Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/US-Tw7JCdxsl99BpWqtXyt5niM8.roa
File: US-Tw7JCdxsl99BpWqtXyt5niM8.roa (raw, json)
Hash identifier: NUWQGBTWzgTgjVe+Pr4jUlEjqgBUmtOOBTqfHHd99Tg=
Subject key identifier: 51:2F:93:C3:B2:42:77:1B:25:F7:D0:69:5A:AB:57:CA:DE:67:88:CF
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 18620A6F
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/US-Tw7JCdxsl99BpWqtXyt5niM8.roa
Signing time: Tue 19 Apr 2022 06:21:57 +0000
ROA not before: Tue 19 Apr 2022 06:21:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 139328
IP address blocks: 2a06:a005:520::/44 maxlen: 48
2a06:a005:540::/44 maxlen: 48
2a06:a005:530::/44 maxlen: 48
2a06:a005:550::/44 maxlen: 48
2a06:a005:4c0::/44 maxlen: 48
2a06:a005:510::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 409078383 (0x18620a6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Apr 19 06:21:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=512f93c3b242771b25f7d0695aab57cade6788cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d2:32:9f:d6:54:66:da:05:0a:09:1c:70:9f:
73:b9:88:fa:53:26:42:23:dc:21:85:64:60:a4:ea:
26:e3:e5:ee:c2:20:03:ce:48:bb:14:3b:ec:bb:7a:
b8:ca:75:f9:dc:46:68:84:32:e2:e3:af:33:d4:f6:
b8:b3:32:4d:81:ac:6f:ba:e0:d6:e2:0e:ca:c5:16:
95:6b:1f:ec:72:0f:34:f6:75:3b:5c:f4:d8:c3:ed:
25:b1:15:3a:e5:38:cf:7d:ed:be:d3:32:5c:86:1a:
34:52:ca:73:24:a4:53:35:0e:89:9a:d5:db:71:bb:
a7:49:72:30:6c:aa:ac:0d:08:49:f1:37:19:79:1f:
e5:d4:af:0f:79:2d:c5:b2:a6:fe:00:22:fa:e6:4e:
34:2e:f7:dd:6d:a0:9b:5c:a9:9f:6b:8e:7e:fd:a1:
fb:24:01:6d:d5:20:e6:24:71:5f:c5:da:09:dc:06:
23:cd:36:45:5d:97:9a:58:9f:d1:44:2e:9b:f4:89:
00:11:da:ef:61:63:07:de:02:1d:ab:b1:0c:f5:13:
76:ce:cb:38:c5:ee:da:a4:7b:d9:37:c7:1b:14:ed:
3f:f6:53:b1:d0:11:cf:36:a8:61:1f:dc:7a:80:35:
05:a3:9e:3f:41:94:7f:9b:f1:d7:18:f6:cc:5b:c2:
27:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:2F:93:C3:B2:42:77:1B:25:F7:D0:69:5A:AB:57:CA:DE:67:88:CF
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/US-Tw7JCdxsl99BpWqtXyt5niM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:4c0::/44
2a06:a005:510::-2a06:a005:55f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
48:4f:49:4d:4b:56:38:c6:a3:bc:b6:c8:b8:1a:39:13:9b:87:
1b:57:74:c4:1f:36:b1:bb:bb:4b:01:e0:fb:df:bb:49:c9:c7:
be:90:8a:5b:1b:e1:87:c0:1a:2d:0a:bd:87:09:91:47:c5:be:
d0:fa:2f:f0:bf:cb:75:b7:34:c6:0d:5b:99:98:5d:ad:b1:f1:
13:ff:dd:11:55:80:e0:be:f5:5b:12:09:e5:ac:06:ab:2e:c8:
c0:a6:f0:32:8f:9f:83:06:c2:b6:05:58:cd:88:3d:4f:a8:9e:
37:9f:9b:c9:93:cd:0f:b0:66:3e:bf:9b:ba:9e:27:67:05:16:
1e:de:1b:c9:e0:c0:2c:b4:82:09:04:51:9b:44:9d:c9:58:c5:
b3:03:4f:aa:c3:a2:d0:e3:29:ee:a3:28:25:2f:a9:f1:a9:1f:
7f:e1:55:ce:e2:47:0c:2f:92:63:f8:33:b6:54:a9:d3:39:be:
dd:dc:a2:90:cd:0c:01:b1:07:36:33:6d:b5:77:18:0d:bb:85:
c5:04:22:98:83:47:92:a6:bc:1c:d8:e3:b9:54:22:16:00:00:
94:dd:a6:9e:7b:72:e0:5f:41:56:70:20:48:10:3a:79:e6:f6:
4c:9d:68:b2:23:03:f0:20:16:3c:db:83:bd:db:18:e8:81:c0:
41:ad:94:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:48:37 2025 by rpki-client