Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/1whM-LjLvARjbaM2HulIJszL7QA.roa
File: 1whM-LjLvARjbaM2HulIJszL7QA.roa (raw, json)
Hash identifier: JiNOtkwUl3r8d2VmQOcggEBL6GMUhepJ6wOxzFdKrys=
Subject key identifier: D7:08:4C:F8:B8:CB:BC:04:63:6D:A3:36:1E:E9:48:26:CC:CB:ED:00
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0182756AB678211B7B57D5CC4BFCA251C6B2
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/1whM-LjLvARjbaM2HulIJszL7QA.roa
Signing time: Sat 06 Aug 2022 23:08:23 +0000
ROA not before: Sat 06 Aug 2022 23:08:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204268
IP address blocks: 2a06:a005:a12::/48 maxlen: 48
2a06:a005:1000::/44 maxlen: 48
2a06:a005:15b0::/44 maxlen: 48
2a06:a005:a0e::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:75:6a:b6:78:21:1b:7b:57:d5:cc:4b:fc:a2:51:c6:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Aug 6 23:08:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d7084cf8b8cbbc04636da3361ee94826cccbed00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:18:7c:c3:95:7a:72:92:f4:76:b2:ea:2f:7e:
68:01:1c:b7:55:d7:c6:bb:1e:cd:1f:0b:d4:29:e6:
f5:8d:72:a7:d5:1a:22:24:0a:36:3b:0c:43:a9:83:
48:f0:aa:63:26:40:91:e9:12:a9:4b:a0:0b:a4:e9:
b2:44:86:72:6b:5d:95:ec:98:0a:aa:5e:fb:fd:1f:
e8:db:9f:48:2d:23:3d:3e:83:63:9b:55:73:80:93:
34:f2:45:4e:7d:60:18:18:f6:68:bc:fe:a6:02:bb:
8f:18:54:95:e6:97:a6:19:2d:a9:c3:84:71:41:af:
b4:6c:8e:40:86:fa:39:61:d8:df:c3:09:b4:fa:90:
a9:05:be:09:60:a4:f4:46:e2:9d:b2:0f:3d:70:cd:
ea:e5:03:a6:02:1b:91:86:2c:d0:d1:c2:14:5d:df:
19:86:e3:67:67:f3:82:69:17:49:be:95:c0:26:09:
3f:f5:97:bf:70:60:91:99:43:eb:fd:be:7f:4a:8b:
58:36:2e:e0:3c:9b:ce:26:b1:01:60:ca:53:0f:c9:
00:91:e5:14:7e:e2:32:7c:77:15:db:7a:81:1f:a8:
c0:0c:7d:6f:74:19:03:68:05:14:48:13:87:81:2b:
b2:7e:e7:ba:cc:44:dc:c2:ce:15:76:3e:5e:d1:64:
cb:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:08:4C:F8:B8:CB:BC:04:63:6D:A3:36:1E:E9:48:26:CC:CB:ED:00
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/1whM-LjLvARjbaM2HulIJszL7QA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:a0e::/48
2a06:a005:a12::/48
2a06:a005:1000::/44
2a06:a005:15b0::/44
Signature Algorithm: sha256WithRSAEncryption
29:47:90:52:53:79:34:9d:bc:a9:01:4f:a1:34:c0:fd:a4:96:
5e:a9:5e:33:2a:91:9d:c6:2c:1a:8a:b9:c1:e7:07:ea:0f:92:
40:72:74:bb:a4:8b:d9:c7:05:77:c2:3f:75:5b:a4:74:73:62:
65:84:8f:3c:5d:b8:05:7f:d8:28:8d:82:a1:b3:93:b1:be:9b:
96:f6:73:24:a1:87:77:73:d0:55:6d:21:ec:b4:58:dd:36:d7:
a3:0b:88:78:3e:e9:76:55:6b:5b:ac:98:14:15:6f:57:74:7f:
d6:24:d3:cd:94:3b:fa:1f:5c:01:00:be:bf:86:36:4b:68:d5:
51:a5:07:9a:24:20:38:c0:7b:c2:de:bb:e5:d8:be:ee:b4:04:
96:bc:14:52:db:8c:1d:8f:99:8b:11:f2:9c:12:57:bf:7f:15:
c1:ed:c1:f1:66:86:f5:6f:b5:b2:91:46:52:5e:f6:d5:55:a7:
2b:a4:01:af:9d:20:04:38:d6:1e:cb:eb:17:f0:6c:12:5b:a1:
58:f1:14:08:1f:6c:df:99:d0:dd:dd:3a:f5:f7:2f:4a:09:9d:
ab:e4:4c:06:2b:86:83:43:81:0e:10:46:e6:98:64:00:0e:12:
bd:05:91:ec:8e:e8:42:1f:ef:f6:59:46:5e:7f:6b:b9:55:ee:
56:8d:8a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:03:34 2025 by rpki-client