Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ckOffukDxzOtz-bxsmAr931rKSw.roa
File: ckOffukDxzOtz-bxsmAr931rKSw.roa (raw, json)
Hash identifier: eJISzK4dMc6VvbxuQxTwK/NBSOb99e1p5kfNGEuzG3k=
Subject key identifier: 72:43:9F:7E:E9:03:C7:33:AD:CF:E6:F1:B2:60:2B:F7:7D:6B:29:2C
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0184EE5C0FEE8F96DEAE3DFC8C7933BE35DD
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ckOffukDxzOtz-bxsmAr931rKSw.roa
Signing time: Wed 07 Dec 2022 20:52:01 +0000
ROA not before: Wed 07 Dec 2022 20:52:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210912
IP address blocks: 2a06:a005:2600::/44 maxlen: 48
2a06:a005:2610::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ee:5c:0f:ee:8f:96:de:ae:3d:fc:8c:79:33:be:35:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Dec 7 20:52:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=72439f7ee903c733adcfe6f1b2602bf77d6b292c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0c:64:73:2f:d2:54:9a:23:a6:e1:87:83:0d:
0f:e4:71:dc:91:9a:b9:bd:06:5f:49:de:1d:bf:11:
1d:c8:b1:8e:e3:06:94:d3:8f:69:d6:1c:01:fd:84:
36:8c:16:54:a5:70:f3:72:ce:fa:0d:6c:ca:89:fb:
85:fa:12:f5:c3:12:40:bc:4b:dd:1f:a8:22:f8:87:
ae:66:4c:2f:87:21:f1:3e:ed:c4:31:f0:c0:b3:75:
89:36:2b:8e:2d:4b:bb:75:43:df:92:09:13:5a:2f:
9d:f3:3e:20:23:e6:0a:79:4a:6b:04:a5:2a:d8:91:
f9:93:bb:bf:d5:74:9e:2b:2d:4c:15:8d:8e:4f:a4:
2d:74:87:64:ec:1a:9b:ee:06:d0:c7:5e:fc:e4:e7:
cd:9f:48:c6:a2:14:d5:41:83:60:40:7a:26:b1:a9:
8b:63:d8:94:08:57:bd:9e:2f:a6:eb:94:77:9e:58:
e4:43:57:e6:59:b3:5b:5f:59:eb:79:d1:b2:a4:da:
19:83:c3:93:96:3a:62:54:2a:e9:a7:d1:46:bc:35:
98:30:50:ca:15:15:33:f9:d5:89:11:c0:df:3b:87:
c8:23:0c:20:d6:e2:91:27:89:99:ca:12:98:fd:fd:
40:5b:49:11:7e:86:98:26:88:f9:e2:43:c5:e6:2b:
b8:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:43:9F:7E:E9:03:C7:33:AD:CF:E6:F1:B2:60:2B:F7:7D:6B:29:2C
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ckOffukDxzOtz-bxsmAr931rKSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2600::/43
Signature Algorithm: sha256WithRSAEncryption
5b:91:b1:69:61:ce:a1:30:20:b7:64:cd:08:e1:13:ea:08:e6:
9a:43:e9:a7:87:d5:10:c6:9f:08:59:d2:43:31:32:5d:3e:df:
02:9c:b5:ff:69:57:09:52:ea:9a:60:65:23:fd:49:9c:63:e7:
9b:45:bc:62:0f:26:be:04:5e:0b:d2:03:72:bb:cd:64:80:2b:
1b:fa:72:2f:f6:5d:fa:62:f7:10:a6:7f:80:97:79:4b:e5:9a:
95:24:c2:52:d8:59:37:71:5a:1f:2a:29:28:e4:a7:24:3f:38:
e5:11:b7:fc:4a:ca:8e:c6:e8:d6:f3:af:89:bd:6e:d0:1a:32:
86:60:d1:a5:57:ec:f3:e2:e2:49:09:59:91:a1:39:ff:b7:71:
7b:ab:7c:c5:01:63:18:d8:10:1c:a5:33:cb:71:ee:72:6f:4d:
5f:87:16:3e:7b:c9:10:1c:b6:eb:56:64:17:95:cd:dd:92:5c:
83:36:c4:ba:70:e7:a6:4b:b1:52:37:20:ea:53:52:e2:97:fd:
5f:7a:bc:60:18:ad:a0:d5:06:37:04:3e:a9:80:58:3a:2d:c1:
f5:e8:71:bc:cc:9a:0e:60:60:81:3e:44:8c:b6:c1:08:27:86:
17:e6:f6:d6:13:b4:01:94:1b:49:e7:2a:b8:b7:3b:de:15:2a:
c1:61:3b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 10:01:53 2025 by rpki-client