Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/4PHAzeu1amD6qdg1PtIeBlMyvbo.roa
File: 4PHAzeu1amD6qdg1PtIeBlMyvbo.roa (raw, json)
Hash identifier: tIBCtYTDuVQkkNEk4MN5vDtf3WlO+KzPTFfa21TJvnU=
Subject key identifier: E0:F1:C0:CD:EB:B5:6A:60:FA:A9:D8:35:3E:D2:1E:06:53:32:BD:BA
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0182CF2D6B68679B62D1ECA842DFBC3A8F13
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/4PHAzeu1amD6qdg1PtIeBlMyvbo.roa
Signing time: Wed 24 Aug 2022 09:27:16 +0000
ROA not before: Wed 24 Aug 2022 09:27:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212983
IP address blocks: 2a06:a005:45c::/48 maxlen: 48
2a06:a005:480::/48 maxlen: 48
2a06:a005:43e::/48 maxlen: 48
2a06:a005:483::/48 maxlen: 48
2a06:a005:13::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:cf:2d:6b:68:67:9b:62:d1:ec:a8:42:df:bc:3a:8f:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Aug 24 09:27:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e0f1c0cdebb56a60faa9d8353ed21e065332bdba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:0b:91:0a:d9:b2:6d:ec:18:76:0f:dc:8b:c5:
f4:f6:09:62:54:25:59:ee:2d:90:a2:06:44:de:57:
23:bf:c3:ff:48:93:3c:ee:92:39:47:ea:cb:8f:1d:
ca:15:30:47:88:00:ba:b9:df:bc:59:ce:71:50:2e:
3b:fa:22:39:97:37:1d:e6:9c:51:4c:e4:fa:91:77:
33:7a:29:fc:6d:17:2c:c8:fb:7f:32:c7:09:9b:a3:
42:00:f9:e3:90:9d:2b:16:b7:db:0d:07:70:d8:34:
e6:ce:ea:82:22:bb:6c:b1:07:43:12:bf:ed:6d:6a:
c1:c8:1e:87:99:e2:56:23:2a:cb:8c:e8:f7:7d:c4:
eb:79:54:39:91:78:35:af:03:51:4e:26:55:9c:0b:
2d:59:40:3c:28:d9:52:4a:fe:13:26:fb:b7:e3:15:
77:c6:03:b0:61:d5:59:5e:63:63:b5:f0:7f:34:a5:
da:20:c8:b0:bc:8f:b5:56:e5:2e:26:8c:dd:6b:a1:
c6:1a:d5:df:82:9f:64:6c:20:cc:69:91:13:35:d8:
a9:6a:68:3c:5e:5b:85:f3:10:7b:03:83:a3:8a:d7:
b8:9b:93:04:ce:d3:3f:3e:eb:09:3f:cf:49:43:a5:
26:8e:ab:fe:0a:ec:ba:93:2c:dc:be:9f:b6:80:51:
6c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:F1:C0:CD:EB:B5:6A:60:FA:A9:D8:35:3E:D2:1E:06:53:32:BD:BA
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/4PHAzeu1amD6qdg1PtIeBlMyvbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:13::/48
2a06:a005:43e::/48
2a06:a005:45c::/48
2a06:a005:480::/48
2a06:a005:483::/48
Signature Algorithm: sha256WithRSAEncryption
0c:26:aa:10:a3:76:a2:6f:2f:33:d5:b6:69:15:a6:22:43:2f:
21:0c:d1:f0:75:58:9d:7a:ac:62:32:e9:40:cc:b6:1f:f7:f5:
5e:8e:ad:77:1a:65:f1:fc:c0:b7:78:a6:70:e0:6b:cc:04:2a:
e1:71:05:e8:87:44:37:5b:f0:d8:4d:ed:57:a0:18:9e:f0:30:
fe:69:9e:6a:16:ad:99:2e:13:39:df:c4:8e:b6:68:a4:f8:7e:
c6:61:c1:06:79:33:7e:01:79:f5:64:84:cb:d1:ee:26:dc:fe:
42:c9:f1:19:9e:16:30:6d:a6:92:f2:5d:54:2b:5d:09:36:2e:
49:6f:a1:e5:29:69:25:21:3a:4d:33:df:90:ea:7b:ae:45:3b:
d1:98:b3:53:0e:a0:e3:7d:7d:5b:3e:f0:e8:74:af:4c:4a:dc:
ec:ec:d0:49:bf:b6:b6:fc:be:18:b6:6a:ed:11:e3:cd:78:7b:
25:86:f2:b4:7f:19:e5:17:b9:3f:58:8a:24:93:8e:0b:62:f7:
4e:5c:95:58:48:e6:5a:b4:1e:4f:d7:68:3d:34:4a:5d:70:3c:
87:57:79:02:57:6f:08:3a:99:87:4f:ab:31:c5:91:df:92:e2:
0a:0d:b1:35:cf:f5:e4:26:10:dd:26:2f:77:c1:84:9c:95:50:
8d:cd:98:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 01:54:04 2025 by rpki-client