Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/GVhSewDMYyhdggbb1Uy293-wnzo.roa
File: GVhSewDMYyhdggbb1Uy293-wnzo.roa (raw, json)
Hash identifier: hvp1yAUoa+iJf9+7RVJ1DqVabi+C87EhO4mngAWjkb8=
Subject key identifier: 19:58:52:7B:00:CC:63:28:5D:82:06:DB:D5:4C:B6:F7:7F:B0:9F:3A
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01848F6AE4EF8A67093795340F931588A70D
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/GVhSewDMYyhdggbb1Uy293-wnzo.roa
Signing time: Sat 19 Nov 2022 10:24:18 +0000
ROA not before: Sat 19 Nov 2022 10:24:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206131
IP address blocks: 2a06:a005:1084::/48 maxlen: 48
2a06:a005:1082::/48 maxlen: 48
2a06:a005:1c78::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:8f:6a:e4:ef:8a:67:09:37:95:34:0f:93:15:88:a7:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Nov 19 10:24:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1958527b00cc63285d8206dbd54cb6f77fb09f3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8f:94:c9:a9:e6:15:27:2c:bf:80:6c:97:ea:
e2:e6:de:a6:72:36:98:47:92:60:5e:3c:53:39:50:
3a:62:4a:1e:b9:bd:ee:13:16:34:69:c6:b1:55:25:
f8:60:43:77:9b:43:cc:95:de:f9:6d:26:1a:9c:4a:
89:9f:11:cf:74:60:30:ba:b1:5d:e0:a0:74:27:98:
f3:35:20:bf:c3:94:1e:cf:67:1c:c4:e2:b8:dd:79:
f1:f9:25:8c:1e:82:96:b5:0e:9d:42:cc:98:34:46:
08:77:0f:23:0a:bf:87:4a:11:8b:82:d7:21:fd:4d:
7c:18:ab:d9:fc:08:f6:61:73:6c:c4:7e:bd:98:86:
d7:3f:ba:a7:f6:81:86:9d:05:93:12:22:a5:eb:c5:
2e:ab:a6:2f:a5:68:7c:41:7a:13:16:00:1f:2d:d8:
ee:ef:f9:d2:87:42:ed:46:bd:c0:c8:3a:2c:32:b4:
b9:47:34:1f:98:6c:51:65:3b:fc:7e:26:03:b9:3b:
97:5c:90:df:27:af:a7:d2:9c:b4:db:14:19:78:79:
d6:16:c0:05:94:e9:db:cd:25:5a:de:25:cd:3c:c3:
f5:7e:71:5d:9b:de:33:65:b9:b4:5b:c1:38:29:6b:
04:21:a6:4d:99:9f:d3:d7:e2:0b:5d:37:a1:e4:85:
89:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:58:52:7B:00:CC:63:28:5D:82:06:DB:D5:4C:B6:F7:7F:B0:9F:3A
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/GVhSewDMYyhdggbb1Uy293-wnzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1082::/48
2a06:a005:1084::/48
2a06:a005:1c78::/48
Signature Algorithm: sha256WithRSAEncryption
2b:51:c4:a8:2f:06:21:a7:48:57:9b:c4:32:93:16:73:a9:db:
69:60:65:e3:54:2a:0e:f8:03:9d:32:c2:da:aa:cc:30:c8:01:
6f:b6:6b:55:47:df:15:bf:a7:ee:56:ca:b0:65:b8:e1:f1:23:
28:04:df:f0:46:4b:f5:e3:a5:25:15:52:e4:45:55:ac:39:5f:
4f:0c:eb:b4:3a:0b:88:a8:57:6b:ef:0c:83:1c:8c:d1:42:c7:
0d:cf:21:12:0a:9b:da:fd:70:ad:fa:a2:7b:f4:96:98:dd:98:
3a:56:9b:0c:8c:39:6f:d1:f9:38:9b:67:ba:29:81:92:67:5d:
fd:fe:3f:7f:9d:c3:87:e8:a4:5b:64:7e:9c:5a:0e:eb:d0:8f:
a9:26:bb:9d:d8:af:0b:88:8d:96:e7:de:53:5b:a9:13:44:dc:
1a:a4:c1:10:0f:7b:7d:c4:41:f2:46:8d:8f:86:d8:f3:7c:5b:
46:df:2e:3f:07:1d:9a:30:1f:48:eb:25:ee:48:8e:a5:d8:73:
05:e6:fb:21:2a:b3:f6:1b:76:8e:b9:04:b0:ff:10:04:a8:a5:
1c:55:45:c8:93:25:8d:e6:81:98:00:91:c2:01:5b:a7:bb:72:
a5:95:78:89:b3:1a:5b:d8:40:26:f3:74:25:d9:5e:75:51:e0:
38:0b:7f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:14:11 2025 by rpki-client