Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/5wp7W4kjvn3kvFk9dO0QiRSH7K8.roa
File: 5wp7W4kjvn3kvFk9dO0QiRSH7K8.roa (raw, json)
Hash identifier: YL/XsCCIJTVJZqevZUsygvn1Obp9h/VpTIXnT/cvEFI=
Subject key identifier: E7:0A:7B:5B:89:23:BE:7D:E4:BC:59:3D:74:ED:10:89:14:87:EC:AF
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01844B05EFE6A55A6E2CB427CC79537A5E58
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/5wp7W4kjvn3kvFk9dO0QiRSH7K8.roa
Signing time: Sun 06 Nov 2022 03:39:51 +0000
ROA not before: Sun 06 Nov 2022 03:39:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203888
IP address blocks: 2a06:a005:150a::/48 maxlen: 48
2a06:a005:d22::/48 maxlen: 48
2a06:a005:1550::/44 maxlen: 48
2a07:54c2:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:4b:05:ef:e6:a5:5a:6e:2c:b4:27:cc:79:53:7a:5e:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Nov 6 03:39:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e70a7b5b8923be7de4bc593d74ed10891487ecaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:74:d0:8b:9e:e8:1e:c5:23:1f:e1:2c:96:06:
0e:b7:fc:a8:60:29:89:48:4b:e7:5b:2c:04:f8:2a:
62:88:a7:c9:9e:91:c5:6b:e2:87:c3:a9:a4:ae:5a:
19:19:e3:6b:2d:1d:35:2f:07:b6:07:5f:b5:5c:3d:
21:c1:91:93:11:c2:13:47:b0:8d:33:12:b1:fd:52:
6f:3c:10:0f:4b:0f:1f:ec:a2:80:2c:02:e4:84:83:
0c:e1:a9:08:a9:89:c6:15:74:76:1d:ed:75:ef:58:
46:1d:67:8c:d7:67:a4:4c:34:82:2b:59:30:12:a0:
97:95:a5:35:2a:12:ae:ee:b1:03:ff:df:63:cf:94:
26:44:28:82:82:df:26:e5:c8:3b:e5:86:22:e6:52:
b0:fc:8b:e8:c9:7c:88:29:4a:b3:62:37:72:b8:7e:
00:65:b8:71:aa:0b:8a:d8:b9:5c:57:fb:b6:28:ce:
ed:2e:00:1b:b2:bb:74:ab:37:f9:2e:ba:28:c5:8e:
94:63:8c:c7:b1:03:1a:96:23:fd:f6:58:c9:5d:f9:
46:48:10:49:b7:c5:61:cc:34:73:85:03:48:85:c7:
26:3b:70:97:cd:81:58:33:ca:0d:3a:38:3d:39:c1:
8c:87:d6:81:ac:8b:80:e4:11:43:54:fa:20:1a:be:
76:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:0A:7B:5B:89:23:BE:7D:E4:BC:59:3D:74:ED:10:89:14:87:EC:AF
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/5wp7W4kjvn3kvFk9dO0QiRSH7K8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:d22::/48
2a06:a005:150a::/48
2a06:a005:1550::/44
2a07:54c2:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
93:d8:32:80:bb:09:c7:8a:16:de:0a:65:e7:9c:2e:0d:f4:c5:
5d:b6:f4:9a:62:86:e1:a0:60:57:e2:f6:fe:50:bf:33:c8:0c:
88:f4:e1:11:56:2f:df:b5:22:a1:c8:da:42:37:dc:56:96:22:
e8:ed:a8:5a:89:7a:e8:58:d6:04:9e:14:df:14:e7:81:d8:57:
3b:da:c2:83:b3:f3:6d:ba:ed:41:28:e1:67:78:a9:21:87:a9:
90:2b:2f:3c:3c:d0:cb:0d:4e:0f:d2:2c:e3:07:9e:4e:61:cf:
f4:ac:ba:13:bf:e8:e0:36:21:52:31:77:d0:cb:36:8d:93:81:
64:37:a8:56:aa:8c:70:b5:02:d6:6b:f9:46:78:12:1e:2c:67:
44:dd:2e:8b:f1:83:b0:20:93:29:98:98:6d:fa:33:0c:8d:5c:
e1:27:fc:38:7a:4b:81:21:f1:12:07:dc:49:27:7f:11:52:ce:
c7:8c:04:5c:3f:a7:cb:42:d6:e7:30:69:9c:6f:92:2a:83:e9:
bd:9d:98:aa:6e:26:76:7d:4c:a7:13:15:cd:97:c9:eb:45:0b:
b2:c7:f8:58:d9:13:04:db:84:63:d2:6e:f8:09:64:9f:7a:fe:
3a:b1:2c:e0:32:f5:1e:ce:06:fb:23:05:d8:b3:ca:11:2f:74:
7f:e9:2b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:49:28 2025 by rpki-client