Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/F0rlF58n17dh5R9nNQ8_PFB7Zok.roa
File: F0rlF58n17dh5R9nNQ8_PFB7Zok.roa (raw, json)
Hash identifier: hWez0lO+S0oeNzTr6VZK8aA0dZ8i9Sm5IkBjLJ9YoZ4=
Subject key identifier: 17:4A:E5:17:9F:27:D7:B7:61:E5:1F:67:35:0F:3F:3C:50:7B:66:89
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 018203DBC48DFF520CEAD8BE05C1F10FBE6C
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/F0rlF58n17dh5R9nNQ8_PFB7Zok.roa
Signing time: Fri 15 Jul 2022 21:55:10 +0000
ROA not before: Fri 15 Jul 2022 21:55:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210387
IP address blocks: 2a06:a005:857::/48 maxlen: 48
2a06:a001:a0f0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:03:db:c4:8d:ff:52:0c:ea:d8:be:05:c1:f1:0f:be:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jul 15 21:55:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=174ae5179f27d7b761e51f67350f3f3c507b6689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:44:49:59:bb:67:e1:5d:cd:52:f7:73:0b:a9:
2e:c9:1b:6d:40:98:91:fd:77:bd:e9:7b:68:33:09:
1a:61:91:ca:c1:e2:67:53:1a:9f:27:cf:79:b6:79:
2b:8e:0d:fd:99:71:13:6d:58:73:89:7a:a4:8c:cd:
2f:0e:2e:5b:7c:30:10:4f:6e:fb:d6:1c:9b:9a:a4:
41:d1:ca:64:ae:2c:30:ed:bd:c5:89:a9:05:9c:f2:
79:b8:a4:2f:91:60:e9:58:b0:e0:ea:6b:65:f6:e3:
f8:77:17:f6:b4:36:bf:6f:af:20:73:4e:e8:ff:a0:
dc:28:86:5a:60:68:57:a3:95:71:d8:61:d7:c6:81:
61:93:e3:1c:96:a7:79:0a:e7:8f:8c:0f:e6:4d:35:
eb:91:e5:03:99:ff:d0:39:27:d9:25:04:b4:06:88:
4e:c7:ec:11:93:06:18:3f:3b:bb:65:a0:dd:ba:55:
da:70:e5:32:d6:82:e0:52:03:b2:56:16:90:d7:b4:
b0:7f:66:62:4d:fe:3f:0d:a6:fd:5c:aa:20:eb:8f:
ab:e0:3d:2b:23:85:5a:49:f3:0d:1c:23:cc:5b:04:
fa:05:60:4b:b9:65:88:bd:52:21:80:7a:67:2e:d6:
5a:b9:fa:03:39:46:4a:8f:d0:fe:ac:c8:9f:19:24:
92:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:4A:E5:17:9F:27:D7:B7:61:E5:1F:67:35:0F:3F:3C:50:7B:66:89
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/F0rlF58n17dh5R9nNQ8_PFB7Zok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a001:a0f0::/44
2a06:a005:857::/48
Signature Algorithm: sha256WithRSAEncryption
66:0c:f2:57:d3:a8:35:ec:9e:87:04:d0:89:a4:f2:b2:dd:62:
d7:bc:3b:3e:33:4c:82:48:ef:59:ab:6b:90:a3:8f:1f:44:b3:
12:e9:73:3d:4f:a0:7e:22:df:7a:c1:a7:d1:74:f4:ae:90:f7:
8e:a6:a9:d4:90:58:6b:9b:14:01:b9:d5:c9:5f:de:00:ab:3a:
62:41:fe:22:ed:52:2d:3b:d6:4b:30:b2:18:63:ad:a8:22:0f:
12:63:a2:5a:d3:08:fe:f0:ee:be:2b:5b:f2:1c:a3:f6:9d:8c:
fe:a2:16:77:96:86:e1:64:d4:d0:d2:0d:35:e3:13:0e:d7:09:
44:8c:7d:01:a4:02:d1:bb:8d:54:9c:ec:56:c5:95:13:2c:98:
b5:f7:70:a1:40:eb:b3:d2:6f:b5:f7:42:9e:e2:54:9c:62:d6:
18:e1:a1:7d:be:6a:33:e5:8e:c3:71:bb:70:6e:fb:6a:eb:90:
0b:b6:d1:d4:51:0d:05:fb:47:73:ec:18:1e:0d:22:30:f7:8a:
36:3a:23:40:da:d8:fc:9c:50:c2:9d:fb:d7:48:48:b1:ed:9b:
4b:48:9f:ed:f0:82:a2:0e:8a:28:dd:07:f6:2b:0f:2f:17:48:
20:27:91:4d:66:14:44:51:ba:2e:ee:58:be:65:2d:ca:13:86:
8c:ad:41:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 15:40:31 2025 by rpki-client