Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/GryYYfBFeHHMtUBhxmNjj3WXR_s.roa
File: GryYYfBFeHHMtUBhxmNjj3WXR_s.roa (raw, json)
Hash identifier: WOqL7aL5WHu7QpppenNIwch7BU2oJdT1Rw0BC70YlIM=
Subject key identifier: 1A:BC:98:61:F0:45:78:71:CC:B5:40:61:C6:63:63:8F:75:97:47:FB
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0184C9AC471972E24D9AD25CF953986045E9
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/GryYYfBFeHHMtUBhxmNjj3WXR_s.roa
Signing time: Wed 30 Nov 2022 17:53:41 +0000
ROA not before: Wed 30 Nov 2022 17:53:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201242
IP address blocks: 2a06:a005:1084::/48 maxlen: 48
2a06:a005:855::/48 maxlen: 48
2a07:54c2:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c9:ac:47:19:72:e2:4d:9a:d2:5c:f9:53:98:60:45:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Nov 30 17:53:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1abc9861f0457871ccb54061c663638f759747fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e2:24:14:51:3e:4d:24:98:15:35:5c:7d:59:
02:1d:1e:b3:28:ba:a1:ff:1f:6b:c9:48:48:92:db:
33:66:47:1c:cf:08:88:f7:c1:80:ad:8b:b5:27:25:
85:fd:cc:72:c7:8d:3a:8b:d3:5c:b3:47:48:06:97:
da:46:61:4e:31:28:ab:ec:35:a3:ad:38:f2:a5:ce:
13:6e:07:79:7a:6e:85:73:83:84:b9:b9:95:5a:e5:
6e:6b:1f:77:10:1d:27:e5:70:f9:1f:eb:d7:6d:ed:
e7:b0:e0:89:e3:68:5a:2f:68:a1:0c:62:05:57:d7:
23:97:91:a6:1d:86:63:31:1e:81:0c:4c:10:c3:e2:
08:23:ac:de:32:fb:05:14:c3:e5:1f:9b:11:67:ef:
29:e9:1b:ee:08:69:d6:e7:70:c2:29:a6:85:1e:ae:
42:cd:0c:dc:d9:4f:53:bd:86:0b:45:4a:49:63:f5:
e8:23:9d:6c:ef:0b:66:5b:63:22:d5:c3:56:33:8d:
f8:27:a0:34:d3:1c:aa:c1:f8:1b:4b:65:fe:ac:86:
9f:9c:ec:3e:37:dd:22:fa:93:b6:2c:3d:95:f9:f5:
62:41:0d:01:84:cd:48:07:e9:15:a9:7f:65:ae:55:
3e:24:54:7c:c2:9f:bc:1c:1f:ce:ff:89:80:79:d2:
1b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:BC:98:61:F0:45:78:71:CC:B5:40:61:C6:63:63:8F:75:97:47:FB
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/GryYYfBFeHHMtUBhxmNjj3WXR_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:855::/48
2a06:a005:1084::/48
2a07:54c2:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
94:0b:a0:67:59:66:ac:99:d9:e0:36:5f:a5:f4:a9:77:6e:8a:
f4:9a:b0:86:d9:34:50:bf:d5:51:73:48:7e:fa:4d:34:0a:8f:
73:68:22:24:4a:a0:31:11:13:1f:10:40:f5:05:e0:b0:72:c8:
b0:09:6a:8a:45:8c:51:0d:36:4b:43:72:9c:eb:8c:16:39:52:
db:43:e0:8f:8f:80:6e:85:f5:ab:06:6b:f3:86:28:17:34:71:
a0:80:48:9c:11:c2:bb:f4:06:27:25:de:56:86:9c:70:c0:d3:
cd:fe:ac:56:b4:6f:d9:bf:38:ac:ae:e6:9d:2e:6d:f2:1f:d3:
ee:25:98:21:50:02:64:64:c9:0f:f8:cc:db:26:96:b3:d0:11:
51:5b:6b:4f:61:93:75:fd:5e:65:34:0b:bd:59:29:d6:1f:ea:
91:50:ce:ef:60:94:94:13:14:93:06:b1:fb:07:5c:d8:1f:c5:
67:b0:3f:23:78:c9:b9:60:da:13:d0:f3:57:b4:a6:28:34:af:
5c:a2:5a:bc:91:92:44:4e:c9:2b:e3:18:35:c3:8b:2d:8e:f0:
e8:59:07:14:9a:ea:fc:19:08:80:a8:36:cd:4b:8a:95:3d:08:
d9:d6:77:60:75:89:cb:b8:1e:bd:7c:ee:35:2d:0c:d0:e6:b3:
1d:e8:6b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:18:45 2025 by rpki-client