Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VQySm2D8Sw1X3cGFYT85He-J7F0.roa
File: VQySm2D8Sw1X3cGFYT85He-J7F0.roa (raw, json)
Hash identifier: jDXszARTDQ6ZFthkysSJYNSpqBU7yN7EJ3f45jTmKRQ=
Subject key identifier: 55:0C:92:9B:60:FC:4B:0D:57:DD:C1:85:61:3F:39:1D:EF:89:EC:5D
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01827A76859CF5E349557C141EDCEAD613A3
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VQySm2D8Sw1X3cGFYT85He-J7F0.roa
Signing time: Sun 07 Aug 2022 22:39:23 +0000
ROA not before: Sun 07 Aug 2022 22:39:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209861
IP address blocks: 2a06:a005:1690::/44 maxlen: 48
2a06:a005:a05::/48 maxlen: 48
2a07:54c2:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:7a:76:85:9c:f5:e3:49:55:7c:14:1e:dc:ea:d6:13:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Aug 7 22:39:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=550c929b60fc4b0d57ddc185613f391def89ec5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:53:cd:0a:f7:a8:a6:5b:d2:96:7b:ee:89:50:
b9:79:8c:d0:4b:1d:12:18:89:e4:9c:af:2f:f4:46:
2e:b2:3e:6f:81:3b:2f:e8:c0:f3:e9:a7:45:5c:72:
2c:bd:d4:2a:1f:22:ad:29:42:91:ea:55:67:91:37:
7c:07:02:27:e5:d3:f9:22:28:0a:45:90:d8:13:5e:
03:01:1e:ae:e7:95:99:cd:a6:4e:e4:ab:7b:c6:41:
e5:3b:8d:9f:d8:b0:ec:ac:8b:93:65:23:45:ab:c9:
f3:50:6e:26:a1:eb:6c:a5:33:73:28:bd:b2:5a:50:
5f:47:3c:7e:d6:9e:f8:bf:95:6b:77:27:df:24:e4:
66:32:92:9a:16:ff:2d:ab:c1:45:4e:ab:b0:23:7e:
c9:60:4a:b3:bf:18:5b:70:76:61:8c:90:80:dc:ff:
92:81:96:03:8f:94:d8:68:27:b9:1b:05:83:f3:ca:
0f:63:e0:b0:71:06:2c:00:d7:f1:c4:91:9a:e5:95:
75:7c:47:1b:e7:a9:4a:4f:fc:59:9d:36:bc:31:f8:
25:87:b1:6c:ab:bd:5b:e5:fc:a9:af:4a:41:24:21:
56:de:c0:05:f5:1d:a7:cd:50:1f:bb:91:fb:36:d4:
e3:fd:37:ff:86:ec:ea:98:ca:24:0a:aa:6b:93:6b:
f8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:0C:92:9B:60:FC:4B:0D:57:DD:C1:85:61:3F:39:1D:EF:89:EC:5D
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VQySm2D8Sw1X3cGFYT85He-J7F0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:a05::/48
2a06:a005:1690::/44
2a07:54c2:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
70:6a:4b:d5:6c:c2:f4:f5:b4:c5:8c:a7:ff:5f:b4:4e:12:7c:
f6:f4:84:01:ce:91:aa:f1:ef:ad:09:a1:80:1f:1c:52:8b:ad:
5a:da:48:3b:1e:e3:e0:21:e9:1f:d8:0c:58:6d:13:0c:79:e3:
71:bd:20:d3:ce:98:ab:d0:35:34:a5:c3:af:1f:e5:e2:d3:a9:
4a:b3:0a:b6:2f:1b:6d:45:d4:bd:7e:bd:a3:0f:61:56:6a:0f:
ce:db:3f:e5:4e:4a:e2:69:1b:fa:c6:3e:9b:65:e6:29:df:e5:
d1:8d:f9:61:37:56:d4:89:12:7a:a8:96:68:e5:19:38:2b:85:
0f:49:e9:af:34:c8:b3:71:43:56:9e:85:e4:c9:cd:d8:40:57:
6e:c2:20:2b:c9:a9:5a:46:49:6a:03:71:e8:44:e1:40:9c:7c:
cc:8e:b3:00:51:53:78:bd:fa:5f:2b:b8:4a:7c:d4:99:a1:62:
57:95:f5:21:75:48:27:b8:ed:c1:84:e3:38:68:0b:b8:73:bc:
46:61:8b:51:39:78:4a:8d:81:c6:a7:f7:af:d2:f2:f8:8f:91:
3a:67:b5:3f:db:33:25:4a:19:6d:1e:0b:ae:cb:53:ae:29:3d:
4c:6a:cd:37:0b:77:40:96:33:c1:66:da:f5:87:48:ac:6d:75:
8a:ff:34:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 09:50:54 2025 by rpki-client