Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/P6lAEu0aUFv0hSkKjaSQpq-D4OY.roa
File: P6lAEu0aUFv0hSkKjaSQpq-D4OY.roa (raw, json)
Hash identifier: TeI63OClJFu6zUiWLV735VmhyDVRI/erzTaRgDzKaJA=
Subject key identifier: 3F:A9:40:12:ED:1A:50:5B:F4:85:29:0A:8D:A4:90:A6:AF:83:E0:E6
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0183FA33F7D0F0BC85E73174C2A8D192C4B9
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/P6lAEu0aUFv0hSkKjaSQpq-D4OY.roa
Signing time: Fri 21 Oct 2022 11:00:53 +0000
ROA not before: Fri 21 Oct 2022 11:00:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202518
IP address blocks: 2a06:a005:1504::/48 maxlen: 48
2a06:a005:d2f::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:fa:33:f7:d0:f0:bc:85:e7:31:74:c2:a8:d1:92:c4:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Oct 21 11:00:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3fa94012ed1a505bf485290a8da490a6af83e0e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fb:d5:98:4b:02:18:48:9e:38:c0:be:ff:f7:
4f:cd:e7:12:e1:c3:b7:bd:4d:bd:e7:31:40:dd:f8:
88:3a:0a:fc:95:75:0b:7c:1a:db:ca:f0:b1:fd:c4:
6c:1f:1f:1c:da:bc:97:66:54:14:59:78:af:ff:70:
fa:2c:79:a8:71:22:28:1c:32:18:51:5c:51:48:c2:
7b:5b:2a:98:eb:43:c6:04:6f:1b:e8:44:2e:de:80:
60:74:eb:9e:e6:6d:e2:52:a2:2d:77:61:3a:42:69:
80:82:58:3e:92:1a:5f:69:5e:bf:09:71:2a:b5:ac:
e9:96:55:c9:c3:b6:2c:fd:c1:5d:f6:1d:12:d4:83:
37:3c:a8:80:7a:2d:bd:dd:b7:24:f9:74:d5:17:ec:
6b:64:fb:63:1e:7d:15:a2:db:5f:4c:f0:43:72:4a:
1d:eb:09:31:f3:cf:48:b3:62:6c:a7:ef:58:b9:b6:
6e:f8:c8:6c:fb:71:9f:f4:ca:a6:ef:25:af:00:18:
48:16:bc:e7:ab:50:e0:ac:21:0a:d1:8b:41:08:b5:
c1:8b:db:83:65:f0:b0:5d:a7:05:c0:ca:f8:09:aa:
9f:4a:bb:00:0f:6d:e6:6e:c9:7d:00:68:f6:c5:82:
24:1f:7b:90:ce:52:9f:57:39:d7:b6:58:9a:68:70:
47:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A9:40:12:ED:1A:50:5B:F4:85:29:0A:8D:A4:90:A6:AF:83:E0:E6
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/P6lAEu0aUFv0hSkKjaSQpq-D4OY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:d2f::/48
2a06:a005:1504::/48
Signature Algorithm: sha256WithRSAEncryption
1b:92:32:41:e1:07:ba:f3:d2:4d:69:a0:f2:ec:fc:2e:36:89:
81:35:b0:62:93:73:ed:c2:ef:2a:51:ea:4b:79:0e:8b:3e:66:
ff:0b:80:17:14:06:a5:dd:e8:59:f3:96:0a:d2:a3:62:10:95:
01:a2:62:80:96:e6:0d:c4:6a:7c:7b:b2:66:fc:a5:7b:09:0f:
66:0e:62:9d:5b:ce:e8:03:e7:70:4b:70:84:0d:69:af:c7:d8:
22:d9:33:6f:66:79:a5:1a:95:6b:e7:ba:97:8a:a8:10:21:ce:
ca:56:b5:df:4f:d1:87:5c:88:ec:35:db:1c:82:b8:ad:de:fe:
8a:60:c2:00:a6:58:08:14:0c:a4:ab:68:ce:cc:14:d0:39:5b:
4f:0e:62:3d:b9:1c:ae:92:ea:c4:c9:c0:3b:8e:4e:1e:0d:4c:
ef:41:14:93:00:a5:9f:46:74:76:b1:36:67:71:8f:bd:45:15:
5d:45:f2:ba:41:94:a3:e9:9f:84:92:1d:79:f8:aa:55:13:4c:
6b:6e:3e:b1:82:72:b2:4d:c8:8c:94:f3:80:04:95:0c:70:46:
b2:a9:56:19:19:21:bd:eb:34:e8:a9:69:d2:d7:a3:d8:f3:f1:
e3:bc:61:ff:8d:87:fa:ed:94:7f:08:1f:65:86:fd:a9:c7:22:
89:9d:12:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:16:03 2025 by rpki-client