Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/GAhyiX5uCaLIFKNV_DOTAfnNPC4.roa
File: GAhyiX5uCaLIFKNV_DOTAfnNPC4.roa (raw, json)
Hash identifier: Ud4EMutgCVzED4KSUCZz5tH5pa4+JoO0KIVwiLFeiQo=
Subject key identifier: 18:08:72:89:7E:6E:09:A2:C8:14:A3:55:FC:33:93:01:F9:CD:3C:2E
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0184E406A00575EDEB4789EA1F945CC86FE4
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/GAhyiX5uCaLIFKNV_DOTAfnNPC4.roa
Signing time: Mon 05 Dec 2022 20:42:30 +0000
ROA not before: Mon 05 Dec 2022 20:42:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200969
IP address blocks: 2a06:a005:1164::/48 maxlen: 48
2a06:a005:1d51::/48 maxlen: 48
2a06:a005:1161::/48 maxlen: 48
2a06:a005:1162::/48 maxlen: 48
2a0a:6040:f400::/40 maxlen: 48
2a06:a005:1163::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e4:06:a0:05:75:ed:eb:47:89:ea:1f:94:5c:c8:6f:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Dec 5 20:42:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=180872897e6e09a2c814a355fc339301f9cd3c2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:53:e0:13:b3:ba:13:11:b0:88:08:18:2d:c9:
b0:86:f5:d2:98:0d:45:ea:f2:05:87:a4:4d:8c:8a:
25:42:1b:8c:a2:c1:68:80:dc:67:97:86:20:e0:b2:
79:bf:d7:ab:ac:99:d7:78:7b:89:23:3d:1c:02:da:
b2:0b:92:e9:4d:53:e2:89:38:09:a0:29:49:34:d6:
59:9a:c0:77:b2:1c:1b:62:93:95:85:bb:2a:d9:9f:
d2:47:b4:bb:19:d9:4a:eb:68:39:5a:1f:52:3a:47:
4e:f8:f3:34:16:90:6b:27:6b:0b:ff:e9:cc:c2:2e:
ba:4e:2d:d5:50:40:55:75:c9:32:93:02:09:15:aa:
b4:70:a7:7d:c3:3b:9b:7c:43:3d:4c:2b:2b:0d:05:
77:fe:56:84:b8:2a:66:96:10:6e:a1:25:c6:c3:44:
bf:7c:cb:45:9f:fe:e6:0b:82:15:ae:38:84:08:e2:
8b:1d:5d:be:bf:21:51:c2:39:37:96:1c:f0:0c:cb:
09:69:6c:c4:b3:96:ce:42:11:73:08:8e:b8:5d:7c:
83:ad:7a:3a:76:10:77:5e:12:36:b7:69:ff:ca:5c:
73:cf:10:17:92:3c:1f:27:8e:96:e0:2b:6c:dd:8c:
b7:5b:a0:eb:e6:e1:d2:28:3d:62:d2:03:6a:fb:45:
b0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:08:72:89:7E:6E:09:A2:C8:14:A3:55:FC:33:93:01:F9:CD:3C:2E
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/GAhyiX5uCaLIFKNV_DOTAfnNPC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1161::-2a06:a005:1164:ffff:ffff:ffff:ffff:ffff
2a06:a005:1d51::/48
2a0a:6040:f400::/40
Signature Algorithm: sha256WithRSAEncryption
6d:16:25:ba:db:e8:23:d8:f4:fc:34:fa:60:21:e9:0a:d0:55:
8c:83:7d:47:8c:92:4c:a5:a7:f3:9f:16:43:87:6b:7d:cb:1a:
db:0e:ee:32:84:72:ee:f1:6f:91:f4:86:c6:33:ca:4b:a1:5f:
f7:74:8f:33:be:ef:06:47:7c:36:ab:95:af:6e:06:15:29:6f:
15:cd:ec:4b:ba:d0:75:84:4b:58:0a:fa:97:81:fa:48:b6:b7:
2d:57:d8:66:aa:16:70:40:ed:5e:a5:18:84:fb:f7:ca:a8:96:
5b:5b:65:81:5b:f0:b2:1e:7c:cd:fc:58:76:c8:3b:d0:84:d5:
de:c1:68:7e:c5:31:79:3f:8f:7d:e6:29:d0:72:74:27:0f:4e:
22:b8:b9:46:65:92:63:46:a4:4d:f8:f0:dd:fe:81:ca:7d:bb:
2c:f7:01:4c:06:fe:4b:e8:e5:bd:eb:30:df:67:43:0a:14:db:
a6:6a:12:99:3a:46:dc:a3:e5:68:e4:f4:3f:31:e3:a1:dd:d3:
c0:39:22:a6:99:99:7c:0b:cd:36:51:49:21:0e:9a:7f:1e:c1:
2d:a6:40:a3:93:96:fe:b0:ef:b9:df:83:2f:e1:91:68:b1:86:
59:bd:4c:24:61:ff:87:95:d0:25:1d:10:e7:c0:5f:17:3d:84:
19:4b:c8:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:03:32 2025 by rpki-client