Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/2ilbcJB5im0I6L6oxNIACBz2T2o.roa
File: 2ilbcJB5im0I6L6oxNIACBz2T2o.roa (raw, json)
Hash identifier: izU0HCQCwz/s7WiattC0au4QlB5Wmg1uBHYjiy+GvSQ=
Subject key identifier: DA:29:5B:70:90:79:8A:6D:08:E8:BE:A8:C4:D2:00:08:1C:F6:4F:6A
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 18EE3159
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/2ilbcJB5im0I6L6oxNIACBz2T2o.roa
Signing time: Sat 30 Apr 2022 02:30:54 +0000
ROA not before: Sat 30 Apr 2022 02:30:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 147028
IP address blocks: 2a06:a005:4::/48 maxlen: 48
2a06:a005:43d::/48 maxlen: 48
2a06:a005:5::/48 maxlen: 48
2a06:a005:6::/48 maxlen: 48
2a06:a005:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 418263385 (0x18ee3159)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Apr 30 02:30:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=da295b7090798a6d08e8bea8c4d200081cf64f6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:46:ce:09:44:f8:7c:73:07:e3:2a:f0:53:92:
6a:da:56:4e:69:02:7f:6f:5d:9b:72:9c:f5:ec:39:
29:0e:1f:d1:95:a1:b3:69:40:60:65:5f:33:df:42:
41:a1:60:22:66:90:46:c3:00:be:53:00:43:79:4d:
e1:4f:8c:21:ad:dc:ca:eb:36:47:fb:98:75:da:c6:
01:e4:69:a9:4c:e9:73:4b:1d:2e:d0:91:d9:7b:88:
02:5e:3e:68:f2:9b:c7:5a:c1:8b:5f:23:5a:f1:71:
06:81:af:f8:36:36:ff:47:b2:0c:9d:fc:ab:b3:dc:
f8:82:a5:fb:f2:71:b5:6e:4c:4e:b5:97:d1:0f:6f:
b4:c4:0f:91:e4:18:ec:88:5f:ee:96:cc:3a:6e:96:
06:45:58:34:8d:54:10:a5:88:a7:b5:84:68:bf:bb:
34:f1:b2:86:1d:04:74:c0:dc:83:88:1c:ec:d0:45:
7a:08:2c:bc:0f:a8:42:a4:06:41:7b:13:00:e4:e1:
e5:c3:d7:21:c1:91:56:0f:61:41:19:71:96:0e:95:
a8:ae:f7:b5:4e:23:68:6b:94:ff:c0:1b:7a:b8:df:
59:4b:6d:b5:ad:32:ae:9e:f7:23:20:2b:28:93:f9:
c9:d1:6a:a0:a9:09:f5:01:7a:7d:83:68:e0:10:31:
37:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:29:5B:70:90:79:8A:6D:08:E8:BE:A8:C4:D2:00:08:1C:F6:4F:6A
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/2ilbcJB5im0I6L6oxNIACBz2T2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:3::-2a06:a005:6:ffff:ffff:ffff:ffff:ffff
2a06:a005:43d::/48
Signature Algorithm: sha256WithRSAEncryption
0b:e3:6f:28:77:33:53:7b:1e:c4:da:82:a3:b3:99:f6:46:9f:
88:00:fc:47:6d:38:a6:04:ef:7b:3c:ed:1a:e3:cf:06:e9:fe:
75:82:34:f5:f4:e8:df:77:51:eb:ab:92:d7:af:91:dc:33:6c:
d0:b4:e5:36:95:ae:c0:b7:c0:c2:06:ca:87:2e:ba:b4:93:61:
fc:54:95:be:1b:14:52:c9:57:30:62:28:7d:35:b5:ed:20:04:
1a:da:ce:b9:1a:00:2d:3f:31:dd:c1:05:fe:78:47:0e:f9:df:
a3:34:b6:89:bb:fc:c0:7d:9b:fd:69:ee:5b:b7:a3:c0:71:53:
f2:f8:5c:bc:a9:15:cb:89:8d:83:b9:0f:e2:2c:43:2b:0a:7c:
63:3d:02:c9:72:5f:c5:70:4d:c2:24:49:ae:00:6a:34:a5:5d:
49:16:0e:22:b0:e7:ab:53:fa:14:8c:e5:56:89:48:10:8f:83:
81:fa:e7:ea:42:ec:7f:65:c6:ae:d7:1a:b0:c7:25:f9:10:da:
d5:c0:26:5d:2d:cd:72:9a:9c:11:af:75:08:49:56:62:42:76:
17:22:91:e9:b4:a8:18:9a:68:0c:c3:1b:8d:d1:bf:96:db:5d:
30:8b:96:80:27:6c:d5:c5:91:3d:12:07:b9:cc:fb:48:82:a7:
73:c2:0a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:10:50 2025 by rpki-client