Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/WI1f52dBBQvojv1Nkl6xJwNlfOI.roa
File: WI1f52dBBQvojv1Nkl6xJwNlfOI.roa (raw, json)
Hash identifier: nvSfDZK16zsOnFJdcxA6WpYW/x7v106udDOzJexMehw=
Subject key identifier: 58:8D:5F:E7:67:41:05:0B:E8:8E:FD:4D:92:5E:B1:27:03:65:7C:E2
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01829DA13954E7FDB11773E5FA1CFDE5CB0F
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/WI1f52dBBQvojv1Nkl6xJwNlfOI.roa
Signing time: Sun 14 Aug 2022 18:32:45 +0000
ROA not before: Sun 14 Aug 2022 18:32:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 398057
IP address blocks: 2a06:a005:5f4::/48 maxlen: 48
2a06:a005:d40::/44 maxlen: 48
2a06:a005:ed0::/44 maxlen: 48
2a06:a005:1030::/44 maxlen: 48
2a06:a005:5a6::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:9d:a1:39:54:e7:fd:b1:17:73:e5:fa:1c:fd:e5:cb:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Aug 14 18:32:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=588d5fe76741050be88efd4d925eb12703657ce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a7:46:aa:9f:de:8f:73:3f:8f:97:de:de:80:
04:20:41:30:5e:0e:55:ee:33:39:90:06:d1:1b:5a:
36:04:8e:ef:54:26:c6:16:8a:54:93:9d:7b:42:cc:
e9:e8:ea:9f:07:fb:7e:e2:c9:25:10:1c:95:37:aa:
d0:93:81:cf:ff:02:21:38:d2:92:11:dc:8c:3b:6b:
82:d8:ee:78:1f:85:10:be:5d:b3:7c:ab:28:2b:57:
82:1f:c5:6e:5f:4f:72:c5:43:e9:24:1c:2b:b9:d9:
df:79:fb:0d:a7:82:31:d8:1f:a2:5d:5c:31:15:4e:
dc:67:4e:86:0c:a7:08:0b:b8:6c:7b:1c:7f:98:4b:
f8:06:7b:4d:76:d3:bc:93:83:43:e6:f4:ae:75:c1:
cc:0f:a9:1d:51:25:5f:8a:fe:3b:fc:fd:bc:9c:04:
2b:36:f9:75:a4:d2:c4:68:25:9b:97:80:e1:68:67:
c6:7c:3e:2a:92:87:0b:17:74:ca:fb:65:1e:c6:3b:
87:47:1f:d0:1c:3b:3b:2a:10:f4:81:d5:03:ae:08:
e0:b1:1e:6d:6b:b0:1a:43:80:f2:62:e4:77:0f:c6:
0f:b4:41:5a:1e:b9:7f:b6:16:1d:95:48:24:e3:ff:
bb:ec:cf:7a:38:dc:96:cd:35:4b:aa:28:6f:bc:55:
13:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:8D:5F:E7:67:41:05:0B:E8:8E:FD:4D:92:5E:B1:27:03:65:7C:E2
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/WI1f52dBBQvojv1Nkl6xJwNlfOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5a6::/48
2a06:a005:5f4::/48
2a06:a005:d40::/44
2a06:a005:ed0::/44
2a06:a005:1030::/44
Signature Algorithm: sha256WithRSAEncryption
5d:6f:38:89:ff:65:24:71:33:41:af:2a:bb:dc:a6:23:77:61:
c7:fa:a6:8f:aa:24:54:2c:6b:81:bf:f6:41:b3:5a:81:5f:34:
4e:d2:dd:65:05:25:60:37:93:73:57:e2:8b:82:5e:a0:e7:64:
ff:ad:b6:d9:72:70:41:e3:28:3d:59:66:c1:bc:bc:44:12:3e:
d6:36:9f:cf:ce:83:87:bf:22:ff:e8:aa:e6:c4:d9:c0:11:db:
31:bb:d0:d8:60:9c:9b:ca:e0:11:c3:9a:f7:98:d1:39:8e:c7:
4e:21:4d:b1:b0:3b:b2:ca:d8:4a:69:9c:13:d8:1b:02:55:b5:
9f:38:06:c2:b2:81:d2:75:ad:d9:3a:35:24:81:a9:6a:89:0b:
aa:b5:09:94:2c:76:64:a5:ad:17:4b:e5:ad:82:67:c9:6f:0c:
2b:2f:2b:8c:06:cb:dc:0f:5f:cf:6e:76:83:9c:e7:87:dc:7c:
c9:35:18:a8:c6:f6:1c:46:8f:3e:2c:14:84:a5:5f:0f:9c:10:
0e:18:26:7d:71:5d:84:a2:cc:dd:31:ec:f9:fd:b3:c7:57:1f:
14:08:a2:8f:dc:ea:b4:ac:35:b0:14:90:da:da:64:cd:2d:a8:
a8:3d:dc:7a:f1:12:10:83:2e:88:58:30:7d:fe:46:14:13:76:
d7:13:2d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:11:08 2025 by rpki-client