Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/BdMQJnh4uGhQSMhOvSHH5m4hDOA.roa
File: BdMQJnh4uGhQSMhOvSHH5m4hDOA.roa (raw, json)
Hash identifier: a7xbL+iLeH2M9BZp4nGhnSY2QnVmx8uc52NM6UrHz9I=
Subject key identifier: 05:D3:10:26:78:78:B8:68:50:48:C8:4E:BD:21:C7:E6:6E:21:0C:E0
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0183E6E15F271D2A8E33013FC785F9926CBC
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/BdMQJnh4uGhQSMhOvSHH5m4hDOA.roa
Signing time: Mon 17 Oct 2022 16:57:53 +0000
ROA not before: Mon 17 Oct 2022 16:57:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209391
IP address blocks: 2a06:a005:1f90::/44 maxlen: 48
2a06:a005:1d70::/44 maxlen: 48
2a06:a005:1fa0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:e6:e1:5f:27:1d:2a:8e:33:01:3f:c7:85:f9:92:6c:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Oct 17 16:57:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=05d310267878b8685048c84ebd21c7e66e210ce0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:69:13:39:b7:be:e6:16:aa:de:9a:34:61:69:
84:ca:4c:1e:b5:d4:85:fc:92:44:55:64:07:e6:47:
ec:36:da:c7:9a:5d:14:19:1a:09:bf:34:88:04:67:
53:7b:47:dc:a2:86:c1:94:a3:11:21:4d:5e:f0:12:
e9:3d:5a:ab:6b:dd:8c:3f:c0:f4:eb:e2:ea:6e:46:
fb:35:97:3f:d1:56:8c:6e:b9:3b:a7:1b:17:ac:58:
f3:d2:57:ee:21:f3:24:8c:8a:61:5e:d7:9f:dd:16:
b0:b9:af:fe:41:fd:ed:58:25:d4:70:89:b1:5e:a7:
8f:34:e6:32:15:4f:a5:b3:28:17:ba:8f:48:44:fe:
1a:f9:1f:0b:f4:cb:29:63:f0:b2:a5:26:90:7e:41:
72:f1:5f:1f:ce:bb:01:b3:ca:16:61:e7:ad:31:98:
9a:21:d8:a6:a8:2d:19:9a:28:04:f7:3c:a9:39:4c:
9c:75:07:b8:4b:cf:c0:c3:35:84:0d:c6:e2:d3:55:
ca:e7:25:70:b8:fd:78:a1:22:f3:a1:04:89:4e:52:
54:14:5c:c4:df:9b:09:4d:77:de:c7:74:0e:c4:f5:
e2:c5:cc:7c:f9:c9:a2:6d:96:61:3b:b9:0f:98:67:
1e:ec:4e:cd:5b:f0:7b:0b:ad:61:88:d2:07:5f:99:
f0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:D3:10:26:78:78:B8:68:50:48:C8:4E:BD:21:C7:E6:6E:21:0C:E0
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/BdMQJnh4uGhQSMhOvSHH5m4hDOA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1d70::/44
2a06:a005:1f90::-2a06:a005:1faf:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
8f:68:75:a0:7f:a2:ad:dd:5a:43:92:e8:54:67:b7:19:1c:18:
12:73:ea:06:8c:b0:29:72:72:69:89:4f:e7:86:8b:2f:6e:25:
ed:88:b5:a9:f7:e0:45:e7:d9:76:e2:05:db:55:33:3d:34:c6:
27:b9:e2:e3:c4:b9:a0:50:d3:da:0f:58:c7:00:8f:bb:be:2c:
31:f9:e7:34:fb:d9:9a:56:98:10:76:a0:76:05:b8:e2:84:d7:
f2:be:7f:78:17:4b:84:da:da:5a:2f:76:17:fd:2e:b6:44:36:
f9:62:d1:74:86:fd:21:aa:84:a2:e4:3a:1c:a0:64:c3:f7:08:
9d:e5:e5:b4:85:0a:aa:1a:5e:f9:7e:5c:b9:34:9a:70:0e:e2:
3e:ad:c3:86:e1:3a:6d:ee:85:17:db:bf:4f:8c:60:9b:84:d2:
e5:c8:34:38:7e:d7:6e:a3:64:28:96:a2:55:b8:2f:6e:ce:92:
1d:b8:7f:4a:6f:ce:43:6f:af:2c:ea:fa:7d:b3:4a:7d:b0:64:
84:58:94:a9:17:e1:fe:08:de:93:0e:c5:8e:9d:18:2b:70:22:
0e:28:b1:29:51:f1:2c:8f:26:89:44:62:94:60:f5:e4:f1:29:
09:00:2d:08:71:53:28:55:3c:f1:07:f2:f8:91:f8:83:90:44:
37:32:05:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 17:20:12 2025 by rpki-client