Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/agWu-6EnN9pusxXrFqSo5wzbeZ4.roa
File: agWu-6EnN9pusxXrFqSo5wzbeZ4.roa (raw, json)
Hash identifier: 6Alps9qeFxMJLh3TT08Os3clBV9shTJkxFOD+XhObtc=
Subject key identifier: 6A:05:AE:FB:A1:27:37:DA:6E:B3:15:EB:16:A4:A8:E7:0C:DB:79:9E
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 19E83308
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/agWu-6EnN9pusxXrFqSo5wzbeZ4.roa
Signing time: Wed 18 May 2022 18:47:17 +0000
ROA not before: Wed 18 May 2022 18:47:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211571
IP address blocks: 2a06:a005:9c0::/44 maxlen: 48
2a06:a005:85e::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 434647816 (0x19e83308)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: May 18 18:47:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6a05aefba12737da6eb315eb16a4a8e70cdb799e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:19:ab:ff:49:b3:bc:6f:57:7c:8d:24:73:3b:
ef:cc:a4:af:aa:95:e3:ef:0e:3e:77:34:19:e3:85:
7f:24:36:49:45:26:16:02:e3:32:f4:8f:47:89:40:
74:b9:e2:5c:33:aa:06:ae:db:4d:7d:b1:d8:ad:e7:
93:fb:bd:0d:0f:22:b5:29:e7:23:24:c3:04:bd:fa:
da:63:f5:4f:d7:bc:5c:06:41:ee:47:72:bb:37:83:
84:f2:f7:73:4d:12:d8:d3:fc:60:e1:ab:a8:9c:c4:
0f:21:e8:93:01:01:37:0d:3d:f9:2f:60:bb:71:f5:
6e:b6:02:91:b5:29:a8:08:5a:89:b8:90:07:7c:f9:
d3:cc:58:39:ba:1f:3a:51:15:39:89:81:70:7d:7e:
be:6d:73:f2:bf:7e:c0:3d:38:93:79:d2:b3:62:b0:
25:03:2d:41:96:2c:1f:d9:2b:fe:6c:49:ed:6f:08:
7d:46:6d:bc:ff:cb:33:19:6a:df:43:86:e0:ce:2d:
1e:01:c5:d7:9d:3c:4a:2c:83:be:2d:97:85:81:b2:
51:17:2e:c4:30:f1:39:27:14:65:e4:8b:e6:43:78:
05:49:be:76:53:c7:09:a9:40:39:5b:9b:2e:f8:31:
10:c9:df:be:c7:8d:c2:f0:ae:86:59:fb:82:0e:14:
86:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:05:AE:FB:A1:27:37:DA:6E:B3:15:EB:16:A4:A8:E7:0C:DB:79:9E
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/agWu-6EnN9pusxXrFqSo5wzbeZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:85e::/48
2a06:a005:9c0::/44
Signature Algorithm: sha256WithRSAEncryption
0f:15:82:c1:ca:7c:f4:4e:0d:97:9d:13:46:56:ac:25:35:d8:
1c:a3:fc:71:58:9f:14:4f:fd:9f:cf:77:77:09:ff:80:06:4b:
4b:33:f7:77:19:8f:b4:22:4e:f4:70:5b:ff:01:b8:5b:0d:98:
13:06:28:41:62:f0:c7:61:b2:a0:c5:a5:dd:da:91:d5:88:fc:
10:a2:4e:f8:b6:d4:30:3f:ee:ba:3b:62:fe:a9:74:aa:f7:69:
5f:db:48:61:c1:12:fa:80:02:14:ff:5e:ff:83:df:0a:5c:9c:
73:eb:66:6d:e7:82:1f:9d:4d:46:ec:7b:65:33:07:68:80:56:
46:46:74:3e:0f:9f:fb:22:aa:d8:7f:bd:a7:a0:90:14:ee:cd:
27:84:d9:56:46:2a:06:3f:49:0e:fc:02:3c:7b:9d:62:78:92:
18:cc:f6:f1:9e:74:80:be:ee:5f:1e:6c:22:bf:95:c3:ee:e8:
26:20:f5:a1:f5:26:99:f0:32:2b:ea:ee:53:e2:e1:71:9a:e0:
c6:06:cb:d7:f1:53:dd:36:e9:cc:87:f5:5a:60:04:fd:3b:67:
fb:46:89:de:f1:2b:73:f1:66:fd:00:95:d5:ec:59:09:e1:87:
c9:33:82:ec:11:b5:23:f2:50:4a:85:cb:a8:a7:9f:a8:d1:86:
2d:1c:9e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:09:34 2025 by rpki-client