Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/a_HqpWcguKVInDgN8YslMTwR3wM.roa
File: a_HqpWcguKVInDgN8YslMTwR3wM.roa (raw, json)
Hash identifier: DVJa4uvKEANh2OzjfjJFGQpPuo7h1Q4kXEbslzivCFI=
Subject key identifier: 6B:F1:EA:A5:67:20:B8:A5:48:9C:38:0D:F1:8B:25:31:3C:11:DF:03
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0184B0E9A17ED2FA01DCED59CA2F31455909
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/a_HqpWcguKVInDgN8YslMTwR3wM.roa
Signing time: Fri 25 Nov 2022 22:30:11 +0000
ROA not before: Fri 25 Nov 2022 22:30:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202828
IP address blocks: 2a06:a005:43c::/48 maxlen: 48
2a06:a005:baf::/48 maxlen: 48
2a06:a005:17a0::/44 maxlen: 48
2a06:a005:2dd::/48 maxlen: 48
2a07:54c2:b00b::/48 maxlen: 48
2a06:a005:bae::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:b0:e9:a1:7e:d2:fa:01:dc:ed:59:ca:2f:31:45:59:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Nov 25 22:30:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6bf1eaa56720b8a5489c380df18b25313c11df03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c8:45:0d:6e:d1:55:fb:44:20:71:4b:7f:2e:
2a:03:6e:f0:b9:72:f8:e3:04:39:47:0c:53:8c:e3:
47:4f:29:2c:df:79:11:8d:ed:7c:b6:17:e5:00:68:
ad:10:c7:db:e1:96:fb:ad:e8:4f:08:52:cf:d1:29:
d0:c2:7f:a4:a6:d2:55:3a:43:00:b9:2d:91:54:31:
2d:c0:ef:2a:76:32:35:e0:cb:bd:4c:83:f2:11:47:
e6:30:51:71:49:a9:61:2d:38:31:81:5b:d1:32:79:
4e:52:c1:06:ac:32:3a:06:82:9b:ee:46:c0:f5:b5:
10:d5:a8:f0:61:6b:da:f5:83:b2:de:c7:42:c5:1f:
4b:c3:9b:9a:62:61:a7:6f:34:75:84:10:d7:e4:93:
54:4b:ee:a9:c6:5e:c6:7e:d9:d8:68:83:2d:1b:b7:
95:5a:db:9e:9d:d1:b3:b3:48:2e:42:02:8a:65:97:
47:90:79:b4:54:0d:76:e4:31:b6:d0:46:d7:df:fa:
c5:6d:54:85:79:0d:08:49:79:13:dc:98:b5:50:b6:
dd:57:68:20:92:60:de:84:35:a6:ba:05:b6:61:8c:
c0:0d:16:63:e4:87:81:d2:48:d0:fe:36:6a:40:7f:
85:d6:e2:23:48:97:9d:47:0b:f4:fa:38:fa:12:cc:
f8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:F1:EA:A5:67:20:B8:A5:48:9C:38:0D:F1:8B:25:31:3C:11:DF:03
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/a_HqpWcguKVInDgN8YslMTwR3wM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2dd::/48
2a06:a005:43c::/48
2a06:a005:bae::/47
2a06:a005:17a0::/44
2a07:54c2:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
83:65:7c:d4:7b:01:7b:e6:c4:0f:70:21:14:e0:ab:4b:99:2a:
23:75:61:db:70:98:e2:01:2f:8d:67:f4:43:6e:dd:58:24:ca:
e4:26:de:9b:df:bb:00:89:e9:dd:e7:f6:a7:a3:bf:2b:28:83:
1b:76:d3:7c:aa:81:9d:66:a3:d8:2c:00:7d:0b:7c:e4:36:5d:
de:b1:32:2e:62:98:59:af:82:09:fd:52:e4:7b:5f:2a:39:3c:
77:4e:24:f8:97:7e:e2:ba:99:59:a2:e6:25:7f:54:cd:15:19:
9d:d3:6b:3a:ed:de:f6:1b:3d:01:92:02:68:84:d2:3a:23:1b:
d2:5d:99:3d:83:66:13:5e:bf:55:ce:63:8e:21:54:5d:65:50:
e4:5f:2a:a7:5f:b1:1d:d4:f3:9d:1f:36:1c:a2:c8:f7:77:2d:
69:90:05:d1:f3:c2:74:8d:b7:fb:b2:0f:bd:3b:b8:fc:f6:5f:
1e:38:1d:72:eb:55:b1:93:f6:3a:31:ce:6d:09:5d:95:e0:4d:
5c:76:7b:fd:3e:23:a5:3e:2b:21:75:11:58:58:eb:e6:51:23:
c5:56:d1:9f:34:f7:bf:a3:fa:74:23:66:81:e7:86:0b:4b:2a:
b4:c2:a8:50:5f:af:d9:92:d5:d9:32:c3:3f:f1:aa:d6:73:83:
8e:c0:bd:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:18:27 2025 by rpki-client