Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/PXG1kRClfewaojWC-K2DAbQvnMA.roa
File: PXG1kRClfewaojWC-K2DAbQvnMA.roa (raw, json)
Hash identifier: jNlN4X2+5u4gEG5BKdjusWQVxaTykgHJoP3RIXk7HdI=
Subject key identifier: 3D:71:B5:91:10:A5:7D:EC:1A:A2:35:82:F8:AD:83:01:B4:2F:9C:C0
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01825AE095891D225A9163E469B32A23DA20
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/PXG1kRClfewaojWC-K2DAbQvnMA.roa
Signing time: Mon 01 Aug 2022 19:27:23 +0000
ROA not before: Mon 01 Aug 2022 19:27:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 924
IP address blocks: 2a06:a005:d30::/44 maxlen: 48
2a07:54c2:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:5a:e0:95:89:1d:22:5a:91:63:e4:69:b3:2a:23:da:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Aug 1 19:27:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3d71b59110a57dec1aa23582f8ad8301b42f9cc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0d:ba:9a:be:eb:51:92:a4:ad:fb:5a:6f:fa:
9b:1a:f5:ab:b4:dc:7f:46:ee:22:58:18:32:c1:6c:
5e:50:1d:68:b1:32:79:ab:4b:18:ac:bd:9d:02:3a:
53:01:45:4c:b5:14:36:53:61:b8:30:7a:75:fb:56:
23:16:bc:1f:15:bd:c9:a1:95:c2:fe:ca:9b:da:cb:
4b:d6:eb:59:e0:38:68:d8:77:31:27:0f:75:f1:d4:
07:c5:92:3c:3a:be:f1:aa:d0:be:1c:17:1b:f4:47:
79:d5:e6:cb:54:8a:09:82:e5:ba:fc:c6:17:71:3a:
e6:5e:52:3c:66:0c:41:26:a8:3f:8b:a5:4a:40:a6:
2a:43:20:b1:8f:5b:b3:43:62:28:87:d2:c3:e1:28:
ed:7a:71:6f:a6:02:9d:7c:fc:ca:3d:17:96:06:20:
bb:e5:79:8d:59:e4:e6:6d:08:f3:4b:4c:6b:b7:c6:
d4:d0:b9:b7:b4:0d:f6:f6:5f:38:a0:42:d5:75:71:
18:d9:8b:a2:0c:03:c7:54:3f:18:d2:36:66:10:95:
6e:10:0c:9d:ac:92:09:a2:9a:32:ca:0a:b1:0f:f0:
de:70:57:9f:4e:cf:0f:31:e0:fe:28:a4:0f:51:74:
40:5f:32:16:04:85:4e:44:5c:0c:91:f8:2d:5c:94:
5a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:71:B5:91:10:A5:7D:EC:1A:A2:35:82:F8:AD:83:01:B4:2F:9C:C0
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/PXG1kRClfewaojWC-K2DAbQvnMA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:d30::/44
2a07:54c2:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
04:44:39:7c:3e:4f:d9:32:72:37:53:c7:61:72:85:b2:91:8e:
05:67:c0:51:f1:d3:1c:ab:e4:30:ac:70:97:22:f7:b5:98:12:
a0:fe:a0:e0:3d:04:ba:1b:22:1d:ee:dc:60:dd:cb:5d:4e:6c:
9e:51:24:d7:48:6d:4a:23:8f:01:96:91:0c:25:69:e9:00:7a:
c1:ab:99:ef:6e:3b:e2:41:21:90:b7:e2:ca:77:90:a4:41:0d:
bd:dd:db:d7:2c:21:df:82:f4:93:f7:f8:70:e8:95:82:dd:f7:
89:50:15:0d:77:ed:5a:8b:ce:4f:18:21:ee:7b:93:4b:8c:3d:
71:e9:ea:76:06:c1:54:84:db:a4:b7:22:e6:cf:91:ed:f1:20:
8f:ec:ed:03:01:6c:c7:5f:62:cb:83:2b:b8:e8:18:a3:0e:1e:
44:3d:14:a9:e1:84:27:65:7d:58:2c:de:9f:31:d9:58:24:96:
14:e4:e9:4e:3f:bf:5d:42:fa:db:23:08:5b:3f:5b:0c:f5:4b:
c3:41:05:38:04:7c:cd:e4:31:6d:5c:67:a0:ee:8d:f3:7e:76:
f0:1f:aa:9f:16:4a:9e:3c:73:88:93:72:e4:01:03:53:63:c2:
07:85:7b:63:b2:dd:64:30:c6:db:f3:87:93:05:fd:e6:e3:62:
1f:0a:a1:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:09:29 2025 by rpki-client