Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/TczKnbGJKjfdTIXXyFFAh7FbRGM.roa
File: TczKnbGJKjfdTIXXyFFAh7FbRGM.roa (raw, json)
Hash identifier: BDpf1VVAry3iN4e2wcA5apA27VpF+z6TL9DeTt+OcvM=
Subject key identifier: 4D:CC:CA:9D:B1:89:2A:37:DD:4C:85:D7:C8:51:40:87:B1:5B:44:63
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01849D9E703AC210931A99668B2A0FCF6794
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/TczKnbGJKjfdTIXXyFFAh7FbRGM.roa
Signing time: Tue 22 Nov 2022 04:35:17 +0000
ROA not before: Tue 22 Nov 2022 04:35:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212715
IP address blocks: 2a06:a005:1089::/48 maxlen: 48
2a06:a005:108a::/48 maxlen: 48
2a06:a005:1087::/48 maxlen: 48
2a06:a005:1088::/48 maxlen: 48
2a06:a005:108b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:9d:9e:70:3a:c2:10:93:1a:99:66:8b:2a:0f:cf:67:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Nov 22 04:35:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4dccca9db1892a37dd4c85d7c8514087b15b4463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7e:60:0e:ea:b9:bb:bf:7b:d5:3c:c3:c5:33:
de:fd:22:39:2f:ab:9c:71:e0:bd:2b:40:d1:97:61:
8e:a4:af:e4:54:69:9f:28:73:cf:21:e9:88:10:05:
8c:52:76:f6:52:3b:57:12:00:cd:bb:f0:77:5e:de:
52:8e:37:9a:be:42:d1:ad:30:cf:fb:71:e3:5a:ec:
db:ce:4b:92:0e:c7:16:39:81:71:0e:5f:03:1f:3e:
00:ea:1d:8c:5f:cc:b1:9f:f8:2d:bc:dd:7a:da:ee:
33:d3:9f:8b:5c:e5:0b:eb:d2:0f:16:1e:03:c7:fb:
37:bc:ec:53:38:1f:1e:61:2a:1c:5a:8e:d6:92:6c:
f0:46:8a:bc:ff:94:a1:55:16:8e:d1:7a:de:0f:3f:
9b:7b:1f:38:f4:fd:87:ff:44:8c:97:cc:84:94:20:
ba:29:fc:cb:52:79:fc:f2:69:85:6e:ca:ed:40:62:
eb:93:37:b5:61:ca:db:49:58:bc:2a:c2:9f:fb:f6:
48:b5:ce:53:38:d7:fa:09:3b:c6:8c:e3:41:d0:58:
97:01:bc:64:a5:bd:f8:89:b8:72:a5:65:68:36:d2:
46:af:00:08:1e:58:4b:11:b8:21:cf:8f:17:ad:36:
f4:f8:0a:ec:1f:55:c8:a1:c0:c0:1b:e3:e2:8c:8c:
ec:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:CC:CA:9D:B1:89:2A:37:DD:4C:85:D7:C8:51:40:87:B1:5B:44:63
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/TczKnbGJKjfdTIXXyFFAh7FbRGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1087::-2a06:a005:108b:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
40:55:fd:86:05:67:07:24:5f:59:c4:7b:13:51:4b:8c:27:4c:
db:dd:03:d4:77:18:0b:f2:5d:5f:ff:41:07:46:00:65:4a:56:
9b:93:a8:ec:0e:72:6e:b4:e3:c5:30:3f:da:64:01:eb:20:69:
76:87:80:3a:82:74:d4:3c:80:68:85:12:3a:69:8a:10:04:51:
ce:7e:36:07:95:40:22:1e:82:20:87:37:03:c6:a2:e8:cf:cf:
3e:8f:ef:74:b1:d7:90:91:02:7a:1d:b5:a5:3d:94:51:77:ec:
b1:4d:1f:77:8c:d9:e1:fc:62:af:76:0b:cf:09:1e:16:0a:bf:
f7:76:9c:4c:f5:93:3f:3f:76:84:c6:42:6f:de:41:e6:c5:eb:
a3:21:eb:9a:00:3b:23:94:63:2a:12:ab:0a:68:2e:6a:ed:85:
d8:42:25:bb:3e:12:aa:cc:24:8c:70:a9:4a:78:f6:44:3e:79:
c7:d6:fd:47:8c:8c:fb:4c:b1:12:97:34:b5:46:17:a8:3c:61:
17:0b:2f:c8:b9:3d:6f:a6:de:f5:f1:e6:b3:d3:04:df:f5:47:
fd:ab:8a:e0:6f:66:77:be:6b:0b:5d:b1:76:b4:37:9e:43:34:
1b:0d:a2:60:35:bb:a5:56:b2:d4:82:de:0c:a5:55:ee:ff:b4:
55:4c:44:74
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 21 07:21:26 2025 by rpki-client