Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/AtEoLg0VbcogNke0_Prd0jQIaKM.roa
File: AtEoLg0VbcogNke0_Prd0jQIaKM.roa (raw, json)
Hash identifier: 29ANZxGoEQkWmSaKaPY9ALHWf4JEWrxbd7XOcBcDckQ=
Subject key identifier: 02:D1:28:2E:0D:15:6D:CA:20:36:47:B4:FC:FA:DD:D2:34:08:68:A3
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 018374692B4031CA4121B9FE2E724DC9ECF1
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/AtEoLg0VbcogNke0_Prd0jQIaKM.roa
Signing time: Sun 25 Sep 2022 11:29:52 +0000
ROA not before: Sun 25 Sep 2022 11:29:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44406
IP address blocks: 2a06:a005:740::/44 maxlen: 48
2a06:a005:670::/44 maxlen: 48
2a06:a005:1e70::/44 maxlen: 48
2a06:a005:760::/44 maxlen: 48
2a06:a005:780::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:74:69:2b:40:31:ca:41:21:b9:fe:2e:72:4d:c9:ec:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Sep 25 11:29:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=02d1282e0d156dca203647b4fcfaddd2340868a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:83:c9:1f:38:28:3c:63:6f:78:c6:47:c8:9f:
a4:b0:6e:a6:0b:81:f1:37:df:aa:9a:3d:90:e4:55:
b4:52:10:b8:fc:65:66:7c:a2:30:94:3f:b9:ca:f7:
bb:0f:4c:cd:b6:ca:a3:46:b6:94:c9:69:24:66:12:
76:12:81:39:7b:a6:88:27:7c:f5:36:26:31:4f:5c:
5c:ef:94:10:cf:5d:52:8b:7b:5a:52:e7:16:25:9e:
23:ca:f0:55:f2:05:db:a6:7e:a7:22:b6:8a:52:e9:
ff:bf:b2:79:03:28:a5:36:00:68:ad:92:e3:f1:c1:
a7:77:7a:8f:9f:d9:1d:bc:83:8a:25:03:10:99:0d:
0e:08:37:a7:00:e5:63:93:f6:b4:4a:3a:ef:72:f5:
0d:32:89:42:28:20:88:85:c4:a1:30:d2:f1:43:8b:
fc:d6:18:b5:f0:4f:a5:e0:5d:a6:0b:24:58:6e:9e:
fc:c4:56:c6:6e:60:ab:06:a3:d2:30:05:2a:bd:0d:
12:d5:97:f7:3b:16:09:a4:ed:ee:8c:b5:b1:e9:ed:
6a:9a:ae:4f:9f:41:30:60:85:88:80:b3:6e:f6:69:
02:e7:28:99:a6:d0:9a:4b:5e:e7:f3:09:92:89:1d:
56:d1:79:d4:7f:73:73:1a:94:bd:be:57:ca:6d:71:
9c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:D1:28:2E:0D:15:6D:CA:20:36:47:B4:FC:FA:DD:D2:34:08:68:A3
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/AtEoLg0VbcogNke0_Prd0jQIaKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:670::/44
2a06:a005:740::/44
2a06:a005:760::/44
2a06:a005:780::/44
2a06:a005:1e70::/44
Signature Algorithm: sha256WithRSAEncryption
5f:43:a4:eb:bb:35:33:42:be:f5:6c:41:74:fa:af:99:ab:9c:
c5:ac:57:2f:96:65:38:ce:ea:19:05:6a:63:c5:f6:69:60:1d:
63:13:30:e3:b8:ee:07:a4:3f:a0:2d:0e:39:30:ba:11:98:1a:
5f:fe:2d:a4:af:69:a7:84:d2:50:2c:c2:ff:d0:2c:c3:9d:e1:
5d:9e:4d:a2:cb:7b:47:47:93:cb:e3:50:bd:3d:62:d3:3c:9d:
6b:e0:3d:80:4a:cb:1e:f5:f7:ef:39:89:cb:cf:dc:02:64:9a:
5d:52:0d:d7:ca:d1:b3:14:9e:ee:17:25:aa:d9:64:cf:9d:d7:
1e:bb:a2:29:6d:c4:0f:1b:16:b5:26:7e:d4:68:9b:0f:0e:d2:
eb:64:ca:69:d8:ca:6a:26:6e:6d:5d:b8:82:33:a1:c1:ea:4b:
d7:d5:5e:33:b5:9e:14:01:82:4d:b7:08:e5:90:ca:6b:2b:02:
05:1b:fe:72:b7:f4:72:f4:24:b2:27:8a:f7:26:33:c5:42:58:
04:b0:2e:9e:c4:a2:14:e0:17:d8:65:ee:c8:48:05:42:aa:c9:
4c:ba:3a:9e:ef:c0:a2:27:7c:e5:b4:d5:8b:7e:f3:26:4a:bd:
cd:0d:99:93:ee:7a:c4:12:78:a1:ad:59:b7:89:df:46:a9:b8:
a2:6b:a7:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:09:31 2025 by rpki-client