Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/5PYGVfSHsUJTAtnPZ0dCnelfAs0.roa
File: 5PYGVfSHsUJTAtnPZ0dCnelfAs0.roa (raw, json)
Hash identifier: T9PtM94Gc93xw3qZyLVuHn7D8gwC2jMhhRz1J77I0cQ=
Subject key identifier: E4:F6:06:55:F4:87:B1:42:53:02:D9:CF:67:47:42:9D:E9:5F:02:CD
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01824DB3C74F0E1BDC2D13E04374D8313044
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/5PYGVfSHsUJTAtnPZ0dCnelfAs0.roa
Signing time: Sat 30 Jul 2022 06:03:23 +0000
ROA not before: Sat 30 Jul 2022 06:03:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211604
IP address blocks: 2a06:a005:5e1::/48 maxlen: 48
2a06:a005:1274::/47 maxlen: 48
2a06:a005:857::/48 maxlen: 48
2a06:a005:450::/48 maxlen: 48
2a06:a005:452::/47 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:4d:b3:c7:4f:0e:1b:dc:2d:13:e0:43:74:d8:31:30:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jul 30 06:03:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e4f60655f487b1425302d9cf6747429de95f02cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:48:fd:36:3f:d7:ec:38:bd:33:5d:98:b8:9e:
00:04:86:fa:13:67:97:17:39:3b:a1:e4:26:de:41:
59:c2:d8:4c:a2:76:68:08:a6:ee:e1:1b:2d:48:5e:
cd:74:eb:1d:b1:ec:4d:a2:b0:14:b6:c8:4b:a8:42:
16:41:ca:ee:69:46:8a:bc:34:1b:71:3e:15:bf:34:
a4:8e:a7:59:35:aa:71:2d:c9:50:7b:f0:c5:11:91:
e3:33:b4:97:b0:d4:68:5b:8e:51:c2:47:3a:c7:e6:
56:c7:9d:87:3a:7f:6c:7b:08:e2:9f:0c:04:6e:7e:
4d:bf:20:6a:b3:dd:0a:4e:29:bd:cf:e5:27:25:81:
86:2a:11:8d:a7:04:54:fc:08:77:69:29:01:b3:b0:
45:21:b3:2b:9a:a8:13:5f:60:4c:0f:a7:7d:54:21:
1b:76:b3:af:be:32:50:77:b5:ec:cb:e1:09:3a:c3:
ec:74:9f:c8:5b:26:c7:ee:b8:c5:20:9a:b7:6d:bf:
8b:68:3a:9b:d1:08:0c:55:c2:dc:c9:27:aa:8b:5e:
82:74:bb:d9:07:e3:61:b3:19:df:fa:f1:33:0e:9f:
fd:42:af:68:ca:60:20:0e:9b:31:15:d8:8d:a6:c0:
f2:b0:d8:26:c9:f9:56:63:c5:fb:23:f9:a4:68:06:
c3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:F6:06:55:F4:87:B1:42:53:02:D9:CF:67:47:42:9D:E9:5F:02:CD
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/5PYGVfSHsUJTAtnPZ0dCnelfAs0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:450::/48
2a06:a005:452::/47
2a06:a005:5e1::/48
2a06:a005:857::/48
2a06:a005:1274::/47
Signature Algorithm: sha256WithRSAEncryption
8d:30:a5:ac:39:ad:7c:ec:3d:de:ec:39:af:98:09:74:f5:90:
6a:2c:83:bf:cc:ff:5a:31:51:f6:b9:e6:e5:a1:af:b3:1b:8d:
98:a8:ed:fe:34:cb:82:1f:ee:3f:99:a1:bf:6a:50:ac:3c:27:
90:46:f0:7e:71:3f:95:77:b2:fd:a5:02:2d:4a:13:0d:8e:76:
ec:ce:ae:cd:18:44:45:66:da:fe:52:19:5b:58:f9:cb:e6:35:
43:e4:44:2d:b0:b8:7d:64:e3:19:db:93:d2:da:7d:21:f7:e8:
8e:75:bb:b1:0c:c0:3d:d3:7c:67:0e:34:6b:df:40:f8:43:e8:
1c:a3:e8:82:84:17:a0:11:d0:ff:8b:b5:0f:50:5c:9f:03:a0:
d4:6e:9c:9e:aa:bc:00:f8:a4:5c:a8:7a:d3:e8:5f:bf:8c:6e:
ee:b9:4f:aa:b7:7b:dc:01:42:36:64:84:c1:f6:31:39:6e:b3:
76:85:49:90:5b:4d:46:04:3e:3d:70:b5:27:c5:bf:65:4a:99:
15:9e:0d:07:6a:71:f4:48:a8:19:8b:36:0b:f7:8b:e2:9e:b0:
6d:ce:ee:41:73:db:82:b1:1a:2f:99:74:fd:7b:dd:3d:6c:00:
6c:b0:b6:fa:a6:cc:74:3d:61:b4:1c:3b:8a:ee:09:78:d1:46:
c9:6e:43:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:05:08 2025 by rpki-client