Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/GpYDxpQcpnf3WXcU5kJPlLUwXLY.roa
File: GpYDxpQcpnf3WXcU5kJPlLUwXLY.roa (raw, json)
Hash identifier: /8nwJPyLsfLD9UUgC8OApIlgloCtyQ/a5mDvnogsmtI=
Subject key identifier: 1A:96:03:C6:94:1C:A6:77:F7:59:77:14:E6:42:4F:94:B5:30:5C:B6
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 018274C8AF1B13BF846EC4609CF615CD316E
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/GpYDxpQcpnf3WXcU5kJPlLUwXLY.roa
Signing time: Sat 06 Aug 2022 20:11:25 +0000
ROA not before: Sat 06 Aug 2022 20:11:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204268
IP address blocks: 2a06:a005:a12::/48 maxlen: 48
2a06:a005:1000::/44 maxlen: 48
2a06:a005:a0e::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:74:c8:af:1b:13:bf:84:6e:c4:60:9c:f6:15:cd:31:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Aug 6 20:11:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1a9603c6941ca677f7597714e6424f94b5305cb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:87:fb:d0:9a:d0:a8:8d:67:5a:0e:02:5a:00:
65:c6:e7:05:d7:64:c0:6e:8b:e7:00:6b:36:79:5a:
d5:82:0c:43:f9:65:38:f7:75:72:de:3e:a0:e0:5b:
d2:02:60:92:06:89:a1:ab:a6:bb:64:6f:68:fd:b9:
e3:cf:ae:1e:ec:c9:a5:54:6b:dd:66:b8:35:9a:5c:
74:a5:d1:dd:f2:7b:a5:f5:bd:b3:96:03:82:0b:59:
60:2d:12:de:0d:39:ac:7d:17:fc:6b:d4:b6:d3:6e:
3a:df:22:15:16:23:7b:ae:54:6e:13:ad:06:2a:21:
39:3c:ba:26:c0:cd:f0:f2:be:12:e2:42:93:7d:10:
74:1e:34:68:da:dd:2b:bc:e5:b1:51:1d:d4:1b:94:
0b:c7:a8:cf:6c:8e:fc:d3:10:97:c1:a2:06:c5:e0:
63:20:08:1c:e9:d7:76:1a:35:62:e7:dc:fd:42:cc:
e4:1e:c6:fd:0a:29:b1:4e:1b:a9:80:e3:00:77:fc:
b2:78:b9:08:e2:9e:42:4a:85:e9:0d:0b:3c:c6:49:
44:69:e3:b0:b8:cd:c9:04:cb:63:51:fc:e1:d5:b9:
6b:6c:54:8d:da:0b:c4:1f:6f:44:41:96:6f:db:bb:
09:33:3e:c4:83:5c:99:bd:63:b3:63:d6:79:15:89:
b7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:96:03:C6:94:1C:A6:77:F7:59:77:14:E6:42:4F:94:B5:30:5C:B6
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/GpYDxpQcpnf3WXcU5kJPlLUwXLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:a0e::/48
2a06:a005:a12::/48
2a06:a005:1000::/44
Signature Algorithm: sha256WithRSAEncryption
23:05:b9:e5:8f:99:3b:49:00:9e:89:fd:60:9f:49:a1:8e:53:
cc:b5:98:43:58:9c:e2:e7:84:bb:7b:28:9a:67:43:df:03:d1:
96:d1:99:4d:e3:15:f1:4a:c4:8b:fc:55:a1:cf:b1:92:40:27:
e3:1e:b6:c2:51:ff:e8:28:06:09:af:50:0d:b1:bf:da:b1:fd:
6a:bf:b2:dd:69:38:64:5a:2f:b4:d2:f6:cf:c0:b1:ca:cd:9a:
17:8f:15:5c:5f:7b:69:04:45:20:7a:d6:74:30:59:81:42:7e:
e0:65:a6:3a:c2:a3:18:d4:e7:77:d8:eb:f0:13:e8:5e:34:fc:
65:4a:e4:d3:0a:53:dc:6e:6b:21:fa:2c:54:01:7e:80:89:88:
a2:cd:f1:53:ca:04:5f:42:eb:f3:88:e0:22:97:31:bf:d9:92:
68:20:58:8d:53:44:bd:f5:4a:3b:8e:28:dc:0e:d5:d0:95:7e:
50:6b:aa:76:8e:fa:81:b0:0f:78:e4:37:59:e3:d7:f4:53:06:
02:48:87:e1:b7:a3:b7:bd:25:af:a6:12:ee:7f:69:e3:8f:d5:
8e:63:a5:98:50:1a:b4:ab:ad:86:10:6b:15:6f:c6:ec:5a:3e:
71:84:fa:cb:ac:c0:51:ee:7d:ce:0d:96:c2:82:c3:fb:65:53:
54:4f:a0:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:52:54 2025 by rpki-client