Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/JZPGocQDl8tnE_GhTgepy8jVuPg.roa
File: JZPGocQDl8tnE_GhTgepy8jVuPg.roa (raw, json)
Hash identifier: vifgGhSN//VLhsOLh1RYq7aUaPwLgnZdEOqbRbIlphI=
Subject key identifier: 25:93:C6:A1:C4:03:97:CB:67:13:F1:A1:4E:07:A9:CB:C8:D5:B8:F8
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0182BE0FB4E7A288E8430FF94E68EA955C09
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/JZPGocQDl8tnE_GhTgepy8jVuPg.roa
Signing time: Sun 21 Aug 2022 01:41:16 +0000
ROA not before: Sun 21 Aug 2022 01:41:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203333
IP address blocks: 2a06:a005:18d0::/44 maxlen: 48
2a06:a005:1860::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:be:0f:b4:e7:a2:88:e8:43:0f:f9:4e:68:ea:95:5c:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Aug 21 01:41:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2593c6a1c40397cb6713f1a14e07a9cbc8d5b8f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:42:b9:0d:cb:d6:a1:58:e6:fc:bb:fb:f3:78:
00:f2:d4:a6:ff:ea:71:04:e5:e9:e2:3c:b4:dc:cf:
ad:94:7b:5e:a5:ff:92:a0:eb:d7:8c:2e:2e:06:5d:
6f:04:f5:ff:d7:72:43:02:cc:d4:8e:9a:30:52:3a:
27:e9:b2:18:cf:7b:83:4d:fb:87:31:ee:ac:28:ee:
17:91:e4:92:a7:11:ff:20:92:c6:36:e2:69:4b:1c:
5a:c0:b4:74:93:3e:04:f5:3d:e7:9d:88:33:69:d1:
92:13:39:8a:be:d2:db:b5:70:7d:e0:ac:9b:d9:eb:
12:0f:71:11:aa:48:3a:04:39:7a:5f:72:b0:f4:19:
df:ec:a5:76:14:56:ec:89:f3:9d:89:4f:48:85:18:
7d:65:29:4d:14:d1:fb:6e:08:56:b3:64:b6:68:0a:
f1:17:59:f1:5e:1f:69:ad:67:a6:1d:64:c6:76:ce:
88:06:be:d6:bd:4f:fc:4f:af:d4:f4:6a:42:01:c2:
93:12:d6:f2:97:af:80:30:07:98:cb:67:ea:cc:20:
9a:bb:2e:93:4b:d6:28:5d:cd:de:74:e8:4a:08:b3:
88:fb:25:f4:8f:a0:f3:f1:a0:01:79:e3:0a:be:6d:
60:65:c6:be:b7:48:e5:89:51:63:66:0e:82:dd:19:
bd:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:93:C6:A1:C4:03:97:CB:67:13:F1:A1:4E:07:A9:CB:C8:D5:B8:F8
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/JZPGocQDl8tnE_GhTgepy8jVuPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1860::/44
2a06:a005:18d0::/44
Signature Algorithm: sha256WithRSAEncryption
0d:c1:02:50:77:9f:f6:55:c2:99:9c:3a:cc:e8:a6:a3:8d:c4:
c3:21:89:39:d8:4e:7a:cb:49:55:d5:15:28:c3:bc:d5:d0:41:
b0:b8:5a:8c:06:11:ba:e6:83:37:a9:6b:7d:57:14:e5:43:60:
47:c1:e8:9b:ff:c8:d0:be:51:99:3e:bc:ed:73:38:c3:b6:8e:
75:49:ac:9e:23:ca:75:1b:d8:22:6b:f8:dd:db:7b:a8:45:06:
bc:aa:d1:d7:93:ef:1f:88:9d:80:da:e2:0d:2f:90:ee:b2:60:
0f:3d:e1:76:d5:f9:43:1f:ec:a8:fe:4f:5b:2b:b1:58:05:cf:
66:84:c0:72:3f:47:b1:3c:8d:9f:94:8f:9f:66:cb:57:78:27:
31:b1:62:a6:f6:94:0e:f0:86:ce:ab:7a:4b:f2:59:20:5f:d4:
58:96:11:d9:49:0c:74:a4:e6:23:da:36:56:7a:04:e9:b9:ea:
aa:b5:25:0f:cf:e8:b0:7c:5a:39:1f:17:c0:9f:46:2f:78:aa:
76:77:52:49:b7:ee:0e:8b:dd:51:45:51:3f:d3:41:8d:9d:4f:
0a:17:45:bf:73:45:69:b6:d4:15:a7:93:f1:4c:d2:bc:d8:31:
f3:1d:c0:39:fd:ff:d3:9b:7d:e1:d5:24:9c:5c:55:71:d0:72:
10:8c:28:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:10:51 2025 by rpki-client