Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/UcAlWY5_ihD3-z96Aa6895y4jAU.roa
File: UcAlWY5_ihD3-z96Aa6895y4jAU.roa (raw, json)
Hash identifier: 5626NwUwVrySlMbdC98BcOtYkjv9zz8OXsS4pRsWLNQ=
Subject key identifier: 51:C0:25:59:8E:7F:8A:10:F7:FB:3F:7A:01:AE:BC:F7:9C:B8:8C:05
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01835B298682C5113DA5253FFED4B42377CE
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/UcAlWY5_ihD3-z96Aa6895y4jAU.roa
Signing time: Tue 20 Sep 2022 13:49:51 +0000
ROA not before: Tue 20 Sep 2022 13:49:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204789
IP address blocks: 2a06:a005:1de0::/44 maxlen: 48
2a06:a005:1df0::/44 maxlen: 48
2a06:a005:1dd0::/44 maxlen: 48
2a06:a005:1dc0::/44 maxlen: 48
2a06:a005:1db0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:5b:29:86:82:c5:11:3d:a5:25:3f:fe:d4:b4:23:77:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Sep 20 13:49:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=51c025598e7f8a10f7fb3f7a01aebcf79cb88c05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:30:92:81:b8:3b:d5:e3:6e:6f:a6:7c:65:9f:
72:50:81:f6:a7:02:82:d1:f0:5c:c7:3c:a7:68:8a:
2a:f7:81:bc:58:e2:47:d8:5b:92:1c:45:86:eb:63:
1e:79:ee:0f:03:76:e9:41:35:e5:82:57:ae:5c:2b:
77:ed:27:85:cd:64:0b:54:97:27:db:6c:c0:69:66:
dc:79:e3:3a:cd:9c:2a:a9:d3:ed:f0:0d:58:33:7a:
ad:99:b5:ad:38:c5:42:25:75:fa:42:fb:28:f6:aa:
66:d6:de:bd:06:d4:5d:44:56:20:39:71:80:dd:c1:
d9:1b:fe:1e:dc:d5:a1:ed:c0:83:d1:07:b9:2f:78:
ba:9c:d8:43:79:c4:0e:09:e4:c6:a0:bc:c9:b3:d0:
13:d8:a1:36:40:bd:77:34:da:a3:48:c9:f6:45:52:
1e:33:77:00:7b:ef:b5:30:44:89:9d:e0:11:7b:45:
07:d0:30:b3:f0:e4:8c:5d:16:ad:7c:43:fd:e9:0f:
62:f7:62:a8:ee:a1:cf:1e:be:dc:0f:66:de:5d:95:
ae:5a:f2:ff:fe:80:c9:cc:05:29:3f:f4:58:e4:8e:
4c:5e:68:5d:4a:31:70:d6:4a:dd:9a:2a:28:53:57:
c3:13:90:e5:fa:6f:5d:58:77:65:c3:2a:af:cf:a5:
67:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:C0:25:59:8E:7F:8A:10:F7:FB:3F:7A:01:AE:BC:F7:9C:B8:8C:05
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/UcAlWY5_ihD3-z96Aa6895y4jAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1db0::-2a06:a005:1dff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
8e:e1:64:e7:00:17:7d:81:65:6f:36:01:1c:f1:da:21:ab:28:
68:d9:ba:f6:c4:b9:8c:f6:5c:92:7d:82:74:2a:22:b2:d2:da:
83:4a:c2:b6:f5:c3:f4:ee:69:a7:b1:1c:3f:13:c0:aa:83:b2:
fe:fa:0b:12:76:88:af:5a:b4:61:da:88:08:d2:a2:c3:72:f6:
ad:b0:1c:aa:69:1f:3f:d0:bc:45:fd:e4:2d:9a:33:8a:c7:10:
d3:24:c4:63:44:f7:4a:48:84:ff:36:0b:6f:13:91:52:bc:04:
38:01:e6:07:af:a0:36:4d:e6:b9:96:75:90:9c:22:ae:2f:c7:
db:b5:5b:34:3a:d6:88:ee:1d:45:c6:d2:fd:64:7d:6e:d3:d1:
30:81:36:76:4a:cf:2e:18:e4:cf:76:64:39:be:1e:0e:4b:9b:
c0:a2:04:78:86:10:3a:9d:09:5a:e4:ad:cc:9b:14:09:2d:a3:
c9:33:97:60:a7:89:04:b5:b2:19:a1:df:ff:0c:72:32:7f:a1:
c1:82:53:af:f0:41:20:d5:5e:52:aa:1a:3a:74:71:13:39:d5:
09:0a:a4:ad:92:31:78:33:92:70:fc:09:ff:47:ae:ba:32:7c:
0e:11:0e:6f:30:99:74:a5:f6:14:30:9e:bc:43:b2:6c:18:cd:
c1:a5:49:7f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 18 10:09:33 2025 by rpki-client