Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/T-WnGm53fYmZymaEZnT3Q9ko2Pw.roa
File: T-WnGm53fYmZymaEZnT3Q9ko2Pw.roa (raw, json)
Hash identifier: ObcnO7cUdVw5X415lonXVbX6602eNQQIW0///uRaCJ0=
Subject key identifier: 4F:E5:A7:1A:6E:77:7D:89:99:CA:66:84:66:74:F7:43:D9:28:D8:FC
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0184102380F77672776BB46769AEDDE80854
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/T-WnGm53fYmZymaEZnT3Q9ko2Pw.roa
Signing time: Tue 25 Oct 2022 17:14:32 +0000
ROA not before: Tue 25 Oct 2022 17:14:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204508
IP address blocks: 2a06:a005:d29::/48 maxlen: 48
2a06:a005:5f2::/48 maxlen: 48
2a06:a005:f50::/44 maxlen: 48
2a06:a005:1930::/44 maxlen: 48
2a06:a005:5fa::/47 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:10:23:80:f7:76:72:77:6b:b4:67:69:ae:dd:e8:08:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Oct 25 17:14:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4fe5a71a6e777d8999ca66846674f743d928d8fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:9a:fb:63:1a:5a:c5:81:8d:45:cf:3c:64:4b:
8e:8c:03:a1:0a:83:fd:53:eb:86:32:3f:94:91:8f:
9d:67:67:8b:20:fb:a4:dc:1a:f6:58:b2:df:5f:65:
af:e2:2a:e1:0a:63:6f:4f:81:80:91:8e:04:c8:a3:
60:4a:b8:53:05:7b:93:37:f1:ac:24:66:04:92:ea:
95:73:4a:d6:63:77:e1:da:04:91:ef:d8:52:7c:52:
36:f2:3f:a8:eb:e8:30:0d:06:f2:12:ca:42:fe:e0:
bb:f9:7f:2b:4b:2f:43:c9:7a:b6:56:68:00:55:8b:
10:d6:2a:e0:47:ef:a9:0e:ab:48:18:48:a2:27:a1:
07:17:da:26:d0:5c:04:6a:c9:ca:4f:ff:42:91:32:
ca:e3:15:8c:29:ab:6b:d8:e9:04:3a:f0:d5:3c:58:
cb:83:6e:a4:a8:ec:ad:dc:bf:21:ef:3d:43:dc:ad:
e0:80:b4:19:e8:c7:7c:e2:c8:dd:5a:bd:e4:ea:91:
69:ce:6c:dc:4c:bb:b3:a0:e8:f8:a0:46:78:4b:4d:
c1:93:00:df:69:d0:4a:29:c1:cd:cc:9b:74:b8:46:
72:94:80:6a:51:8e:27:3e:96:27:f1:3c:86:8d:9b:
d3:35:a8:9c:ac:34:1f:81:d4:ca:6f:85:fc:af:3c:
c6:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E5:A7:1A:6E:77:7D:89:99:CA:66:84:66:74:F7:43:D9:28:D8:FC
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/T-WnGm53fYmZymaEZnT3Q9ko2Pw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5f2::/48
2a06:a005:5fa::/47
2a06:a005:d29::/48
2a06:a005:f50::/44
2a06:a005:1930::/44
Signature Algorithm: sha256WithRSAEncryption
94:78:28:41:83:5b:69:7a:43:36:3a:92:1e:0a:4c:8d:5d:31:
d6:9c:4f:30:ca:9e:03:a5:f7:a4:14:3c:f2:6f:50:6c:5c:be:
08:32:64:5a:1e:8d:a9:5f:1c:b7:dd:8e:26:0c:97:d2:5f:49:
16:19:0c:f0:bc:53:cf:bd:25:01:15:1c:5a:23:01:83:00:da:
8e:c0:9a:87:88:8b:ce:de:f2:24:e8:68:1c:74:23:68:0c:3a:
c0:83:e9:97:ad:16:69:31:c1:e8:39:22:7e:e4:bb:6b:c6:ac:
f9:62:69:90:ed:e0:57:37:f4:40:28:fd:59:72:a5:1f:ec:25:
bb:72:16:a9:1e:7d:75:9f:da:2e:0f:7d:72:8d:6e:b3:06:8c:
e5:7e:3e:d7:42:44:85:17:60:a2:c4:f7:66:c7:54:f3:35:48:
8d:ca:e4:a5:41:db:a8:b1:a5:2b:02:4a:90:fe:d4:66:61:d2:
a7:10:03:32:d1:0e:01:f7:69:f2:40:3c:27:11:00:1b:7c:80:
85:5d:d8:aa:39:1c:fa:52:4b:ef:ca:fa:83:e8:a5:0c:ab:42:
99:61:af:e2:1c:1d:ce:44:c3:5a:dd:d1:ce:f2:6b:cd:50:12:
58:a9:32:a6:74:be:fe:4f:1e:f4:dc:bd:f9:10:41:24:43:ff:
55:eb:1d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:03:38 2025 by rpki-client