Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/BOdrg_4POXUYQfkQVgFbzhjfz1k.roa
File: BOdrg_4POXUYQfkQVgFbzhjfz1k.roa (raw, json)
Hash identifier: Q+XHV0fb4KHQNuuO0cjU92TvfYtXr+ncwP01/mTaNK0=
Subject key identifier: 04:E7:6B:83:FE:0F:39:75:18:41:F9:10:56:01:5B:CE:18:DF:CF:59
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0181E59B8D6738631D451C3A55F5BD810F77
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/BOdrg_4POXUYQfkQVgFbzhjfz1k.roa
Signing time: Sun 10 Jul 2022 00:56:25 +0000
ROA not before: Sun 10 Jul 2022 00:56:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204069
IP address blocks: 2a06:a005:a14::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:e5:9b:8d:67:38:63:1d:45:1c:3a:55:f5:bd:81:0f:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jul 10 00:56:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=04e76b83fe0f39751841f91056015bce18dfcf59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d5:f8:72:94:bb:10:de:9e:a0:23:0c:f6:c7:
c8:cb:dd:05:30:01:ca:13:4d:28:85:2f:26:31:a3:
6e:01:23:9b:ee:64:b1:46:c1:b3:2b:e4:c1:be:6e:
f5:b9:24:71:be:63:f5:cd:9f:1c:a7:02:ed:42:8e:
19:c5:50:ae:98:fc:4b:7b:8d:3b:aa:14:e8:b0:6d:
30:19:1c:a1:88:92:96:e1:53:61:e5:f5:86:e7:11:
26:1d:24:57:b8:27:88:aa:85:76:f6:b2:8e:8f:96:
55:d8:97:8a:a3:d1:18:0b:1c:27:94:f2:ec:65:1b:
60:7c:f3:1d:b9:c8:a8:bb:c8:e7:c1:2d:c0:db:74:
6c:9a:27:27:f8:47:e4:7f:84:96:d3:e9:91:a0:49:
bb:f3:51:fc:27:f6:5a:33:8c:98:68:62:1b:7f:27:
88:df:21:3a:fa:f3:c5:c7:ed:3b:34:7f:41:72:d1:
f6:0b:85:ae:3d:5e:72:76:35:fe:69:0e:c9:97:90:
68:bb:80:b1:58:97:31:09:37:28:62:ed:f8:94:12:
76:f8:9e:9e:c1:5b:45:d9:9e:24:6e:a8:1c:60:b1:
82:2b:09:40:f8:eb:a3:87:e9:b4:62:45:79:6a:e1:
70:20:07:3d:55:ab:56:32:9f:65:0f:4d:37:bb:9c:
00:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:E7:6B:83:FE:0F:39:75:18:41:F9:10:56:01:5B:CE:18:DF:CF:59
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/BOdrg_4POXUYQfkQVgFbzhjfz1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:a14::/48
Signature Algorithm: sha256WithRSAEncryption
8c:b0:f9:d2:f8:c3:4c:da:f9:2d:e9:e8:14:e8:05:5b:19:69:
c7:02:34:af:2a:41:6a:75:a1:55:b8:1c:e7:ad:15:17:e2:5d:
33:06:d4:f6:12:01:62:13:09:5c:85:87:a4:4d:e0:83:74:a4:
79:30:28:71:f4:d4:ef:25:cd:d9:0a:2e:0c:7d:1d:56:7a:9f:
35:b4:41:3c:e3:19:1c:3e:29:83:b5:e5:95:89:10:03:5f:a4:
45:58:3d:be:40:d1:34:ce:ff:a7:b2:30:57:b7:b9:eb:c7:21:
f7:53:ad:8d:d5:cd:45:f5:e4:f6:73:9f:3a:e6:f5:9c:de:87:
cc:fb:f9:f2:16:65:bb:5e:06:9f:dd:cd:6d:a0:38:01:d3:28:
83:c8:8f:e6:13:05:ab:be:2b:53:15:10:a5:09:cb:d4:b0:11:
64:20:54:14:56:3e:62:33:ca:a8:43:5d:26:42:3f:8e:5c:2b:
24:cb:24:85:68:1c:b8:e9:7a:06:6b:52:54:1b:c9:ad:9b:d6:
46:2f:74:88:d5:a6:87:bc:e4:89:a6:2f:ba:a9:14:81:19:33:
05:33:24:48:ac:5c:28:e2:a2:e1:16:a8:70:c4:ad:ce:b8:5e:
fe:41:21:86:11:46:fe:97:12:f7:83:f9:5c:f1:74:c9:5a:6f:
6a:0d:aa:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:23:02 2025 by rpki-client