Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/PEayhjB-NLwcGhs5xT5L_sPOV0o.roa
File: PEayhjB-NLwcGhs5xT5L_sPOV0o.roa (raw, json)
Hash identifier: dI/z5C5sMgJabR1MKyWOuC001otNhzxbiFB5yeKBY6I=
Subject key identifier: 3C:46:B2:86:30:7E:34:BC:1C:1A:1B:39:C5:3E:4B:FE:C3:CE:57:4A
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 191F7415
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/PEayhjB-NLwcGhs5xT5L_sPOV0o.roa
Signing time: Tue 03 May 2022 19:19:59 +0000
ROA not before: Tue 03 May 2022 19:19:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44406
IP address blocks: 2a06:a005:740::/44 maxlen: 48
2a06:a005:4e0::/44 maxlen: 48
2a06:a005:780::/44 maxlen: 48
2a06:a005:670::/44 maxlen: 48
2a06:a005:760::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 421491733 (0x191f7415)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: May 3 19:19:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3c46b286307e34bc1c1a1b39c53e4bfec3ce574a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8f:fc:61:99:35:df:7f:a5:71:c3:c7:40:21:
d0:df:f1:5f:ce:db:d9:aa:b7:ed:43:96:f6:73:2c:
d2:07:9a:4f:f4:7e:0a:7f:28:ef:a7:d7:2e:81:ef:
04:5c:af:9b:a9:11:00:49:a1:47:15:e5:ec:f2:3b:
c7:87:b2:fb:0c:6a:1b:57:bd:5f:0f:8c:67:42:48:
43:54:6b:81:ef:73:0d:ef:db:fa:cd:a3:3f:0e:cb:
26:75:83:78:bf:c8:e6:f6:55:5d:83:7f:60:9d:37:
da:17:f5:10:6b:88:eb:97:6e:8a:56:36:f5:1f:f1:
b7:83:d0:67:a5:5e:99:6a:2f:2d:ef:b8:2a:19:95:
ba:74:27:89:15:eb:49:05:cd:ab:dd:36:fb:5d:5c:
8d:41:b4:a9:ee:05:fa:cd:3b:e9:4b:c6:5a:e7:08:
01:cf:ac:de:84:9b:b4:3e:89:06:21:26:2d:ad:60:
1b:c4:4c:ed:bd:e8:af:8f:79:28:45:8f:0a:9a:15:
4e:31:2d:d2:6e:be:54:a4:0e:8f:eb:7e:d4:16:f9:
ad:24:cd:99:71:d1:fd:7d:3b:3e:fe:1d:17:6f:aa:
e5:b7:d5:ef:57:a8:9c:28:a5:0a:c9:91:24:4c:2a:
ad:1c:f0:50:3b:4e:9c:8b:9e:83:ce:cf:a0:c6:92:
5b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:46:B2:86:30:7E:34:BC:1C:1A:1B:39:C5:3E:4B:FE:C3:CE:57:4A
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/PEayhjB-NLwcGhs5xT5L_sPOV0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:4e0::/44
2a06:a005:670::/44
2a06:a005:740::/44
2a06:a005:760::/44
2a06:a005:780::/44
Signature Algorithm: sha256WithRSAEncryption
0e:07:ce:ec:96:f0:e5:8c:2b:9e:d9:6f:c6:2c:56:c6:e5:5f:
48:b9:18:6e:a3:32:b9:8c:53:65:d0:ea:d5:f4:37:4a:93:b4:
0b:7c:9c:22:a8:e7:b9:d4:f4:7e:65:15:8c:15:ea:b1:8b:21:
2e:78:a0:b0:60:d0:3a:da:ca:e0:21:ba:e0:57:05:88:8c:05:
64:3d:b8:7f:3b:01:ff:f8:f2:9a:6c:44:7d:21:72:ba:81:5d:
8e:34:08:dd:e6:0a:25:5c:5b:48:80:96:23:41:6f:12:f1:5e:
c5:4d:6c:47:fe:45:b1:21:bc:3b:ff:55:f0:6c:b7:ba:25:a0:
4b:51:94:5c:db:cd:b2:4e:6b:1f:df:be:86:b1:f1:61:b0:de:
ef:6d:45:ba:b8:7e:08:63:e6:bc:da:08:96:e2:4a:cb:9b:84:
00:4b:3c:96:eb:83:ff:29:bd:79:e5:46:2f:7f:8a:06:24:e2:
d6:a5:a0:f0:cb:85:00:1d:89:83:0f:00:b0:07:99:9d:bc:62:
fe:87:38:77:b2:31:66:df:8d:34:4e:52:5f:1e:bb:50:f4:26:
d5:6e:2c:53:ac:f1:10:a0:c4:b1:95:52:ad:57:15:3f:14:4f:
cf:be:c8:38:ea:0e:f5:8d:42:3a:96:6c:bc:ed:49:60:69:2c:
6b:42:94:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 09:58:11 2025 by rpki-client