Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/UH2S9s71G1ippnyvLNFO42BDumk.roa
File: UH2S9s71G1ippnyvLNFO42BDumk.roa (raw, json)
Hash identifier: bXwn5Kday8VjWWYjPh6Eo3yVns5ZCwTOMh2dUbhJA/o=
Subject key identifier: 50:7D:92:F6:CE:F5:1B:58:A9:A6:7C:AF:2C:D1:4E:E3:60:43:BA:69
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 19FD9B9B
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/UH2S9s71G1ippnyvLNFO42BDumk.roa
Signing time: Sun 22 May 2022 13:27:30 +0000
ROA not before: Sun 22 May 2022 13:27:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206804
IP address blocks: 2a06:a000:1e2::/48 maxlen: 48
2a06:a000:1e0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 436050843 (0x19fd9b9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: May 22 13:27:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=507d92f6cef51b58a9a67caf2cd14ee36043ba69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ed:f5:99:01:e8:14:75:5d:96:f6:02:e4:00:
f2:f9:bb:fc:1b:73:20:a5:7f:c6:97:96:81:70:9b:
b0:79:c8:d1:3a:2c:31:54:48:05:4a:b6:09:27:6c:
1f:34:06:62:3e:d4:d3:75:3a:03:f6:db:eb:76:d3:
fd:b6:46:eb:ed:f7:e5:13:49:c3:4c:a8:a4:b3:1d:
85:f3:33:a6:88:2a:8f:63:ce:9e:19:61:66:b7:4d:
58:db:d5:f4:f8:3f:d8:40:43:ff:b5:98:76:fb:5b:
88:38:6e:9a:45:4c:5e:c5:5c:ae:97:c8:34:11:ed:
99:5b:18:ff:e1:46:f5:df:dc:e4:3e:66:84:d4:d8:
25:18:3f:c5:ca:0f:a3:a9:59:c8:c4:79:2e:a6:a3:
71:24:8e:6a:82:df:cb:32:80:1f:4d:16:4f:58:3d:
3f:17:3b:da:6b:b8:ac:c4:03:8c:62:e3:7c:79:e0:
08:6c:0c:a8:0f:34:bc:4d:5e:3e:06:ab:f8:32:8a:
64:44:7f:7e:37:1c:23:54:a5:18:ca:2f:19:d6:f7:
e8:15:93:1e:7c:a4:e0:94:3e:e1:d0:0f:4c:9c:05:
36:e2:d9:df:f1:ea:39:ad:9f:cf:f7:51:a1:e1:e1:
b2:41:64:f6:82:81:78:df:98:7f:b1:46:86:75:e4:
69:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:7D:92:F6:CE:F5:1B:58:A9:A6:7C:AF:2C:D1:4E:E3:60:43:BA:69
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/UH2S9s71G1ippnyvLNFO42BDumk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a000:1e0::/48
2a06:a000:1e2::/48
Signature Algorithm: sha256WithRSAEncryption
98:1f:8d:d6:cd:fc:91:77:30:ab:78:ce:4b:50:21:b0:5a:73:
f4:c6:d4:fd:a4:3a:0e:0b:cc:c3:5c:96:67:84:32:a4:4b:48:
2f:6c:6a:4c:28:7e:b7:99:da:05:04:27:c5:ec:42:dc:8e:42:
46:9a:0b:54:51:0d:0a:23:7d:2e:31:7e:e5:50:d4:0a:77:22:
16:eb:8d:91:f9:a1:9c:72:df:97:14:30:dc:f7:15:97:f3:01:
d2:86:d7:5b:4f:95:b6:b3:49:5e:76:56:8b:a3:d0:52:83:e1:
73:c3:88:99:d9:26:d2:df:d8:a1:8f:50:a5:98:1f:1f:64:51:
12:f0:41:6f:c5:5f:5f:e5:aa:32:c5:ff:62:5e:cd:f8:7e:9a:
0d:2d:71:49:d3:68:62:b8:0d:b4:44:45:60:8e:e9:c5:a5:48:
60:a7:f9:df:52:c5:f0:f0:45:d7:10:6f:e7:18:23:30:b2:ab:
39:f2:d1:54:f2:7b:35:22:30:08:c5:40:ff:29:87:e6:ca:ae:
1f:dd:a2:0b:89:e8:18:b4:70:8c:40:86:b0:f6:a1:35:6e:0e:
1d:08:27:6c:ba:3a:36:31:0d:ff:42:b8:77:e2:db:83:f4:e9:
62:87:82:3f:90:dd:13:44:37:ea:2b:ce:1c:e7:28:00:8b:eb:
a2:3f:b2:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:14:54 2025 by rpki-client