Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ToDwOD8Cn6jRrTp01hUOm0h7Hnc.roa
File: ToDwOD8Cn6jRrTp01hUOm0h7Hnc.roa (raw, json)
Hash identifier: RXa7avydw9qCZgwmy7f9Co6wHl9hMI7bCp8ywM7PMp0=
Subject key identifier: 4E:80:F0:38:3F:02:9F:A8:D1:AD:3A:74:D6:15:0E:9B:48:7B:1E:77
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 018371A5B146F0F62EA10F6303034C749FE2
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ToDwOD8Cn6jRrTp01hUOm0h7Hnc.roa
Signing time: Sat 24 Sep 2022 22:37:07 +0000
ROA not before: Sat 24 Sep 2022 22:37:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212888
IP address blocks: 2a06:a005:1::/48 maxlen: 48
2a06:a005:1990::/44 maxlen: 48
2a06:a005:a::/47 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:71:a5:b1:46:f0:f6:2e:a1:0f:63:03:03:4c:74:9f:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Sep 24 22:37:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4e80f0383f029fa8d1ad3a74d6150e9b487b1e77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:0c:35:0e:05:ff:d2:c4:07:9c:2f:65:98:f9:
ed:84:8a:a0:bb:7e:78:8a:70:04:9c:f4:4b:f6:8a:
6a:66:33:9a:22:0c:bf:bb:08:dd:46:63:11:44:dd:
88:82:40:1d:ac:7c:4f:08:82:3a:33:64:d3:33:f8:
d5:f3:98:5a:2e:78:7a:eb:98:48:c4:36:e7:f8:68:
f7:5c:41:f1:17:90:bf:8e:c0:67:22:76:00:13:34:
30:b3:b7:ce:08:d8:b1:32:dd:04:1f:34:ef:9b:60:
6d:94:22:07:f5:f1:6f:94:9f:61:85:e7:9c:13:6a:
0c:5c:72:6a:1e:b0:a6:0d:d3:a7:b7:f3:40:08:a4:
c9:20:db:e2:03:89:2c:70:ef:c0:2e:b5:7e:32:5a:
46:dd:4f:51:6e:db:ff:a2:2b:65:6f:c9:55:d3:4e:
71:db:c7:2e:f4:d3:a5:03:57:48:89:7f:71:99:4a:
ea:70:09:9b:2f:be:d5:5e:2e:b0:9b:46:70:9d:b4:
af:87:33:ae:e5:04:a1:57:05:2d:72:4f:57:a6:18:
0f:8f:31:42:4e:90:43:32:bd:d2:dd:47:43:0b:18:
3f:47:03:d7:b7:83:4e:63:c1:5e:5a:e0:66:85:e8:
0f:db:bb:2f:22:28:66:9a:f1:ad:09:07:a8:69:d7:
9f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:80:F0:38:3F:02:9F:A8:D1:AD:3A:74:D6:15:0E:9B:48:7B:1E:77
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ToDwOD8Cn6jRrTp01hUOm0h7Hnc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1::/48
2a06:a005:a::/47
2a06:a005:1990::/44
Signature Algorithm: sha256WithRSAEncryption
7c:83:ea:07:0f:a6:a1:7c:75:e1:2f:34:41:fd:cf:f5:54:8c:
b4:7e:f8:54:c0:66:17:74:ea:ab:c1:9b:5e:01:0c:4e:5c:96:
04:56:dd:67:6c:37:c2:ba:95:a2:e6:6b:d4:b2:c0:c1:ce:47:
f0:30:e8:77:67:4a:53:0f:48:9e:34:07:6e:3c:8f:c8:38:78:
24:70:80:ac:03:1d:49:9a:a9:8a:3f:aa:b8:0f:71:f7:3c:d3:
7f:83:77:b0:fb:31:cb:de:a5:5a:65:30:0b:7c:c8:61:a3:96:
c3:02:ed:49:86:fd:c3:16:a0:a0:28:65:60:2f:05:1c:90:b6:
32:ec:2b:28:d9:02:bd:8a:a3:21:c3:c0:c8:41:57:2b:4c:e6:
41:f6:9c:67:ed:ce:e5:18:07:64:ea:8b:fb:3f:72:e8:08:14:
c0:81:3b:ac:18:5e:4e:73:01:24:7c:ee:99:3e:d7:f4:d6:90:
44:13:39:be:9d:2d:37:55:fc:38:20:0c:81:e0:3f:51:86:6b:
6c:6f:2a:d2:94:1d:e7:c1:e5:94:67:df:3c:01:8c:73:53:96:
60:7f:d2:9c:39:15:9e:1a:ab:d6:f6:3e:a2:dc:63:e0:fc:c4:
f0:e5:2a:78:de:ae:f2:59:c9:90:be:2f:69:5b:9c:e1:fb:5d:
1a:6e:86:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:46:07 2025 by rpki-client