Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/AcFnOGifFKzLN5MAGfDjdwhsKu8.roa
File: AcFnOGifFKzLN5MAGfDjdwhsKu8.roa (raw, json)
Hash identifier: CqggcvkKFoRHcUPhoHLCwr8G+m3KlVLqIXw6e145U8Q=
Subject key identifier: 01:C1:67:38:68:9F:14:AC:CB:37:93:00:19:F0:E3:77:08:6C:2A:EF
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0183989D05B1D1047CA769F1D648A5C839E1
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/AcFnOGifFKzLN5MAGfDjdwhsKu8.roa
Signing time: Sun 02 Oct 2022 12:12:50 +0000
ROA not before: Sun 02 Oct 2022 12:12:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 138211
IP address blocks: 2a06:a005:c30::/44 maxlen: 48
2a06:a005:520::/44 maxlen: 48
2a06:a005:510::/44 maxlen: 48
2a06:a005:4c0::/44 maxlen: 48
2a06:a005:c20::/44 maxlen: 48
2a06:a005:11f0::/44 maxlen: 48
2a06:a005:7c0::/44 maxlen: 48
2a06:a005:540::/44 maxlen: 48
2a06:a005:530::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:98:9d:05:b1:d1:04:7c:a7:69:f1:d6:48:a5:c8:39:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Oct 2 12:12:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=01c16738689f14accb37930019f0e377086c2aef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:27:a6:a8:28:f3:c6:c1:00:97:2b:47:b4:99:
ae:0c:0d:93:a7:b9:68:2f:bc:b3:6a:74:17:55:2a:
6b:4e:ef:52:8f:54:28:4d:94:58:51:12:32:f2:2a:
a7:60:30:3b:78:dd:61:dd:e6:61:70:ca:17:63:45:
41:7d:ed:e0:80:29:9a:bc:47:6e:e4:70:17:08:90:
7e:b9:8f:0b:33:83:74:19:b0:8e:95:73:76:ea:99:
a4:ff:62:7b:ad:04:dc:df:55:3d:b6:05:04:29:04:
1e:4b:f7:94:06:22:0d:cc:66:65:bc:40:1d:0a:e8:
74:94:2d:84:8f:2c:e2:8b:ce:db:95:f9:3a:cd:b5:
71:79:17:6b:a8:a8:8a:9c:27:fb:7f:6c:46:20:5d:
d2:a9:11:72:f5:a0:c1:df:e3:c5:11:0b:17:17:94:
01:37:20:12:37:89:84:fb:56:53:3a:a9:29:4b:3c:
2a:72:b9:fe:75:19:df:b4:03:52:cf:e5:cf:c5:35:
79:c4:c6:cb:ac:c2:ed:f6:5b:16:d6:02:8a:e7:92:
63:ff:34:18:47:d9:95:36:49:fc:ff:69:a8:8b:38:
5b:7d:de:28:c6:e7:08:69:01:0e:b3:ab:ab:d8:4d:
87:a1:10:6d:a3:fd:bf:aa:a4:32:d9:08:c4:91:70:
ed:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:C1:67:38:68:9F:14:AC:CB:37:93:00:19:F0:E3:77:08:6C:2A:EF
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/AcFnOGifFKzLN5MAGfDjdwhsKu8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:4c0::/44
2a06:a005:510::-2a06:a005:54f:ffff:ffff:ffff:ffff:ffff
2a06:a005:7c0::/44
2a06:a005:c20::/43
2a06:a005:11f0::/44
Signature Algorithm: sha256WithRSAEncryption
70:99:cf:90:ee:c4:66:57:ef:d9:1f:ab:56:07:27:10:f2:6e:
b2:72:d9:14:46:18:12:2c:d1:28:df:3e:7a:69:2f:92:98:8c:
c3:cd:50:d2:11:26:6f:aa:fb:92:24:55:a9:b1:80:3b:32:ae:
d6:1f:58:8f:02:18:2c:fd:8c:a2:f4:c3:ad:46:cf:2d:4d:57:
52:f8:b1:a6:83:b2:9f:b2:e4:d3:2b:5c:90:e5:3b:03:a0:ee:
c7:e9:06:5d:70:03:d1:48:6f:41:74:50:be:5b:9d:a4:6b:52:
75:16:15:ee:54:d6:ab:1d:ad:36:5a:dc:ce:3c:1e:d2:9b:6f:
8c:a4:0d:1b:5b:6a:34:4b:1a:1a:8e:93:fb:55:d0:10:a2:7a:
5f:aa:c1:9c:9b:9d:b7:2b:de:fa:97:97:23:92:55:c9:49:6e:
a9:4a:d0:ee:9a:a8:3e:82:a3:22:55:12:ac:2f:64:ed:7a:99:
a9:38:bf:6d:be:97:a1:4a:b8:f4:d4:d2:a4:67:24:51:8a:e9:
e3:7b:6f:20:e3:60:1d:75:ca:0f:6d:47:d4:d2:eb:bb:39:28:
53:f8:46:f4:99:0f:2f:b3:85:15:3b:5e:d9:64:79:da:f3:6c:
94:0c:8d:24:c7:1e:2d:7c:7e:ae:47:2b:b2:da:9b:b0:1a:79:
05:d4:f9:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 09:58:13 2025 by rpki-client