Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/RRSYAGl0Z4WVSDUG219XWbMGyho.roa
File: RRSYAGl0Z4WVSDUG219XWbMGyho.roa (raw, json)
Hash identifier: gcdjdHIZgCHr0ryVT7IuMTOq7fGAggficHX2CtHVd1A=
Subject key identifier: 45:14:98:00:69:74:67:85:95:48:35:06:DB:5F:57:59:B3:06:CA:1A
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 17BB58B6
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/RRSYAGl0Z4WVSDUG219XWbMGyho.roa
Signing time: Tue 05 Apr 2022 10:32:44 +0000
ROA not before: Tue 05 Apr 2022 10:32:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 149296
IP address blocks: 2a06:a005:3f0::/44 maxlen: 48
2a06:a005:3d0::/44 maxlen: 48
2a06:a005:3e0::/44 maxlen: 48
2a06:a005:3c0::/44 maxlen: 48
2a06:a001:a110::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 398153910 (0x17bb58b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Apr 5 10:32:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=451498006974678595483506db5f5759b306ca1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:82:86:ce:ef:40:5e:1e:7d:12:31:ec:14:f9:
97:ee:ae:eb:a7:f3:fb:a6:aa:9a:83:ac:54:7b:b3:
4a:4e:77:d0:18:c4:cb:bf:2d:a7:25:05:51:c5:a7:
1c:15:9d:cb:55:b2:b3:8f:59:4c:02:f4:88:46:7b:
19:ef:3a:d3:66:8a:66:1e:5d:da:b7:2e:2a:52:f1:
fa:45:56:7c:8b:49:e4:1e:13:1e:a9:29:bd:b4:09:
b5:80:c1:b9:6c:91:c4:57:e0:53:d6:06:01:cd:5e:
7f:1c:2c:c2:fd:9e:ee:b1:f5:6f:e1:26:1e:1a:b2:
fc:b4:c3:e6:af:6c:72:1a:fa:28:81:53:69:c3:e3:
d5:23:14:d7:21:65:41:ac:0f:b0:d3:23:8c:f6:cb:
8d:e4:f8:7c:78:dc:d1:ca:e0:5d:2d:a0:3a:d4:a0:
ec:57:0f:cc:38:9f:c6:65:f1:c2:4a:38:d4:9e:c0:
41:17:a6:ae:b4:6b:20:97:dc:f6:00:e6:6b:82:c8:
10:dc:bf:e0:7a:49:96:ee:ee:75:22:00:6a:bd:f6:
95:8d:cf:a9:f8:8d:4d:82:89:87:59:66:2b:75:92:
66:0c:4f:9d:84:d9:94:35:6d:be:69:9f:e6:c1:86:
ff:43:17:03:c2:6c:00:76:eb:68:54:92:cb:ab:6a:
3e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:14:98:00:69:74:67:85:95:48:35:06:DB:5F:57:59:B3:06:CA:1A
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/RRSYAGl0Z4WVSDUG219XWbMGyho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a001:a110::/44
2a06:a005:3c0::/42
Signature Algorithm: sha256WithRSAEncryption
7d:13:40:c8:e9:41:ac:51:b9:eb:a0:b6:d0:86:f7:f0:25:62:
89:bc:46:34:b0:60:1a:aa:70:9c:23:eb:ae:f0:a7:76:fb:08:
f1:ee:20:75:6c:78:89:ae:b4:42:e6:15:6b:1b:b7:7d:8e:0b:
58:7e:c4:c9:ec:dc:29:1a:70:fc:e4:67:fe:7f:56:bf:dc:0c:
5f:6c:19:0d:a5:67:8d:c9:42:ab:4f:62:34:d4:c8:54:17:dd:
2c:72:37:5a:4b:a3:5f:82:0b:52:60:d1:c5:49:7e:c0:77:48:
bb:93:53:cb:03:03:c6:2c:98:5f:1a:b7:60:1a:a2:38:7e:fe:
84:57:84:a4:7a:88:54:a2:60:23:bf:42:87:19:6c:1b:c2:3d:
aa:97:2e:47:72:d4:3c:42:f6:76:10:79:b1:20:bf:9f:08:46:
c7:13:fd:3c:77:60:09:0f:aa:46:ac:4d:5e:2c:30:5d:d9:86:
f7:25:e4:eb:b9:f1:5e:27:4c:29:2d:0f:26:b6:2d:db:8b:1a:
92:f4:e4:a3:6a:0b:ba:0a:69:d9:65:ad:5d:ee:8b:4a:bc:b4:
ed:d9:6f:63:e2:77:59:ba:33:41:82:c6:a6:37:0a:46:49:3e:
8d:fe:dd:51:77:9b:96:aa:49:a2:5f:48:07:b9:61:06:ae:51:
1c:ff:cd:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:06:57 2025 by rpki-client