Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/SHdzojbeOJ6Ur66Q3NeRx0Dkcmw.roa
File: SHdzojbeOJ6Ur66Q3NeRx0Dkcmw.roa (raw, json)
Hash identifier: ZQmUB89GVFdv7s6Bzt6nDI+NfAo2iqSqXTaToDi/8Hw=
Subject key identifier: 48:77:73:A2:36:DE:38:9E:94:AF:AE:90:DC:D7:91:C7:40:E4:72:6C
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 15C3879E
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/SHdzojbeOJ6Ur66Q3NeRx0Dkcmw.roa
Signing time: Sat 01 Jan 2022 05:59:11 +0000
ROA not before: Sat 01 Jan 2022 05:59:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211066
IP address blocks: 2a06:a001:a000::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 365135774 (0x15c3879e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jan 1 05:59:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=487773a236de389e94afae90dcd791c740e4726c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:56:46:bb:38:4f:45:5f:0f:31:ff:49:af:2c:
da:b8:e6:d1:23:0a:ec:a9:2c:f9:f0:96:1b:4e:44:
e2:ce:7f:73:b8:19:ab:a4:df:89:39:d2:86:fb:ba:
78:1e:d6:6c:b9:91:4d:65:32:e0:d2:3f:a7:95:29:
cd:c1:d3:65:81:86:38:33:7a:1d:52:fa:7b:df:74:
86:a8:52:e4:17:98:33:6e:5c:42:b7:39:f8:0c:60:
67:03:61:51:18:31:6a:a6:bd:c6:ab:d4:d7:26:ad:
b6:ba:68:50:c4:c0:ed:55:6b:14:ac:42:1d:96:41:
fd:14:02:7d:53:04:1b:1a:bf:0e:bc:4e:2c:8a:65:
10:9e:16:db:9d:6c:c5:ad:54:c0:e0:e8:70:fa:19:
0f:61:3b:d7:18:d6:71:ab:77:2a:df:8b:ec:1c:a0:
bc:44:4b:bb:56:b2:34:f4:9c:a1:c6:57:e3:e4:c7:
ad:39:37:e4:a9:7a:27:d6:f8:77:f0:30:ff:73:2b:
8a:72:66:07:0f:da:e3:a4:91:5b:e6:23:26:ed:fb:
b0:8a:c5:73:e6:6b:3a:f7:7c:4e:49:a1:6a:29:24:
8e:a2:db:f5:b0:9d:94:a4:d8:29:3b:96:a2:36:57:
63:b8:50:14:8b:78:11:7d:d8:50:cf:68:0e:6b:4a:
6f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:77:73:A2:36:DE:38:9E:94:AF:AE:90:DC:D7:91:C7:40:E4:72:6C
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/SHdzojbeOJ6Ur66Q3NeRx0Dkcmw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a001:a000::/44
Signature Algorithm: sha256WithRSAEncryption
7b:2e:2b:4a:1e:f6:c8:21:bb:f3:2c:fe:64:cf:5c:3d:6c:ac:
71:f2:23:b1:53:6e:9c:f1:b1:c6:ae:94:07:0c:d2:b4:7c:fb:
f8:2c:60:23:16:9e:ba:1a:2b:c5:16:26:dd:18:d0:09:07:73:
a9:25:e8:f2:ab:0d:89:5f:b7:e4:04:b1:8d:12:41:d3:35:15:
1f:a3:f7:85:ed:95:93:83:bc:e7:90:b0:70:1b:d2:30:c6:4d:
dc:81:16:5f:bf:c8:c4:13:3c:09:68:06:b2:27:e5:25:d9:7b:
28:68:2a:15:c9:7e:28:de:55:3d:88:38:10:31:f6:0a:41:f2:
9c:a0:6d:71:2b:91:75:d4:85:e2:65:4a:52:fe:38:7c:58:7d:
b9:fa:2e:5e:21:73:5e:f5:61:bd:26:24:8a:70:73:ae:5d:9c:
fd:4e:03:56:94:4b:17:f1:cc:37:29:ee:44:ac:07:89:40:2c:
da:79:4e:41:21:d3:aa:e1:5a:9b:7a:ae:8d:84:f4:23:3e:d4:
cc:0d:67:b7:06:ac:04:6c:f0:93:5b:54:7c:6f:e9:b5:bd:1d:
b9:3b:d3:ac:c1:6d:6d:0c:84:2b:3c:f6:c7:20:43:19:b7:f2:
8d:81:a8:06:e7:12:93:5a:b8:13:9c:42:cf:58:91:e6:b0:d8:
ab:18:59:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 09:58:18 2025 by rpki-client