Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/8DRObYQoxn1mCoF52ywAFiqjRiM.roa
File: 8DRObYQoxn1mCoF52ywAFiqjRiM.roa (raw, json)
Hash identifier: GuDiuvgroryXNdfCHiDdYf4kW7nc27E0cRfZvFUvYh4=
Subject key identifier: F0:34:4E:6D:84:28:C6:7D:66:0A:81:79:DB:2C:00:16:2A:A3:46:23
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0184D765E32F9EA149D54B95D148B4393B0E
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/8DRObYQoxn1mCoF52ywAFiqjRiM.roa
Signing time: Sat 03 Dec 2022 09:51:29 +0000
ROA not before: Sat 03 Dec 2022 09:51:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203888
IP address blocks: 2a06:a005:150a::/48 maxlen: 48
2a06:a005:d22::/48 maxlen: 48
2a0a:6040:300::/40 maxlen: 48
2a06:a005:24c0::/44 maxlen: 48
2a06:a005:2480::/44 maxlen: 48
2a06:a005:24d0::/44 maxlen: 48
2a06:a005:b60::/44 maxlen: 48
2a06:a005:24a0::/44 maxlen: 48
2a06:a005:2100::/44 maxlen: 48
2a06:a005:24b0::/44 maxlen: 48
2a07:54c2:b00b::/48 maxlen: 48
2a05:dfc7:6400::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d7:65:e3:2f:9e:a1:49:d5:4b:95:d1:48:b4:39:3b:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Dec 3 09:51:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f0344e6d8428c67d660a8179db2c00162aa34623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:96:09:85:01:a3:9b:3b:aa:ee:3e:4d:53:eb:
af:d2:23:ac:c3:0d:1e:93:25:6c:5c:f6:f5:be:c4:
6d:4b:1e:46:bd:59:de:f5:99:3b:62:58:84:9d:5f:
98:96:66:7a:d0:1b:1c:48:85:29:e7:78:f3:97:57:
4d:b6:0b:25:ff:8b:fc:dd:46:c6:16:d8:36:73:a8:
d2:7e:70:e5:dc:58:32:1d:74:b6:88:ba:e3:5f:4a:
58:98:ba:c2:fc:48:69:96:8d:5c:71:7e:6b:84:49:
0d:c6:7f:a7:11:06:0b:05:a2:e4:66:90:d4:14:eb:
88:9a:6a:46:0c:f7:7b:a9:de:b6:3c:77:64:1d:eb:
eb:e5:0b:4a:47:74:35:2f:ab:95:79:a0:bd:5c:fd:
12:af:7e:60:b7:ea:34:cf:83:5d:f7:67:82:dd:92:
69:20:25:b6:40:b7:31:1c:9c:41:3e:03:86:62:25:
21:64:90:c2:cd:02:1b:86:6b:d6:6e:df:2e:4e:35:
2c:8f:09:ed:7e:c0:4b:c5:d8:f5:94:d1:72:40:a5:
15:a8:42:c3:d8:89:8d:69:c1:7a:e5:4b:4f:cf:b2:
46:93:8c:cf:58:db:86:dc:19:d8:ee:7e:e7:10:61:
da:f7:71:81:f9:c5:69:7d:1c:6c:05:4e:1f:60:1a:
18:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:34:4E:6D:84:28:C6:7D:66:0A:81:79:DB:2C:00:16:2A:A3:46:23
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/8DRObYQoxn1mCoF52ywAFiqjRiM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc7:6400::/40
2a06:a005:b60::/44
2a06:a005:d22::/48
2a06:a005:150a::/48
2a06:a005:2100::/44
2a06:a005:2480::/44
2a06:a005:24a0::-2a06:a005:24df:ffff:ffff:ffff:ffff:ffff
2a07:54c2:b00b::/48
2a0a:6040:300::/40
Signature Algorithm: sha256WithRSAEncryption
80:c4:f7:2b:45:0a:80:c6:c2:d6:1e:ef:9e:ab:0e:ba:73:b6:
fa:3b:85:19:f5:be:63:e5:a4:33:20:1f:6f:55:72:e6:cb:22:
06:f2:63:c0:26:3c:8f:40:8f:07:21:6b:3e:8f:dd:a0:60:bc:
61:5f:32:3a:76:bf:0e:92:9e:51:e8:3e:69:25:a9:da:01:39:
76:69:6f:dd:f9:23:93:d0:a6:36:55:62:74:00:93:98:ce:c0:
7d:13:d8:33:b5:b9:06:6e:9c:9e:3b:00:ee:45:83:d4:b3:b6:
8d:cc:49:3f:16:09:d9:d6:66:15:27:02:06:27:e9:4e:4a:7c:
be:80:cf:14:aa:08:ec:62:15:dd:32:1c:87:a9:a8:1b:a6:1d:
8c:d6:3d:b1:ac:84:a1:60:09:cc:2f:6d:63:83:8b:25:5a:29:
e0:0d:6c:94:ce:e5:15:ae:19:d9:a3:df:4a:09:17:ce:10:da:
91:3e:f9:b4:56:c1:fa:4b:56:da:1d:5a:24:e5:ca:8a:98:f9:
06:b1:18:05:8e:3c:2e:ae:a7:b0:6a:df:40:bd:f2:3f:fd:e7:
64:88:79:99:ff:f6:5c:1f:fd:84:2e:95:07:e0:f6:db:f4:70:
81:b3:db:18:ff:1b:2e:ed:d0:25:7a:01:ff:55:05:28:69:07:
74:de:79:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:13:11 2025 by rpki-client