Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ArclTOYlZJQ12ionBpDaWh8Lzds.roa
File: ArclTOYlZJQ12ionBpDaWh8Lzds.roa (raw, json)
Hash identifier: lUOXvZ58/8eCpxZbfnDj44MzOCQ0bwyHcVHthwGREA0=
Subject key identifier: 02:B7:25:4C:E6:25:64:94:35:DA:2A:27:06:90:DA:5A:1F:0B:CD:DB
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 19CD235C
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ArclTOYlZJQ12ionBpDaWh8Lzds.roa
Signing time: Sun 15 May 2022 00:33:41 +0000
ROA not before: Sun 15 May 2022 00:33:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205092
IP address blocks: 2a06:a005:930::/44 maxlen: 48
2a06:a005:940::/44 maxlen: 48
2a06:a005:18::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 432874332 (0x19cd235c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: May 15 00:33:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=02b7254ce625649435da2a270690da5a1f0bcddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0d:15:58:66:6c:38:5b:d3:aa:14:5e:02:d0:
e9:60:2f:cb:95:fb:fe:1b:d7:93:ad:31:5d:ab:bb:
9f:a3:1d:d1:85:bc:13:9a:17:44:2b:e6:ef:99:e7:
2d:e1:69:e8:4d:48:01:59:81:d4:cb:12:3e:c6:70:
f4:91:40:36:63:8f:58:34:f4:27:2a:15:4c:b0:bd:
fd:25:d6:20:07:d9:6c:d4:6b:3c:6d:a7:e4:74:52:
3d:c5:05:bf:88:48:d8:1a:d4:0d:3f:46:1b:17:c6:
47:8f:45:86:f5:62:10:27:9c:d5:64:ea:3b:6b:b7:
d2:a5:99:b9:89:ba:53:c7:c4:72:8e:bb:a9:32:5f:
07:58:a8:1f:26:63:55:22:42:41:fd:ea:7f:87:5a:
f8:ec:94:5f:6a:72:bb:0d:dc:1a:8c:d9:d2:a6:00:
fc:6f:b4:55:68:77:ef:ea:08:d4:bb:aa:8b:fb:97:
7f:1f:95:fb:e0:9a:36:4f:07:8b:94:fc:87:96:91:
46:bb:40:02:fb:40:dc:55:d3:a7:79:8e:f8:3d:9e:
c5:b5:c1:a4:e6:1b:e1:e9:bd:1f:b2:3a:65:1b:17:
45:04:64:04:17:be:d4:c7:fc:f5:69:74:bb:ee:38:
0f:43:2f:a2:3c:8e:76:e2:27:d2:86:04:21:a2:db:
ef:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:B7:25:4C:E6:25:64:94:35:DA:2A:27:06:90:DA:5A:1F:0B:CD:DB
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ArclTOYlZJQ12ionBpDaWh8Lzds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:18::/48
2a06:a005:930::-2a06:a005:94f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
22:c8:e3:8e:99:33:0b:00:ad:b6:c1:a1:17:56:ce:85:51:d9:
9c:b2:d5:90:47:f9:5a:c0:d0:79:de:c9:e3:f5:fc:0e:90:d8:
c3:2d:ca:31:8d:3a:96:e2:31:ca:1b:56:7e:22:6b:db:e5:59:
60:e8:c0:ab:db:56:0f:3b:c0:d7:36:e6:6e:0d:73:b3:ac:ae:
b4:40:77:ac:2f:9a:9d:f7:ba:20:c5:da:82:3c:1e:68:17:ce:
6d:fb:fa:a2:da:40:0e:8d:df:0e:5a:bd:70:51:a0:cc:1f:45:
a9:78:0d:df:85:32:ee:7d:ad:9d:c6:d3:78:f6:b0:29:3e:ce:
ab:c2:d8:6c:e6:4a:75:60:54:a6:18:ba:a8:64:2e:ed:25:44:
64:f7:d2:8d:c7:f8:47:dd:47:d4:15:53:14:68:e9:f9:bf:33:
92:d7:1c:04:d1:5f:69:d7:24:84:cd:5b:d7:c1:cd:9c:2a:1e:
30:a4:a7:b4:ad:f2:ed:8f:a8:f9:5c:ec:bf:ce:06:b0:16:66:
3e:5e:49:76:36:f4:84:36:f8:bc:34:2d:4b:24:0a:09:df:71:
93:2d:4d:a7:5c:93:2f:75:b1:a6:ea:09:14:8a:81:37:36:e1:
50:38:99:69:77:a0:38:5b:03:7c:55:74:1b:16:a9:ad:b0:04:
87:09:14:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:43:11 2025 by rpki-client