Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/20bmOd0Cfec0-pHBosetUV1AsfA.roa
File: 20bmOd0Cfec0-pHBosetUV1AsfA.roa (raw, json)
Hash identifier: +GpClNTF93HoBKg4dGKT5p/WdkgKaR9yhWTsU31eWEw=
Subject key identifier: DB:46:E6:39:DD:02:7D:E7:34:FA:91:C1:A2:C7:AD:51:5D:40:B1:F0
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 018212196D6BB61C1727FDE02D545955ECC6
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/20bmOd0Cfec0-pHBosetUV1AsfA.roa
Signing time: Mon 18 Jul 2022 16:17:12 +0000
ROA not before: Mon 18 Jul 2022 16:17:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 140731
IP address blocks: 2a06:a005:1320::/44 maxlen: 48
2a06:a005:1310::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:12:19:6d:6b:b6:1c:17:27:fd:e0:2d:54:59:55:ec:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jul 18 16:17:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=db46e639dd027de734fa91c1a2c7ad515d40b1f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c3:e0:8d:8b:21:10:d5:f3:b1:47:55:64:d7:
ef:6f:cd:27:5d:20:07:c8:3a:b9:ed:95:1c:c7:60:
9b:e7:af:3e:9b:3e:c4:92:48:1f:9e:5d:c2:2b:34:
0d:3e:75:cb:25:e8:13:83:23:42:c9:74:af:4d:49:
5f:8a:3e:b7:b1:c1:58:18:60:fe:e6:c5:3d:e2:e7:
9f:e6:75:c6:2e:5c:5f:ae:fe:49:0f:a3:0d:3d:96:
b1:ab:7f:55:c0:7d:f0:ab:ea:cb:89:fe:dc:eb:15:
dc:48:b9:08:16:c5:21:b4:31:76:b0:fd:79:ee:b6:
ed:29:c0:ba:1b:8d:cd:91:3a:e1:30:41:c9:7a:05:
a3:df:db:c8:ce:4f:a9:78:41:f3:21:9c:01:f2:bb:
cf:76:21:79:c2:a1:ea:84:3f:74:c3:28:83:48:dd:
0c:d7:2b:6a:cb:2c:d1:cd:10:2d:8d:65:0e:91:59:
e3:9c:45:19:b3:e2:c7:06:99:ba:6f:1e:ea:7d:1e:
78:01:a5:91:eb:9f:05:d2:7c:e7:b5:bd:8d:5c:4d:
5d:b7:dd:f7:93:62:d3:ca:76:6c:22:41:bd:74:4e:
54:46:3f:e0:3a:29:df:fb:a5:31:1b:64:79:50:ae:
e4:5b:16:44:2b:fe:4f:c2:b2:0e:28:25:70:aa:0c:
57:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:46:E6:39:DD:02:7D:E7:34:FA:91:C1:A2:C7:AD:51:5D:40:B1:F0
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/20bmOd0Cfec0-pHBosetUV1AsfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1310::-2a06:a005:132f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
27:0e:99:3a:0a:ea:1f:1d:8b:3e:a6:f5:c2:ac:b5:2d:cc:6e:
e7:3c:29:a3:d8:d7:b6:d2:d7:9d:1c:d0:69:96:2a:a7:61:f9:
b1:6d:f9:76:ca:fa:b3:48:93:76:fe:ba:10:8c:b3:39:2c:dd:
62:3c:be:cd:b1:ca:72:8c:b4:6d:97:d8:35:62:b2:c1:12:2a:
f6:17:05:d8:14:a6:97:bf:bb:9e:ff:ec:5e:3a:82:0b:50:57:
11:b7:d9:28:6c:42:a7:5a:1b:49:85:be:50:e4:2c:76:a1:ea:
a1:b2:24:37:1f:c7:5f:67:e0:94:1e:59:5a:f5:94:4f:ae:0d:
17:6e:ea:c3:33:72:02:b7:25:11:67:65:da:7e:09:db:bd:31:
a4:5f:2b:50:70:7f:75:0c:dd:9d:d4:1d:dd:d3:b2:e4:2a:c9:
4a:12:6a:2d:44:11:aa:24:13:46:ec:d1:18:b0:f5:16:eb:a4:
9a:cb:dd:59:2b:13:61:63:fb:3e:a7:41:a1:69:79:a4:e0:ee:
ae:a4:a7:82:c8:b7:cc:68:c1:5d:77:1e:42:26:4f:1d:99:f5:
8b:19:e6:ee:b9:14:2b:84:44:a7:ba:c3:a1:44:2e:5d:c3:9e:
e6:43:1a:59:29:eb:04:df:28:e6:1d:50:2b:dd:6e:b7:62:7c:
f8:a8:ba:5f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Apr 22 05:28:33 2025 by rpki-client