Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/XYfG4lcOfPgR7lq6avhsPcrC9_M.roa
File: XYfG4lcOfPgR7lq6avhsPcrC9_M.roa (raw, json)
Hash identifier: 78jlvBkgWy/6RaQPh2aS0nzrBymlqIevO9JLW9VA3X4=
Subject key identifier: 5D:87:C6:E2:57:0E:7C:F8:11:EE:5A:BA:6A:F8:6C:3D:CA:C2:F7:F3
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 018333826A4BC41031B2DAACF11984DC6288
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/XYfG4lcOfPgR7lq6avhsPcrC9_M.roa
Signing time: Mon 12 Sep 2022 21:02:08 +0000
ROA not before: Mon 12 Sep 2022 21:02:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211604
IP address blocks: 2a06:a005:1274::/47 maxlen: 48
2a06:a005:1b30::/44 maxlen: 48
2a06:a005:12f0::/44 maxlen: 48
2a06:a005:450::/48 maxlen: 48
2a06:a005:452::/47 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:33:82:6a:4b:c4:10:31:b2:da:ac:f1:19:84:dc:62:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Sep 12 21:02:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5d87c6e2570e7cf811ee5aba6af86c3dcac2f7f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c3:c5:c3:3e:ae:e5:04:e6:63:0e:fd:ae:75:
e9:28:e0:1f:02:c4:0a:bd:d2:1b:5f:57:66:fd:6b:
77:22:56:0f:ec:5c:99:5c:a7:39:0e:db:87:c1:8e:
cf:33:e3:35:0a:ca:e6:ce:db:ca:51:ca:90:88:a8:
3d:cc:8e:4e:6a:cc:80:8e:49:d2:89:11:83:a9:2a:
41:d3:07:ab:a6:6d:24:2f:81:15:df:a3:66:72:31:
67:4e:96:ad:5d:8f:73:1a:03:ae:ce:84:c3:0c:a8:
af:02:53:38:67:7a:26:aa:88:2b:8c:d7:5d:a5:e1:
60:9d:8e:a8:a2:49:9d:de:49:f5:4f:40:0f:0c:38:
c4:46:13:e1:2f:16:c1:23:38:ab:52:d7:f9:39:aa:
fe:f7:7e:18:ba:c8:3b:9b:3c:c6:fb:e9:93:57:3e:
e0:fd:b6:55:d9:01:7f:76:05:7e:d6:11:3f:86:26:
9a:a9:7c:2f:21:0a:6f:73:e3:38:6f:36:6a:0a:b1:
23:fe:de:52:90:16:14:0c:90:88:34:98:fc:16:8b:
17:2f:95:d0:f8:a5:ca:ab:51:ef:7d:26:1f:45:f6:
ca:60:d2:53:fd:31:d4:58:55:20:e9:04:62:93:b4:
6e:d7:4a:54:39:a8:d0:0f:d4:cf:96:a3:ad:8b:f3:
f6:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:87:C6:E2:57:0E:7C:F8:11:EE:5A:BA:6A:F8:6C:3D:CA:C2:F7:F3
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/XYfG4lcOfPgR7lq6avhsPcrC9_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:450::/48
2a06:a005:452::/47
2a06:a005:1274::/47
2a06:a005:12f0::/44
2a06:a005:1b30::/44
Signature Algorithm: sha256WithRSAEncryption
42:93:8d:8c:9d:8b:76:a5:b2:7c:3c:20:e2:20:eb:90:10:b5:
60:73:ea:0e:7d:20:97:0b:31:e0:91:aa:e3:cc:10:e2:b4:a0:
0b:c2:9a:d8:70:f3:f8:c9:8a:a6:78:96:ef:6e:d6:79:9f:71:
16:e3:ca:1c:d4:f9:54:c7:58:e8:30:c5:a6:d7:36:fa:ab:c8:
0a:90:2c:f1:24:36:48:51:33:0e:c6:cc:56:0b:f2:37:fd:e3:
84:db:4a:2d:28:e1:5d:b1:50:b4:25:90:4b:4d:83:f7:69:cc:
c1:b7:d6:4b:07:c5:26:1a:33:e6:18:d1:e0:c1:b1:dc:cc:c8:
6d:e5:b4:cd:66:02:63:f3:5c:01:03:4c:32:29:38:79:d0:6a:
d6:85:cb:4f:76:59:ec:ef:db:66:9a:04:7b:29:89:d6:e6:3d:
dc:a7:aa:c3:c5:8e:65:72:c3:3f:5a:9a:42:34:e6:5d:95:cb:
21:e1:10:a7:36:73:26:6a:3f:1d:de:7c:92:1c:72:67:30:16:
b8:c2:6b:49:a0:ff:b9:36:b6:f6:f1:a8:35:06:0f:1b:86:e9:
ba:c3:77:f9:0e:e5:11:cd:7d:9d:c9:34:9c:3e:e3:9e:22:ed:
d9:6b:02:51:16:bd:1b:d4:34:a1:72:aa:83:2f:17:4b:08:44:
e0:a2:57:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 19:41:23 2025 by rpki-client