Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/51BRvzJEwMP8aJTcESuVW1K-4Cg.roa
File: 51BRvzJEwMP8aJTcESuVW1K-4Cg.roa (raw, json)
Hash identifier: 59iIMrb9Qv+soMFuGK4dzrF3mvddO51zFLpBo1KjXds=
Subject key identifier: E7:50:51:BF:32:44:C0:C3:FC:68:94:DC:11:2B:95:5B:52:BE:E0:28
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01847A89DA86E69AC2A894441C5A055A920C
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/51BRvzJEwMP8aJTcESuVW1K-4Cg.roa
Signing time: Tue 15 Nov 2022 09:06:05 +0000
ROA not before: Tue 15 Nov 2022 09:06:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201412
IP address blocks: 2a06:a005:1082::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:7a:89:da:86:e6:9a:c2:a8:94:44:1c:5a:05:5a:92:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Nov 15 09:06:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e75051bf3244c0c3fc6894dc112b955b52bee028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:01:28:04:99:e6:e4:f6:44:6f:f7:48:ca:7f:
d5:ef:8e:28:df:4c:0d:78:d2:83:06:b2:1a:95:cb:
4f:a8:36:0a:96:1e:94:36:d7:8c:1d:1e:57:ae:3b:
4e:6c:5c:36:23:2f:6b:85:cd:45:fb:ae:70:d0:dd:
a8:6e:59:4a:af:c1:c2:10:2a:2f:a4:f6:01:bf:f9:
11:bd:da:7b:5f:5b:98:19:cf:03:8a:24:9e:47:d4:
f2:b1:b1:9d:53:67:ae:f5:95:0f:f0:e8:13:80:11:
45:b5:cd:4a:04:5b:61:46:de:21:bc:b6:03:58:6c:
2a:0a:76:dd:54:32:90:f1:34:14:b7:c7:39:41:93:
c7:cc:91:5e:35:ab:5e:5c:c6:2d:10:76:be:41:e6:
9e:eb:d8:74:ca:d7:bc:3e:53:62:a5:1e:ca:38:5a:
d0:76:59:59:fa:e4:3c:b4:0d:ab:e7:66:fb:7c:3e:
bc:fa:2a:dd:fc:3c:34:66:ea:fb:5b:27:d8:8c:61:
ad:5a:c2:99:ee:29:f4:c1:5c:d6:6a:cd:7d:6b:fb:
49:31:ed:c1:67:d9:96:b7:19:f8:eb:78:87:9d:21:
d4:71:1f:a4:a4:e8:a3:82:3e:46:70:29:e1:99:50:
f5:d4:83:2c:4e:c2:49:08:89:71:7c:6b:5f:0e:02:
49:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:50:51:BF:32:44:C0:C3:FC:68:94:DC:11:2B:95:5B:52:BE:E0:28
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/51BRvzJEwMP8aJTcESuVW1K-4Cg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1082::/48
Signature Algorithm: sha256WithRSAEncryption
4e:1a:dd:3d:64:6d:cf:2d:ef:1b:38:d9:4a:dd:36:ce:cc:13:
c2:d2:e7:a6:04:1f:7b:75:bb:2f:94:c7:f0:a0:e7:3f:21:cd:
3b:31:35:b6:09:1f:e9:0b:44:f5:9f:b9:24:66:12:82:f0:3b:
b6:14:1a:02:31:b3:52:07:33:a2:5b:b1:94:b0:70:e2:23:68:
72:13:7b:7c:7a:37:0d:1f:99:2d:f7:50:e1:f1:42:ff:eb:be:
e3:d3:ba:84:0c:01:a5:8d:89:82:c4:0c:61:33:d1:e9:6d:e0:
44:f7:2a:2c:40:73:9f:49:24:cc:48:21:1c:95:5d:41:1e:ef:
e4:23:b1:97:58:7a:aa:1b:73:fa:dd:c2:be:62:87:ab:f8:cc:
32:f2:3e:a8:9a:5b:c6:73:8c:0b:dc:df:74:cc:a6:51:50:10:
5b:e2:40:32:2d:80:12:4b:f4:d6:f0:70:75:bb:67:d1:78:0e:
0b:dc:54:4b:bc:c9:62:6c:61:dc:d1:21:dc:8f:0a:c2:00:ad:
ec:0a:bd:46:bf:6e:53:a4:d6:e2:2d:6a:a0:1e:e3:97:90:8c:
6c:60:81:44:06:b5:d9:8e:04:b6:f8:4f:35:78:74:d6:2d:be:
75:cd:e8:db:5e:2e:61:e4:27:43:2a:ce:39:6f:d3:58:a5:5b:
82:01:05:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:03:24 2025 by rpki-client