Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/RPhkVDaGnPypKGw5RxIiA5-nN0k.roa
File: RPhkVDaGnPypKGw5RxIiA5-nN0k.roa (raw, json)
Hash identifier: hZhCQ5KVUqnDu6stl6bddRwVvn++4vLez9TQHOKqkDs=
Subject key identifier: 44:F8:64:54:36:86:9C:FC:A9:28:6C:39:47:12:22:03:9F:A7:37:49
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 18439688
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/RPhkVDaGnPypKGw5RxIiA5-nN0k.roa
Signing time: Mon 18 Apr 2022 00:06:33 +0000
ROA not before: Mon 18 Apr 2022 00:06:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 131668
IP address blocks: 2a06:a005:500::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 407082632 (0x18439688)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Apr 18 00:06:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=44f8645436869cfca9286c39471222039fa73749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9a:8f:e3:7d:60:df:9b:cc:21:58:ab:cd:a2:
e0:42:36:77:e2:b6:dd:ba:6d:d1:92:48:ab:e8:9b:
14:38:54:97:60:4d:7d:f5:eb:ba:6b:05:80:0b:0b:
06:33:bc:4d:e8:48:ef:35:21:36:f6:d7:15:bf:ff:
cd:8d:0e:f8:7f:ad:e0:97:a6:54:ab:29:00:e5:19:
b8:0f:5b:e3:d1:be:88:c5:d4:4b:ab:32:bf:3d:70:
ba:84:05:2b:93:9e:1e:14:52:07:38:51:77:5d:4d:
b5:18:0f:5c:bb:23:2a:c5:9a:c7:a9:5b:ee:9d:22:
aa:a3:31:e5:9c:f0:ad:05:98:79:63:fb:58:6b:ea:
f9:cc:dc:7a:61:58:1c:7a:d0:1e:0e:16:f4:be:30:
0c:52:b4:7f:71:e7:64:72:d1:d5:a2:fb:fc:a4:f5:
97:e1:9b:aa:28:bb:55:c7:28:63:11:c2:c0:b8:e2:
a4:b7:d2:b5:44:b3:57:4f:0c:0b:bc:19:aa:bb:93:
3f:2c:0f:ad:48:2f:4d:d3:8a:3f:a7:96:f4:a3:1e:
d0:6f:9f:8c:da:fa:91:cf:e2:08:0b:3a:2e:23:1f:
f8:7b:bd:49:5b:9e:c7:3d:79:7b:bf:af:d1:43:d8:
1b:17:55:50:0a:87:44:1b:d2:00:bb:7a:c7:55:54:
f6:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:F8:64:54:36:86:9C:FC:A9:28:6C:39:47:12:22:03:9F:A7:37:49
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/RPhkVDaGnPypKGw5RxIiA5-nN0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:500::/44
Signature Algorithm: sha256WithRSAEncryption
9f:ee:c9:7c:9a:51:f0:c2:2c:bc:86:42:43:7e:50:e9:ec:81:
4d:d3:3a:c1:26:c6:11:bc:e7:96:6e:8d:23:0b:d9:0c:2a:6a:
4d:01:33:d8:85:83:6d:3e:69:09:2c:3f:3c:fa:e9:90:16:a0:
be:89:fd:34:cf:d2:ca:3c:c5:02:42:e5:da:0f:27:4e:45:e2:
9a:7b:20:d0:01:42:73:22:fa:5b:3b:a4:d2:b7:ee:36:4d:f8:
63:6e:fa:ea:1f:c1:f1:8e:5f:1c:56:ff:f0:ab:b8:22:59:fe:
55:f1:30:d0:d2:3d:72:07:d5:3f:d7:ab:a7:f4:73:c9:aa:9b:
f6:5a:08:73:6d:0a:f4:75:df:88:20:35:51:f3:67:8d:6c:14:
34:07:ca:6c:99:52:1b:6d:1d:39:35:5b:a2:6e:df:f0:2c:3a:
69:bf:02:b9:0f:3f:a0:fd:7e:42:e4:62:03:db:d0:15:0f:f7:
50:d6:6d:a4:12:fc:68:21:33:64:d2:80:45:38:fd:e0:ae:f0:
9c:02:58:b9:df:ee:59:4b:81:ed:13:3e:cb:6f:56:4f:e0:a5:
1b:e7:df:33:a9:95:cc:c8:0a:7b:ee:a3:af:1b:6d:0b:2d:1f:
f5:a8:5a:ff:a9:84:d1:e3:4d:6e:e9:59:64:1e:e9:a4:04:26:
84:53:af:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 01:56:41 2025 by rpki-client