Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/6zBHKW88qhVO44F0Lot47oIuVrg.roa
File: 6zBHKW88qhVO44F0Lot47oIuVrg.roa (raw, json)
Hash identifier: q26DjxYmXInpGHVWret2JGbY4pXB6Fm54Ye4FTunbJE=
Subject key identifier: EB:30:47:29:6F:3C:AA:15:4E:E3:81:74:2E:8B:78:EE:82:2E:56:B8
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01826CEFFF156BB7E7623E79C6DC8E98D4D7
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/6zBHKW88qhVO44F0Lot47oIuVrg.roa
Signing time: Fri 05 Aug 2022 07:37:23 +0000
ROA not before: Fri 05 Aug 2022 07:37:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203635
IP address blocks: 2a06:a005:14d0::/44 maxlen: 48
2a06:a005:1490::/44 maxlen: 48
2a06:a005:1040::/44 maxlen: 48
2a06:a005:14b0::/44 maxlen: 48
2a06:a005:14c0::/44 maxlen: 48
2a06:a005:14a0::/44 maxlen: 48
2a06:a005:1050::/44 maxlen: 48
2a06:a005:1600::/44 maxlen: 48
2a07:54c2:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:6c:ef:ff:15:6b:b7:e7:62:3e:79:c6:dc:8e:98:d4:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Aug 5 07:37:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eb3047296f3caa154ee381742e8b78ee822e56b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2c:3c:e5:62:9c:91:25:39:a2:9e:fe:df:d0:
fd:64:06:70:a0:d1:5e:b3:30:fe:ef:de:71:50:84:
91:f4:a5:14:c7:66:c4:1f:d6:58:b9:29:bb:7c:61:
b1:63:a7:e6:fc:08:57:1d:55:e8:55:e5:14:37:f9:
81:54:8d:b3:74:45:b5:35:60:8d:d3:e6:0d:28:c3:
cd:e8:52:34:75:d1:47:82:87:e1:74:4a:5b:58:d8:
ed:7f:d7:5b:86:b1:82:4e:8b:2b:19:b5:bb:43:86:
f2:f9:cb:ad:2d:b1:19:3e:dd:c1:1a:66:5d:23:f4:
fb:91:47:5b:7e:46:83:28:2d:95:b1:90:9a:d3:8a:
7a:72:09:0c:ae:aa:9f:97:70:00:46:22:2b:4f:7a:
7c:57:cd:cc:b4:f9:1b:04:f9:f2:58:63:2a:54:60:
4e:25:4d:cf:5d:0d:6a:d8:1c:4b:a3:20:e9:c1:1a:
1a:f4:2b:e9:a7:e7:38:c4:1e:b3:66:5a:b8:f2:87:
e5:b9:f8:35:33:6d:7b:31:07:4a:7d:a2:9a:52:94:
05:e0:25:24:b0:21:bf:79:ed:4b:1e:94:b8:a9:f6:
0b:4c:6a:73:5d:06:8d:a6:93:50:53:4b:7f:16:e2:
ec:27:33:b4:53:e6:95:77:c3:f5:50:d4:b1:47:b3:
56:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:30:47:29:6F:3C:AA:15:4E:E3:81:74:2E:8B:78:EE:82:2E:56:B8
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/6zBHKW88qhVO44F0Lot47oIuVrg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1040::/43
2a06:a005:1490::-2a06:a005:14df:ffff:ffff:ffff:ffff:ffff
2a06:a005:1600::/44
2a07:54c2:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
3d:c8:65:34:25:16:49:31:e6:cd:82:a6:f8:5e:4b:b4:1a:da:
95:ef:c5:56:6c:6d:cd:b6:89:ef:a2:07:a4:61:d3:0a:7d:59:
a5:86:52:c2:10:09:7a:05:46:56:1c:24:e3:66:d8:d9:f2:80:
f0:f7:67:35:ef:73:53:6c:aa:56:1b:2f:9c:20:50:38:cf:00:
62:73:44:b4:d9:d1:74:28:a9:4d:56:27:5a:87:75:8f:eb:1d:
7f:09:3b:55:f3:f1:b0:50:41:12:1c:98:e4:18:bd:00:11:ee:
0c:f2:b1:94:dd:b0:85:8d:25:75:98:48:90:a8:51:8d:60:16:
73:bf:ee:51:72:42:1e:ba:dc:59:e2:f2:76:fe:b4:1d:58:86:
23:94:1d:b3:d9:59:83:19:1c:e3:21:14:89:57:6b:e5:ca:d8:
5e:21:77:c5:99:75:3d:4a:a5:81:00:71:f5:61:7a:38:c7:9b:
d7:22:72:12:29:56:d7:b1:8f:03:0c:15:80:77:d3:e4:2d:1a:
6f:5d:cd:9a:51:05:3a:23:02:36:3d:65:80:82:b1:58:ae:b4:
2c:95:a0:b8:fe:c8:0c:df:f3:a6:c8:b1:85:1c:6d:8d:c2:16:
09:5c:0f:3c:ec:72:e2:71:ef:8d:bb:1e:b6:1e:9e:83:be:55:
38:88:99:83
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgISAYJs7/8Va7fnYj55xtyOmNTXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIwODA1MDczNzIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYjMwNDcyOTZmM2NhYTE1NGVlMzgxNzQyZThiNzhlZTgyMmU1NmI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1iw85WKckSU5op7+39D9ZAZwoNFe
szD+795xUISR9KUUx2bEH9ZYuSm7fGGxY6fm/AhXHVXoVeUUN/mBVI2zdEW1NWCN
0+YNKMPN6FI0ddFHgofhdEpbWNjtf9dbhrGCTosrGbW7Q4by+cutLbEZPt3BGmZd
I/T7kUdbfkaDKC2VsZCa04p6cgkMrqqfl3AARiIrT3p8V83MtPkbBPnyWGMqVGBO
JU3PXQ1q2BxLoyDpwRoa9Cvpp+c4xB6zZlq48oflufg1M217MQdKfaKaUpQF4CUk
sCG/ee1LHpS4qfYLTGpzXQaNppNQU0t/FuLsJzO0U+aVd8P1UNSxR7NWiQIDAQAB
o4ICMjCCAi4wHQYDVR0OBBYEFOswRylvPKoVTuOBdC6LeO6CLla4MB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvNnpCSEtXODhxaFZPNDRGMExvdDQ3b0l1VnJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzA1BAIAAjAvAwcFKgagBRBA
MBIDBwQqBqAFFJADBwUqBqAFFMADBwQqBqAFFgADBwAqB1TCsAswDQYJKoZIhvcN
AQELBQADggEBAD3IZTQlFkkx5s2CpvheS7Qa2pXvxVZsbc22ie+iB6Rh0wp9WaWG
UsIQCXoFRlYcJONm2NnygPD3ZzXvc1NsqlYbL5wgUDjPAGJzRLTZ0XQoqU1WJ1qH
dY/rHX8JO1Xz8bBQQRIcmOQYvQAR7gzysZTdsIWNJXWYSJCoUY1gFnO/7lFyQh66
3Fni8nb+tB1YhiOUHbPZWYMZHOMhFIlXa+XK2F4hd8WZdT1KpYEAcfVhejjHm9ci
chIpVtexjwMMFYB30+QtGm9dzZpRBTojAjY9ZYCCsViutCyVoLj+yAzf86bIsYUc
bY3CFglcDzzscuJx7427HrYenoO+VTiImYM=
-----END CERTIFICATE-----
Generated at Fri Apr 18 10:21:18 2025 by rpki-client