Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Scq6GO0lkYc8XUtqN9oKMRi5Pwg.roa
File: Scq6GO0lkYc8XUtqN9oKMRi5Pwg.roa (raw, json)
Hash identifier: V/ZECX6GfBWOrNl/VvwIhdgUO3ZtLb/8ouYvdt7H2XQ=
Subject key identifier: 49:CA:BA:18:ED:25:91:87:3C:5D:4B:6A:37:DA:0A:31:18:B9:3F:08
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 1B34B680
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Scq6GO0lkYc8XUtqN9oKMRi5Pwg.roa
Signing time: Wed 22 Jun 2022 15:38:32 +0000
ROA not before: Wed 22 Jun 2022 15:38:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 142164
IP address blocks: 2a06:a005:e80::/44 maxlen: 48
2a06:a005:eb0::/44 maxlen: 48
2a06:a005:e90::/44 maxlen: 48
2a06:a005:ea0::/44 maxlen: 48
2a06:a005:ec0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 456439424 (0x1b34b680)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jun 22 15:38:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=49caba18ed2591873c5d4b6a37da0a3118b93f08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:30:a5:5d:32:66:4b:21:0e:55:c5:22:29:30:
f2:d2:66:9b:81:d1:a1:21:60:4b:85:23:ed:f1:6b:
58:74:c8:2a:78:c6:0a:08:42:80:65:4c:63:40:51:
ab:35:0b:44:52:ee:9b:33:a7:12:f9:a5:94:3f:b3:
e3:fa:05:6b:08:73:76:ac:e9:a1:91:d5:40:cc:ed:
5f:a3:54:49:01:b5:0c:bd:5a:4c:58:ee:4b:50:29:
30:ec:fa:f2:c4:64:f5:11:1a:f6:cf:a8:db:46:94:
f9:fb:ed:d8:e2:2f:5c:1f:ac:32:92:a3:bd:d9:7d:
e6:3e:08:ed:59:95:a0:5c:e8:05:11:04:96:3d:2c:
5c:e8:df:fa:c4:75:da:79:58:4d:8e:4d:e7:15:72:
e5:64:6f:64:07:5c:72:bc:2a:ef:ed:61:74:ad:53:
23:9e:61:3f:45:7a:b4:09:12:8c:f5:6b:e0:c4:62:
a8:77:46:a0:d5:73:26:be:3f:fa:b5:ee:c8:03:6c:
9a:e1:cf:10:fa:a5:b6:84:6a:a4:2b:63:91:c4:f4:
1a:94:85:34:2b:3b:2e:80:fe:99:05:3a:31:64:0a:
21:47:a6:88:96:87:51:dd:45:0c:91:3c:d0:be:96:
54:7b:1b:dd:0b:21:17:41:e6:93:5b:dc:93:42:e1:
44:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:CA:BA:18:ED:25:91:87:3C:5D:4B:6A:37:DA:0A:31:18:B9:3F:08
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Scq6GO0lkYc8XUtqN9oKMRi5Pwg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:e80::-2a06:a005:ecf:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
45:61:2f:62:8c:b7:5c:0f:f6:65:9f:a2:6c:a2:13:f7:76:79:
f2:2e:5b:64:a2:88:c1:02:cc:19:b7:14:c9:d7:15:8b:5e:bb:
32:85:73:bc:d5:00:8a:e8:60:22:c8:ce:48:84:00:da:84:72:
40:77:e0:93:92:70:02:48:5a:8a:9c:77:3e:30:d4:b2:be:31:
bc:96:6a:c8:45:e5:75:90:53:48:8e:ac:ec:19:27:9c:c4:b7:
2a:40:7e:4e:59:30:d6:fc:98:88:2d:17:1c:3f:ac:2d:52:b5:
cf:eb:0e:f4:2d:f7:19:fd:a6:c5:08:c3:e8:76:e2:01:55:41:
db:89:98:aa:67:66:94:dd:3e:2b:95:e3:e0:22:bc:d7:cb:0c:
3a:e0:8d:90:7b:8b:31:6e:25:52:f0:b1:d7:f8:92:36:1c:b6:
42:4e:59:43:58:a9:26:8d:28:d9:41:4d:8f:f9:7a:f9:30:a9:
24:d3:cf:71:8e:4b:81:77:da:76:05:0a:9e:1b:6a:97:b4:44:
58:7d:78:60:f6:9c:e7:96:94:c6:6e:b8:f6:20:77:08:c0:00:
d3:5e:2e:d0:62:d8:aa:11:45:c5:60:28:ea:c2:cb:fe:68:3f:
69:b2:27:25:80:1d:c9:1e:8b:be:e6:86:c7:ee:45:8f:a8:31:
60:04:a2:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:44:14 2025 by rpki-client