Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/7SZP9qtbCqsgMaX1O5dwXhrcZKw.roa
File: 7SZP9qtbCqsgMaX1O5dwXhrcZKw.roa (raw, json)
Hash identifier: G/yH4OMy/cJiPrd9sHQuvDwZVvndSKj2MYWlrua4TnY=
Subject key identifier: ED:26:4F:F6:AB:5B:0A:AB:20:31:A5:F5:3B:97:70:5E:1A:DC:64:AC
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0182B21DD7C9C13E777471DCBD703F974AD2
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/7SZP9qtbCqsgMaX1O5dwXhrcZKw.roa
Signing time: Thu 18 Aug 2022 18:01:16 +0000
ROA not before: Thu 18 Aug 2022 18:01:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203333
IP address blocks: 2a06:a005:1860::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:b2:1d:d7:c9:c1:3e:77:74:71:dc:bd:70:3f:97:4a:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Aug 18 18:01:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ed264ff6ab5b0aab2031a5f53b97705e1adc64ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6a:c1:e9:9d:42:f6:94:c0:ce:d1:9d:39:fd:
89:18:d5:74:03:a0:7c:fc:81:9c:42:38:c1:bf:57:
6a:5a:eb:7a:8e:9c:14:ca:a8:46:0a:79:0e:16:3e:
53:65:34:fc:dc:6c:62:1c:82:74:ec:fd:5e:3e:f0:
a8:d2:83:5d:a5:d9:1f:7f:29:2f:d4:d6:91:60:4d:
e0:f0:26:6e:59:b1:1b:d5:fd:49:66:71:b7:cc:b2:
3a:08:86:12:74:84:58:26:9b:67:ca:7f:3f:c8:fe:
a4:23:5b:34:96:37:55:06:64:77:67:12:3b:35:46:
d2:ec:ba:6f:1a:1e:76:a8:75:39:0d:e6:a9:6e:bd:
a6:08:68:f0:88:f3:e5:b2:d5:94:e8:ed:90:e8:6a:
b2:d7:47:64:6b:d9:39:b8:f8:57:85:10:ef:26:8f:
fa:e4:ac:28:64:1b:44:a7:6c:68:86:b0:ce:a1:7b:
27:9a:f9:fd:e7:a0:ea:17:3d:78:ed:06:b1:a3:e9:
34:62:6c:87:06:59:47:83:c6:56:2a:69:fb:47:65:
00:91:77:8d:12:4a:9e:fd:a8:c4:82:3b:bf:cb:65:
d4:db:9d:c9:8a:cb:84:ec:65:cf:3d:97:6c:57:bc:
39:8a:dc:bc:4f:48:02:c2:28:09:4a:e2:94:bf:a9:
61:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:26:4F:F6:AB:5B:0A:AB:20:31:A5:F5:3B:97:70:5E:1A:DC:64:AC
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/7SZP9qtbCqsgMaX1O5dwXhrcZKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1860::/44
Signature Algorithm: sha256WithRSAEncryption
83:75:9c:d9:c9:fb:f9:8b:c3:1e:4d:41:19:9e:57:af:ff:4a:
53:13:ad:50:5d:b1:77:ee:5e:54:19:11:67:66:fc:fa:36:ea:
a8:df:9f:12:eb:e1:cb:6a:c8:e5:9b:b4:55:06:a2:b4:e6:36:
ba:39:63:84:3a:bb:f0:7a:25:1e:f1:c9:5f:c6:af:a6:78:05:
b4:bf:0c:bc:de:2a:24:73:72:df:fc:bb:79:2f:6b:79:9c:4d:
08:04:78:41:17:33:a4:7b:1f:eb:7a:c6:f5:95:c7:47:c8:75:
b8:87:7c:ba:2e:0d:4c:19:f5:d6:0e:ac:19:40:a0:0e:40:01:
e9:e5:0c:1c:ad:f9:51:de:86:01:4c:f9:c6:58:c9:5a:bc:b7:
91:48:2c:c3:1f:42:ad:ab:56:fe:3e:4c:0c:65:8d:4c:0f:25:
0e:d8:a4:e1:ee:7f:53:1d:4f:a5:e9:24:5f:2b:50:ea:08:98:
f8:e9:73:1e:2a:95:d7:48:c5:a9:19:d9:4e:ab:87:9c:4a:cb:
a1:eb:3c:a5:e5:96:e3:17:ed:3d:de:dd:c1:55:64:8b:5f:37:
17:0a:ce:82:3c:1f:7d:d3:aa:8e:18:5b:67:1d:7f:d7:15:95:
08:8d:7f:09:96:7b:ab:dd:41:67:ff:7d:5c:e7:cd:41:5a:9f:
fc:83:22:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:01:06 2025 by rpki-client