Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/HCB49KLGeA3N1fHpogOm92dFV30.roa
File: HCB49KLGeA3N1fHpogOm92dFV30.roa (raw, json)
Hash identifier: BRQgO6QxL+X4TqbMo9IZWcRpVLe1lNpPRexVAE2i1oA=
Subject key identifier: 1C:20:78:F4:A2:C6:78:0D:CD:D5:F1:E9:A2:03:A6:F7:67:45:57:7D
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0183F6E9D37A1CEAAB6243D1BBA6955858AA
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/HCB49KLGeA3N1fHpogOm92dFV30.roa
Signing time: Thu 20 Oct 2022 19:41:02 +0000
ROA not before: Thu 20 Oct 2022 19:41:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 147016
IP address blocks: 2a06:a005:1502::/48 maxlen: 48
2a06:a005:baa::/48 maxlen: 48
2a06:a005:bab::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f6:e9:d3:7a:1c:ea:ab:62:43:d1:bb:a6:95:58:58:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Oct 20 19:41:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1c2078f4a2c6780dcdd5f1e9a203a6f76745577d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:bd:d1:94:e0:91:a6:d8:31:b2:ec:ea:b3:38:
38:83:a9:0b:9e:5b:f8:da:79:11:2d:ce:2f:99:da:
53:89:d6:96:0a:af:2a:73:9f:4b:09:39:55:24:e5:
74:5d:c9:24:1d:78:ef:8f:d8:c9:ee:1b:d2:e8:74:
e0:2b:38:9b:de:1b:8a:64:dd:0d:16:4d:5c:e8:28:
70:aa:b8:a4:6c:aa:59:81:c8:eb:45:02:27:91:8b:
fa:cb:10:27:c5:cb:52:1b:9c:03:1f:c0:20:95:2a:
b8:f7:3b:05:d4:5b:8d:c8:79:78:12:50:d5:64:85:
ed:a3:1e:3c:21:4d:4e:15:de:0e:1e:f9:2e:ef:06:
f6:2c:69:f6:f5:26:36:a4:a5:3f:23:05:e3:fc:57:
80:82:de:03:a0:a0:b8:0e:7d:88:f5:c3:47:b4:87:
a9:b8:39:4b:9e:fa:ac:50:fd:95:61:be:65:48:dc:
17:6e:72:38:8a:88:0e:84:76:4e:b4:84:be:51:24:
1c:da:3d:6e:07:f6:3a:0c:d4:85:60:9f:73:74:8e:
af:a7:a3:bf:10:02:23:81:5c:38:e3:51:12:80:bc:
1b:0e:71:a5:44:8d:7c:3e:42:85:6f:84:20:91:28:
f8:39:cd:a6:a1:a2:f8:43:eb:44:76:ce:de:77:89:
f2:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:20:78:F4:A2:C6:78:0D:CD:D5:F1:E9:A2:03:A6:F7:67:45:57:7D
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/HCB49KLGeA3N1fHpogOm92dFV30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:baa::/47
2a06:a005:1502::/48
Signature Algorithm: sha256WithRSAEncryption
09:65:63:1e:fb:4a:b5:a8:6f:74:d1:9f:90:2f:9b:91:ce:e7:
3b:6c:43:19:a3:7a:1f:5f:90:6d:5f:05:96:5b:1e:48:1e:8f:
69:a2:87:49:3b:b3:aa:20:75:d4:5c:e2:9e:79:48:64:73:e1:
25:21:21:c1:23:b7:0d:00:e8:05:b3:88:df:9e:cf:c1:96:7e:
21:06:20:39:01:18:4f:4f:4e:a1:75:88:1a:ac:3c:1b:db:bd:
89:f4:65:93:46:94:09:ae:4b:3b:48:4e:18:8d:9f:53:0c:56:
0e:dd:b8:f3:67:2c:6a:2e:d3:1d:11:7c:f7:34:ad:4a:3a:11:
af:12:24:4f:32:df:a9:2f:2b:c4:26:cc:5c:18:9b:e6:8a:59:
67:ea:b4:b5:83:61:ff:81:f4:38:2f:9e:10:97:a5:0e:3b:df:
8a:93:fb:9f:1e:ce:56:e6:8b:b1:c7:26:cd:50:19:8c:02:78:
d3:75:3b:a4:fa:76:0f:87:af:73:56:6e:70:cf:fc:d6:b3:5a:
c8:f3:d1:15:0b:70:45:2d:3e:31:52:54:2c:c9:5b:3a:50:75:
3c:15:aa:24:c2:36:9b:04:08:40:59:9f:02:7f:b1:a2:00:39:
4e:15:a2:b4:20:12:1b:5c:20:f6:a0:06:ca:94:e3:44:62:b7:
7e:dd:4d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:30:17 2025 by rpki-client