Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/PRk1WRnF8Mxgg5mXIZm507IeYlk.roa
File: PRk1WRnF8Mxgg5mXIZm507IeYlk.roa (raw, json)
Hash identifier: j3Bmp+T4NsvFQFOPnYCfFRY3CfK0jSYd/89FB0pLaNY=
Subject key identifier: 3D:19:35:59:19:C5:F0:CC:60:83:99:97:21:99:B9:D3:B2:1E:62:59
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0182F46DA8B8FF8632A85FED220CAADEBC67
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/PRk1WRnF8Mxgg5mXIZm507IeYlk.roa
Signing time: Wed 31 Aug 2022 15:03:23 +0000
ROA not before: Wed 31 Aug 2022 15:03:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206271
IP address blocks: 2a06:a005:437::/48 maxlen: 48
2a06:a005:1920::/44 maxlen: 48
2a06:a005:a15::/48 maxlen: 48
2a07:54c2:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f4:6d:a8:b8:ff:86:32:a8:5f:ed:22:0c:aa:de:bc:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Aug 31 15:03:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3d19355919c5f0cc608399972199b9d3b21e6259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:61:62:13:81:33:6a:56:81:c8:1b:68:2b:e1:
51:c0:cb:ae:79:69:e7:33:f2:c3:b4:ed:7b:4c:13:
79:05:70:be:51:ca:79:80:72:ca:df:6e:0b:70:99:
be:ce:cb:68:53:aa:de:b5:e6:05:af:39:00:b8:df:
34:17:7b:f2:ea:53:9d:9d:c3:27:5a:4f:59:45:a2:
89:ef:da:60:27:2e:39:dc:7e:29:f0:3f:a6:de:86:
c1:53:cd:6f:e8:02:56:26:5a:ff:5b:34:5e:c5:da:
75:21:a9:e9:18:46:3b:4b:9d:4c:41:fc:87:09:6a:
e4:35:ea:ad:63:c2:0a:f5:7f:3b:f9:6e:64:43:0b:
aa:22:6d:2b:2d:0f:9e:6d:f3:b5:31:ce:17:da:a5:
42:e1:a5:a1:94:7f:0d:20:62:e8:3f:05:5e:65:78:
c0:ac:e1:58:2d:ef:b2:98:42:7c:58:4a:35:9c:38:
bd:20:c1:17:9f:3b:24:3b:4d:dc:f3:c8:02:d7:25:
65:ce:0e:2e:f4:3a:9b:23:38:5f:e5:b2:5a:07:b9:
fc:4d:85:79:17:32:12:e1:4f:b0:96:dd:5b:25:b7:
5d:41:71:3c:80:d4:2b:5d:e2:42:e8:3d:4d:3d:b8:
c7:db:7e:09:ad:df:ae:a7:33:8c:b3:a7:7e:d2:9c:
67:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:19:35:59:19:C5:F0:CC:60:83:99:97:21:99:B9:D3:B2:1E:62:59
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/PRk1WRnF8Mxgg5mXIZm507IeYlk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:437::/48
2a06:a005:a15::/48
2a06:a005:1920::/44
2a07:54c2:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
81:70:fe:66:c0:b4:ee:c1:d3:50:14:9d:a3:01:03:e2:67:d2:
95:27:34:8b:b8:8d:9d:a7:43:a3:bf:84:03:02:fc:b3:e3:34:
7d:16:6a:93:95:aa:36:e9:52:0b:9d:53:61:8e:87:b4:70:cc:
33:42:7e:17:21:2f:0b:d0:97:5b:08:25:55:1d:25:9d:15:99:
58:08:11:48:50:80:a3:5e:e1:bd:38:fc:86:0d:b8:84:21:10:
06:2c:fd:0c:08:58:50:60:da:c7:2a:de:7d:fd:49:bc:08:20:
93:68:21:bf:ba:5c:c7:16:2d:f5:04:4a:22:30:22:39:5f:f8:
68:ce:51:2f:63:73:6d:bb:f3:f6:8b:92:cd:7d:7e:f9:ac:9f:
d6:c4:ad:3b:a7:08:15:c8:d8:fc:d1:97:72:c4:ed:de:da:de:
03:60:de:7d:86:a7:17:d1:c1:92:8e:37:10:74:d9:d5:e6:dd:
d4:cc:e1:e7:af:e6:10:29:12:05:0d:5e:9e:e9:8e:f9:68:5e:
9b:37:e9:68:e6:a6:98:1f:26:1a:2e:f1:3d:20:68:ed:42:fb:
06:03:99:ee:b8:77:3c:0a:86:7c:02:3d:22:aa:b0:57:83:0e:
d5:f9:8d:2c:a9:0a:fd:8d:02:95:ff:f4:87:ba:6e:ab:3c:ce:
86:30:da:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 05:54:43 2025 by rpki-client