27:b4:e7:d2:5f:11:96:17:
34:be:2b:35:9d:a2:50:c0:b5:65:50:90:ea:82:33:86:d8:01:
c7:73:43:9a:10:2d:66:ef:bd:35:99:64:27:dc:eb:4e:d5:67:
7d:77:da:f5:45:da:ad:85:ca:3b:e9:72:9f:fe:89:5d:d8:fc:
ad:25:70:30:d7:5e:1f:d5:3c:f8:2a:da:9e:78:c5:43:e1:f9:
97:13:1a:01:49:be:c1:71:da:72:bb:64:ec:a0:9a:ae:c5:9e:
fc:bf:c6:49:a6:68:19:a6:8b:cc:b1:5c:26:93:6a:e6:89:86:
24:ee:88:12:bf:ef:f2:17:ac:17:bc:5f:7c:42:de:21:c6:02:
e6:46:3c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:53:48 2025 by rpki-client