Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Td_bK6sPggqr6fQvDVJCY1wBaXY.roa
File: Td_bK6sPggqr6fQvDVJCY1wBaXY.roa (raw, json)
Hash identifier: P7ifzuB+NCBiodPhOj8ABNZPECxnPusufTHTeVPg3Us=
Subject key identifier: 4D:DF:DB:2B:AB:0F:82:0A:AB:E9:F4:2F:0D:52:42:63:5C:01:69:76
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 16D77702
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Td_bK6sPggqr6fQvDVJCY1wBaXY.roa
Signing time: Wed 23 Mar 2022 12:19:16 +0000
ROA not before: Wed 23 Mar 2022 12:19:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207941
IP address blocks: 2a06:a005:b0::/44 maxlen: 48
2a06:a005:c0::/44 maxlen: 48
2a06:a005:d0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 383219458 (0x16d77702)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Mar 23 12:19:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4ddfdb2bab0f820aabe9f42f0d5242635c016976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d1:f3:04:cd:80:ee:15:72:4b:33:a5:ea:bc:
ed:58:ed:7e:5b:01:50:44:ca:2d:15:40:fc:d4:25:
2a:08:52:fa:e3:cc:bc:b7:8f:17:97:30:f0:13:07:
20:90:4f:3f:8a:9c:57:0f:18:ba:ee:d4:7e:56:f5:
40:08:5f:32:72:c2:c5:57:9b:91:ae:b6:64:d9:1c:
4d:37:18:85:7a:6a:27:96:2f:e4:ee:33:37:34:b0:
2c:1b:31:41:85:70:0b:da:91:16:95:b4:6c:13:8a:
e6:13:3c:62:2d:9a:f3:31:35:a6:1a:84:c9:d7:f5:
25:52:49:13:9a:65:d4:fc:8e:66:d3:07:8a:4e:17:
8e:81:be:8f:f8:db:62:99:60:09:29:80:4f:55:82:
25:82:d0:60:c1:63:8c:d5:75:9c:f8:bd:08:ae:f5:
bb:22:ef:b3:87:88:f3:05:29:cb:1b:62:75:e3:c2:
bc:fc:5f:f8:b0:c3:00:8c:3e:54:6f:13:14:63:f9:
e8:cc:f5:53:4a:7e:31:35:fc:c9:3f:d2:18:b3:93:
6e:ff:76:0e:4e:ae:b6:37:a5:8f:40:71:59:25:0a:
67:e5:25:f9:14:96:8c:f3:04:ac:4b:b2:69:10:8c:
6f:10:0b:be:e1:fb:e2:a1:e9:74:f3:89:4b:0f:0e:
51:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:DF:DB:2B:AB:0F:82:0A:AB:E9:F4:2F:0D:52:42:63:5C:01:69:76
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Td_bK6sPggqr6fQvDVJCY1wBaXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:b0::-2a06:a005:df:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
59:a8:1e:34:13:8e:63:61:3a:c4:03:e8:23:7f:66:7a:71:43:
fe:c0:53:11:73:25:ac:ef:c2:0c:82:4b:e7:b1:7e:27:b9:ae:
6c:38:77:f5:95:1d:56:2b:87:d8:86:78:6c:b7:ae:20:f8:af:
8e:cc:fb:79:45:81:77:c4:58:03:18:95:39:7e:32:c0:4d:6d:
a7:1c:a7:77:da:56:1f:fc:59:4e:9f:30:56:07:96:0b:36:6b:
32:18:c2:74:6b:6a:bd:84:3d:02:40:68:e7:a8:aa:0c:58:2b:
d7:a6:f9:49:89:e5:55:81:af:f6:31:b8:cd:38:af:69:5e:d7:
17:46:d4:61:02:a5:ac:45:d0:ba:d9:3f:40:dc:32:01:c5:27:
e1:8f:eb:3e:3e:d0:d8:08:3a:86:1d:bf:56:fa:a7:3b:49:75:
82:dd:be:82:cc:df:f4:9f:37:ca:29:54:99:7b:87:d1:02:80:
7b:82:25:51:61:97:97:7a:e4:54:db:df:61:28:20:3e:b3:d6:
35:ff:1a:00:c1:f4:30:ba:b9:fb:10:a6:c3:2b:1b:04:88:c0:
a6:8f:7f:22:6e:8f:7f:38:46:ac:3d:33:82:36:93:f8:3a:15:
21:fb:60:ce:10:85:f5:ca:5a:e1:ca:e5:af:6e:aa:3d:e1:b8:
34:7e:8d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 01:15:34 2025 by rpki-client