Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Ri4QXNtZn6cShlRMPg8A6AVtVcg.roa
File: Ri4QXNtZn6cShlRMPg8A6AVtVcg.roa (raw, json)
Hash identifier: z16qTSUmxXJVDQ+SDSrCfuPHqnxZu8MOcaWNqtcdJUg=
Subject key identifier: 46:2E:10:5C:DB:59:9F:A7:12:86:54:4C:3E:0F:00:E8:05:6D:55:C8
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 018243B222499D1E01381E97C41513391402
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Ri4QXNtZn6cShlRMPg8A6AVtVcg.roa
Signing time: Thu 28 Jul 2022 07:25:23 +0000
ROA not before: Thu 28 Jul 2022 07:25:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203804
IP address blocks: 2a06:a005:13b0::/44 maxlen: 48
2a06:a005:1340::/44 maxlen: 48
2a06:a005:13d0::/44 maxlen: 48
2a06:a005:1350::/44 maxlen: 48
2a06:a005:13c0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:43:b2:22:49:9d:1e:01:38:1e:97:c4:15:13:39:14:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jul 28 07:25:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=462e105cdb599fa71286544c3e0f00e8056d55c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:58:2a:c3:d2:b0:36:c4:17:54:e2:b9:1d:e9:
86:63:94:46:9b:17:49:12:53:75:d2:ca:4c:9f:12:
b3:33:f8:72:b1:10:59:14:1b:52:af:e0:be:c5:30:
85:87:ec:f2:49:9f:9b:79:c8:59:18:89:f3:78:16:
03:25:3f:b0:ca:b9:59:fd:ee:73:ff:ea:fe:0d:e5:
63:61:61:29:cb:a3:57:6b:d6:be:3c:ed:ea:b5:fe:
c6:97:48:10:0c:40:b7:a4:c4:e2:3f:95:8e:1e:2d:
1a:a2:a0:12:86:84:9c:59:dd:ca:52:80:e6:ea:47:
a5:ec:3c:94:cb:e4:c6:4b:44:d3:38:18:7d:70:83:
7c:e2:b3:cb:5f:9a:9a:a9:30:b2:0c:1d:b6:f9:8e:
0d:3d:bb:90:a4:79:ef:28:57:05:cb:b3:b6:cf:0e:
dd:e8:7e:ec:d6:c2:28:0b:30:ed:a5:55:05:d1:27:
ba:e4:30:1a:f7:36:c5:d5:9e:e0:73:40:68:65:81:
cd:fd:dc:0c:93:63:1c:ae:7b:8f:08:58:1b:f4:13:
b6:1b:b0:da:92:1a:f0:c0:75:e8:44:35:07:2e:5a:
b7:71:17:b5:1a:c4:e5:35:14:cf:bf:ec:58:41:d7:
23:86:2b:a5:71:3d:f2:d8:92:44:db:ca:35:db:13:
a4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:2E:10:5C:DB:59:9F:A7:12:86:54:4C:3E:0F:00:E8:05:6D:55:C8
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Ri4QXNtZn6cShlRMPg8A6AVtVcg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1340::/43
2a06:a005:13b0::-2a06:a005:13df:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
6f:2d:d1:01:40:c0:e9:e4:a9:81:f0:89:9d:7b:8e:1e:ed:d9:
6f:2a:a5:a4:fb:10:bf:2b:df:6a:26:fd:2d:2e:d4:c9:f2:99:
cb:ae:ab:aa:74:80:80:85:54:9a:8b:5d:10:47:53:29:c6:54:
b8:b5:2b:24:4a:9d:3f:76:9b:88:94:8a:be:88:0c:7f:ec:c5:
62:d6:0d:b8:b6:f5:ee:d1:34:22:6d:b1:20:e5:c0:79:16:ff:
e7:c6:b5:d0:88:bd:44:8b:8c:39:5f:39:ab:56:2f:e0:6f:01:
22:33:bb:e4:43:58:30:72:82:2c:75:c1:e7:d4:17:b2:83:59:
85:08:f3:a6:55:c0:d5:ab:72:4d:60:59:67:71:16:67:de:7e:
81:1a:a9:3c:0a:a6:9d:47:80:9b:42:3c:a8:64:74:17:43:2f:
92:55:19:59:a0:f4:ef:1c:95:c4:2a:e0:84:f7:93:51:2e:42:
19:ad:99:56:bc:22:22:2a:93:3e:36:87:a2:b9:0f:50:44:b9:
25:0b:2b:8d:0b:4a:49:06:54:af:fd:93:0a:f9:f6:98:ea:21:
0d:c8:85:57:0e:26:ff:a8:80:9b:63:a7:3b:83:aa:e4:85:4b:
ab:2d:de:8e:62:7f:16:51:0d:c1:51:58:7d:d4:6c:ed:56:8b:
51:f3:89:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:20:06 2025 by rpki-client