Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/9kKm9TGVH7YMsoD7kWmpZj1tzzo.roa
File: 9kKm9TGVH7YMsoD7kWmpZj1tzzo.roa (raw, json)
Hash identifier: wPGG0lvV3Bje4fZD++6oJc6gM31Mr5yDtC5QU+5PblI=
Subject key identifier: F6:42:A6:F5:31:95:1F:B6:0C:B2:80:FB:91:69:A9:66:3D:6D:CF:3A
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 1A579383
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/9kKm9TGVH7YMsoD7kWmpZj1tzzo.roa
Signing time: Tue 31 May 2022 06:39:14 +0000
ROA not before: Tue 31 May 2022 06:39:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212983
IP address blocks: 2a06:a005:2d9::/48 maxlen: 48
2a06:a005:a10::/44 maxlen: 48
2a06:a005:43e::/48 maxlen: 48
2a06:a005:13::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 441947011 (0x1a579383)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: May 31 06:39:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f642a6f531951fb60cb280fb9169a9663d6dcf3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:57:e1:9d:f0:15:e7:c0:0d:0c:ed:34:a3:da:
87:69:77:90:cf:2c:da:55:4e:f4:e4:f3:7f:9a:0a:
dc:3f:ad:d6:df:1d:6c:02:21:11:19:b3:74:8e:54:
76:bb:9c:d6:2b:02:5c:b7:72:5f:90:ee:ef:a0:5b:
66:74:67:d9:74:97:31:b3:43:34:31:bd:0f:1b:d2:
c5:60:21:6b:3c:27:5a:9c:3d:cd:da:a4:05:d2:04:
52:27:22:d8:a0:5a:3b:07:f5:19:66:ea:e8:64:dd:
51:8f:20:0b:44:fe:55:39:36:6f:26:71:6c:17:a0:
82:bf:23:b0:2a:d5:36:55:df:ec:75:44:23:f6:9d:
70:2d:b3:c1:99:28:c9:17:b3:f2:30:37:ac:99:24:
42:c0:38:a2:ef:59:cb:1b:be:24:6f:ad:f8:6d:93:
6a:a2:7e:aa:97:7a:83:1d:1d:79:da:19:36:82:ef:
7f:67:cf:7f:58:03:bf:0b:d9:cb:04:f5:28:8e:38:
6e:df:15:ad:57:68:bc:d7:ad:ae:43:bb:72:7f:93:
16:8e:2d:9b:e1:37:6d:ac:5b:33:4f:1c:4c:f9:0a:
a0:87:7d:2e:54:3d:85:20:5e:bc:56:62:91:98:c9:
ef:db:3e:82:b0:50:07:98:37:b0:da:66:7e:0c:85:
ea:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:42:A6:F5:31:95:1F:B6:0C:B2:80:FB:91:69:A9:66:3D:6D:CF:3A
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/9kKm9TGVH7YMsoD7kWmpZj1tzzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:13::/48
2a06:a005:2d9::/48
2a06:a005:43e::/48
2a06:a005:a10::/44
Signature Algorithm: sha256WithRSAEncryption
73:18:3e:63:e9:2a:01:30:ec:a6:15:9c:1a:d7:1e:1a:b6:7d:
fc:d9:bd:3e:f2:ca:ae:8c:fb:cf:8d:dd:50:2c:f2:d0:99:91:
11:89:65:fe:f3:30:29:43:eb:84:ac:e3:fd:ea:81:64:b9:41:
c3:a0:4e:e0:84:ce:eb:ee:ca:c7:05:da:3b:73:21:61:d5:66:
dc:66:16:e3:b3:07:17:0b:0d:06:ac:8c:a3:b9:ac:76:13:68:
b2:37:01:96:89:e5:f4:b8:ed:e1:4a:a8:ef:e3:a7:d6:42:28:
8d:3b:9a:11:f0:51:cf:3f:70:53:77:ba:0d:40:95:10:56:25:
62:b7:95:24:b1:34:9e:a4:f8:ad:d6:de:cb:ca:48:c1:f2:5a:
bb:30:88:db:7b:9f:12:09:1e:aa:31:cf:42:d3:44:e6:8f:b6:
78:2e:54:4a:68:67:09:33:b5:a8:a1:32:df:3f:e3:98:94:07:
55:06:1a:62:a6:60:5b:ca:0b:a1:a5:8f:87:90:06:10:b6:7c:
46:c7:46:f0:35:d5:d7:e9:eb:6b:29:4b:26:e4:cf:c6:33:02:
0f:40:8c:3c:93:51:6d:ed:4c:5c:48:84:c0:9f:a5:3a:6c:ab:
90:4c:97:5d:24:cc:59:0f:01:36:bb:c4:ec:73:c1:7e:81:0d:
fd:c9:f6:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 06:07:42 2025 by rpki-client