Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/IZ1ALQxjxoj8Ue35QiHMP2IFVC0.roa
File: IZ1ALQxjxoj8Ue35QiHMP2IFVC0.roa (raw, json)
Hash identifier: ad6bYOgk7eY9WfMYT3CSY938orlazPJ9xbWmz3hAmy8=
Subject key identifier: 21:9D:40:2D:0C:63:C6:88:FC:51:ED:F9:42:21:CC:3F:62:05:54:2D
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01845B006B356070F272CA460FB54F9893BA
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/IZ1ALQxjxoj8Ue35QiHMP2IFVC0.roa
Signing time: Wed 09 Nov 2022 06:07:44 +0000
ROA not before: Wed 09 Nov 2022 06:07:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203857
IP address blocks: 2a06:a005:5ec::/48 maxlen: 48
2a06:a005:851::/48 maxlen: 48
2a06:a005:11::/48 maxlen: 48
2a06:a005:a02::/48 maxlen: 48
2a06:a005:4d6::/48 maxlen: 48
2a06:a005:456::/48 maxlen: 48
2a06:a005:856::/48 maxlen: 48
2a06:a005:5e4::/48 maxlen: 48
2a06:a005:5e9::/48 maxlen: 48
2a06:a005:2df::/48 maxlen: 48
2a06:a005:5ee::/48 maxlen: 48
2a06:a005:4d3::/48 maxlen: 48
2a06:a005:a01::/48 maxlen: 48
2a06:a005:481::/48 maxlen: 48
2a06:a005:4d2::/48 maxlen: 48
2a06:a005:432::/48 maxlen: 48
2a06:a005:12::/48 maxlen: 48
2a06:a005:4d7::/48 maxlen: 48
2a06:a005:10::/48 maxlen: 48
2a06:a005:1270::/48 maxlen: 48
2a06:a005:850::/48 maxlen: 48
2a06:a005:4d5::/48 maxlen: 48
2a06:a005:5eb::/48 maxlen: 48
2a06:a005:2d4::/48 maxlen: 48
2a06:a005:4d4::/48 maxlen: 48
2a06:a005:5ea::/48 maxlen: 48
2a06:a005:5ef::/48 maxlen: 48
2a06:a005:5e8::/48 maxlen: 48
2a06:a005:a08::/48 maxlen: 48
2a06:a005:5ed::/48 maxlen: 48
2a06:a005:5e3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:5b:00:6b:35:60:70:f2:72:ca:46:0f:b5:4f:98:93:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Nov 9 06:07:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=219d402d0c63c688fc51edf94221cc3f6205542d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:6c:de:de:88:13:1b:70:0f:a4:af:17:b3:c2:
35:2d:66:f9:75:ba:5a:af:e6:25:29:10:b2:bb:72:
9a:86:d5:f6:79:36:da:64:02:e5:4e:5f:e5:83:67:
92:fd:99:8c:63:82:26:b4:d4:ee:2b:c2:ed:8d:31:
18:36:d8:75:5d:3e:bd:5c:28:65:bf:55:58:43:40:
8d:ba:e0:fb:2f:2b:52:5d:ce:70:26:c9:7d:40:b7:
b7:f8:76:be:51:fc:5f:c0:3b:d6:16:e6:fc:28:2f:
7c:8c:47:2d:da:d3:f4:2b:d3:4f:68:f3:20:74:1d:
06:7e:2e:f8:85:b6:f7:28:c0:6e:42:01:a7:d3:c5:
80:c0:5b:f2:ed:bd:36:2c:76:1e:df:24:78:ff:58:
81:8a:ff:1a:ff:bf:50:21:a3:7a:c0:32:aa:df:60:
7f:2b:e0:a4:6b:c8:8f:a0:4f:31:8f:08:33:cc:f3:
d1:be:93:45:e6:06:7d:5b:cd:b0:ed:22:a5:dd:e9:
43:2f:63:ed:21:72:68:04:b7:40:3e:2f:c7:bb:d9:
cd:c1:0c:6e:ac:6e:e2:45:9b:56:e1:dc:b3:ea:dc:
33:df:ab:4a:35:81:7e:13:9b:13:b1:1a:b1:eb:e0:
6a:d4:0b:87:b3:d2:f4:71:67:4d:f0:6c:92:87:6f:
13:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:9D:40:2D:0C:63:C6:88:FC:51:ED:F9:42:21:CC:3F:62:05:54:2D
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/IZ1ALQxjxoj8Ue35QiHMP2IFVC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:10::-2a06:a005:12:ffff:ffff:ffff:ffff:ffff
2a06:a005:2d4::/48
2a06:a005:2df::/48
2a06:a005:432::/48
2a06:a005:456::/48
2a06:a005:481::/48
2a06:a005:4d2::-2a06:a005:4d7:ffff:ffff:ffff:ffff:ffff
2a06:a005:5e3::-2a06:a005:5e4:ffff:ffff:ffff:ffff:ffff
2a06:a005:5e8::/45
2a06:a005:850::/47
2a06:a005:856::/48
2a06:a005:a01::-2a06:a005:a02:ffff:ffff:ffff:ffff:ffff
2a06:a005:a08::/48
2a06:a005:1270::/48
Signature Algorithm: sha256WithRSAEncryption
89:26:af:01:f0:b6:d4:f0:f8:56:0b:c2:be:0c:43:bd:44:e4:
05:9c:7d:40:fb:65:48:4a:78:2b:84:b9:14:cd:9b:2f:d5:31:
07:ae:7a:57:a7:57:66:40:57:81:c9:94:f2:2f:41:1f:b4:57:
f9:b6:77:5c:d6:5d:5e:53:87:32:f4:bf:20:b1:aa:b9:71:c5:
a6:ff:ee:a8:d7:d3:41:5f:9d:c2:58:1a:96:7b:4a:0d:1a:ac:
f5:a4:f9:be:1b:46:9a:9c:c0:d9:43:8c:c0:de:05:7c:10:c2:
97:dc:7c:00:58:5e:d8:5f:77:c1:7c:04:ef:f6:72:18:42:6c:
89:40:ee:09:9a:d0:c7:2a:f0:e2:2e:5a:ee:af:6d:74:63:d6:
80:dd:bd:24:e0:4c:16:03:a5:4a:7a:8a:dd:10:92:9f:94:86:
ae:a7:01:d8:1f:18:47:6c:99:00:22:a0:32:ff:f9:ed:9c:60:
05:1b:1d:1a:a4:46:c5:dc:f7:46:e3:5e:04:94:ef:61:7f:19:
e8:3f:6a:3b:6d:e7:d9:60:d2:9b:c8:58:d4:1c:89:79:a6:16:
43:b5:76:50:c7:02:e7:7f:5f:e5:7d:4f:f0:2b:9f:b8:e7:7b:
ce:09:7e:a0:af:df:48:5c:68:cd:0a:21:d6:43:ae:67:6f:d4:
b0:36:c1:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:09:37 2025 by rpki-client