Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/dRt8sDLhsO0CQnhcwe1qQfJqTss.roa
File: dRt8sDLhsO0CQnhcwe1qQfJqTss.roa (raw, json)
Hash identifier: WwC54SzdtGmeAH2jk9qHfTT3cdg/nhXCglrAVKEWHQ0=
Subject key identifier: 75:1B:7C:B0:32:E1:B0:ED:02:42:78:5C:C1:ED:6A:41:F2:6A:4E:CB
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 180CC7A8
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/dRt8sDLhsO0CQnhcwe1qQfJqTss.roa
Signing time: Tue 12 Apr 2022 12:20:18 +0000
ROA not before: Tue 12 Apr 2022 12:20:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 148996
IP address blocks: 2a06:a005:70::/44 maxlen: 48
2a06:a005:2d0::/44 maxlen: 48
2a06:a005:60::/44 maxlen: 48
2a06:a005:2e0::/44 maxlen: 48
2a06:a001:a000::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 403490728 (0x180cc7a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Apr 12 12:20:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=751b7cb032e1b0ed0242785cc1ed6a41f26a4ecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1c:0c:ac:60:56:38:1b:21:55:40:a0:5b:76:
43:0f:4d:19:4b:0d:04:d3:10:6b:b8:cf:68:09:fe:
ca:e3:44:57:c8:53:54:d7:4a:88:3d:a2:75:e5:42:
ad:f7:4a:81:c1:cf:be:db:72:72:42:cf:b7:36:a7:
26:15:71:9b:dd:2c:fb:62:0f:45:02:0d:41:b9:a1:
2f:4e:be:42:62:eb:cc:10:80:79:a4:0c:2f:44:f9:
aa:03:99:d4:c7:74:1e:0c:0f:15:d0:40:50:f0:41:
75:de:47:e5:40:4e:37:fb:e5:2c:76:47:0a:06:65:
0c:86:d5:ae:42:6e:2a:88:87:7d:87:5a:cc:d8:f8:
40:c1:31:dd:4c:a6:8d:6d:66:f0:64:7d:6a:ab:61:
8b:9c:fa:0f:9b:e4:ef:f0:fb:54:d0:d4:96:63:14:
0e:51:ff:e6:dc:73:34:15:58:ec:8f:a7:5e:02:36:
f9:89:5d:6b:70:ee:ae:13:d4:8f:41:e8:d7:87:c9:
eb:51:b7:1f:67:f5:40:65:03:85:99:a9:11:48:45:
ec:8c:74:c6:94:ca:69:74:e8:b6:83:ee:7f:b2:b5:
45:0c:ae:69:28:19:02:98:d1:f4:1c:90:59:db:fc:
e5:cd:f3:64:04:bd:fa:67:98:c3:4b:78:58:de:24:
86:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:1B:7C:B0:32:E1:B0:ED:02:42:78:5C:C1:ED:6A:41:F2:6A:4E:CB
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/dRt8sDLhsO0CQnhcwe1qQfJqTss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a001:a000::/44
2a06:a005:60::/43
2a06:a005:2d0::-2a06:a005:2ef:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
33:72:51:0b:16:38:18:ff:54:be:a2:90:6e:41:4f:3e:fc:2e:
e3:a1:b6:fa:9f:c5:7e:a6:c0:46:50:b5:78:ec:ee:be:ab:ac:
ee:1d:e2:d8:cb:4f:d8:cd:80:35:8a:5d:5f:cc:22:70:9c:2e:
ac:51:30:d1:a5:bc:59:88:b1:33:31:3b:6b:4b:87:f0:e4:c5:
83:9b:d8:28:b4:0d:ef:80:e7:39:e9:ca:1c:2d:52:fc:77:c1:
92:55:be:79:ea:ba:5a:68:bc:f7:f6:6c:a8:01:1b:f1:6f:b2:
41:09:f2:3c:51:43:cf:39:9f:1a:2b:8a:fa:9c:00:4a:6f:0f:
f2:f8:f7:b4:4a:4f:5d:9e:b7:51:35:44:96:35:93:6d:41:59:
0f:48:16:cf:ef:b8:ab:29:3d:e3:7f:fb:db:bf:83:6a:35:9b:
c4:88:d3:90:fa:e1:c0:dd:4c:85:2a:05:fb:01:84:0c:a7:92:
b1:15:7a:fd:0e:46:cb:ae:c8:14:3e:89:7e:74:38:7b:a7:0f:
87:87:5e:e9:4e:43:10:73:9e:84:68:95:37:e3:d8:41:99:75:
78:2d:b5:9e:4b:5c:70:29:66:b2:ab:59:47:e9:4c:ff:61:b3:
46:ca:07:08:3a:77:d9:e7:bb:b9:3e:18:7a:81:5e:f7:93:2f:
4c:00:cb:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 09:50:48 2025 by rpki-client