Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Sf73OPJt9FMPWMJIj7RG1PbvKWI.roa
File: Sf73OPJt9FMPWMJIj7RG1PbvKWI.roa (raw, json)
Hash identifier: F4SOVejsOq5XpiAnaFR+HbiPTnrOT+fZFIp+Ii9yifI=
Subject key identifier: 49:FE:F7:38:F2:6D:F4:53:0F:58:C2:48:8F:B4:46:D4:F6:EF:29:62
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 187A845C
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Sf73OPJt9FMPWMJIj7RG1PbvKWI.roa
Signing time: Thu 21 Apr 2022 06:46:16 +0000
ROA not before: Thu 21 Apr 2022 06:46:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210932
IP address blocks: 2a06:a005:570::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 410682460 (0x187a845c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Apr 21 06:46:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=49fef738f26df4530f58c2488fb446d4f6ef2962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:91:40:70:17:2a:46:80:35:9a:6e:72:03:3c:
45:df:4e:94:29:c8:fa:0b:ce:09:4c:1b:8f:c5:c6:
cb:9c:3a:e3:7b:cc:1c:28:96:f2:bd:61:72:3d:39:
4a:da:a9:79:0c:d3:27:22:a9:44:d7:25:3a:f4:6c:
6c:74:05:bb:05:0a:e7:32:0b:23:07:8a:e9:66:26:
ab:25:2f:17:86:54:dc:d4:c9:6d:48:a0:1c:b4:9b:
ef:39:0d:b1:12:14:18:32:db:ed:88:93:b5:47:f9:
fe:51:1a:53:9c:0b:62:00:bd:ed:2b:c7:78:aa:ec:
be:52:c8:7f:cc:94:fa:6d:26:d3:08:7a:bb:de:a9:
16:6e:ae:44:dc:f8:88:f0:7f:46:1c:a0:e6:3f:41:
70:57:42:a7:7c:31:d1:4d:42:ef:80:f5:77:27:02:
7b:48:c9:8f:b0:75:8f:84:ab:06:c3:b4:24:1d:87:
96:76:8d:c9:fc:bd:1e:80:85:2a:95:3b:66:2a:a0:
72:fb:04:34:34:4d:f4:96:49:3a:71:48:03:43:28:
60:d4:1d:99:c8:7f:58:db:12:ed:2b:50:27:5c:70:
42:a7:eb:b8:92:db:ad:9a:ae:78:0f:53:2e:02:a9:
46:2d:5e:40:aa:15:52:3f:0f:66:c0:a6:e1:55:79:
ad:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:FE:F7:38:F2:6D:F4:53:0F:58:C2:48:8F:B4:46:D4:F6:EF:29:62
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Sf73OPJt9FMPWMJIj7RG1PbvKWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:570::/44
Signature Algorithm: sha256WithRSAEncryption
8f:80:40:8b:86:74:9a:61:55:d7:7e:20:3d:7b:98:91:ee:e8:
8d:ff:ac:82:18:b2:37:7e:42:6f:5d:17:7c:04:22:58:74:5e:
f2:19:af:ef:55:88:c9:c2:ff:79:c9:fc:23:65:58:2a:0d:80:
67:cc:75:cc:88:cc:a7:74:d0:81:4e:22:e2:26:ad:d7:c5:86:
cc:90:52:71:06:93:ac:e6:32:ae:0c:e0:75:d8:47:64:ca:32:
55:2b:d4:83:c5:45:9c:f6:bc:15:4d:03:8f:00:b6:ad:b3:93:
35:b5:2d:20:a8:2f:47:a9:55:26:d1:b1:36:49:a9:de:bb:3f:
cb:37:0d:54:f9:3f:ec:13:16:75:3b:46:a8:11:9d:69:25:64:
d0:82:51:53:b8:a5:81:19:e4:70:d7:5f:ec:dd:25:f0:af:93:
73:e8:db:e0:42:4c:36:34:c8:8a:32:5d:59:5b:98:71:9c:af:
e7:e9:14:fa:17:3c:0e:87:04:c3:b7:92:28:b2:d3:d5:e9:9b:
c7:63:6a:55:36:3f:40:d5:33:46:b5:87:21:d5:d6:8a:33:ab:
18:1d:15:61:11:0c:32:2a:73:aa:95:5e:76:b9:20:3d:27:c9:
71:6b:fb:1c:4d:c9:ab:aa:85:31:8c:3d:bc:3d:d5:ee:99:aa:
32:bc:7b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:05:18 2025 by rpki-client