Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/eGNcCHv5tPRssn_I7JCoTA34AAg.roa
File: eGNcCHv5tPRssn_I7JCoTA34AAg.roa (raw, json)
Hash identifier: j3jJbIMbpGf9FFYBNr0VlMvcdMXVC2GmLkLnHegFuCw=
Subject key identifier: 78:63:5C:08:7B:F9:B4:F4:6C:B2:7F:C8:EC:90:A8:4C:0D:F8:00:08
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 191231B1
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/eGNcCHv5tPRssn_I7JCoTA34AAg.roa
Signing time: Tue 03 May 2022 03:13:24 +0000
ROA not before: Tue 03 May 2022 03:13:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211358
IP address blocks: 2a06:a005:e0::/44 maxlen: 48
2a06:a005:240::/44 maxlen: 48
2a06:a005:730::/44 maxlen: 48
2a06:a005:6c0::/44 maxlen: 48
2a06:a005:250::/44 maxlen: 48
2a06:a005:750::/44 maxlen: 48
2a06:a005:400::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 420622769 (0x191231b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: May 3 03:13:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=78635c087bf9b4f46cb27fc8ec90a84c0df80008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3f:24:9f:3d:48:f7:6e:47:c2:f4:d9:71:24:
37:d2:fd:48:39:94:df:61:be:ec:a8:75:4d:e8:08:
6b:9a:d5:cd:11:82:4e:cd:4a:3d:e6:bc:81:ca:9a:
42:65:9e:ec:3b:64:14:3b:eb:9d:72:c4:24:45:da:
e0:6e:19:eb:1d:00:8a:3d:e0:25:2d:52:3d:1c:16:
ab:c5:ef:f2:73:5a:c6:52:e1:a5:bf:b6:ce:0e:eb:
ad:b0:6c:77:30:d6:78:21:65:05:b5:2b:72:49:2f:
29:92:5e:a3:f8:10:95:d4:33:5b:de:58:32:a4:5c:
52:49:b1:01:03:8e:50:42:04:d9:12:bb:ee:70:9f:
b4:7a:6c:a4:4b:2d:16:e0:6e:2a:c3:6d:b0:53:7d:
b1:61:03:28:52:ac:d9:57:47:c7:e6:cb:aa:53:b5:
4f:75:63:e4:d7:5b:44:6e:cb:19:a1:4c:3f:4d:60:
10:5f:7c:f3:5a:0c:d7:cc:58:8c:ee:07:ca:55:40:
48:82:83:26:e1:2e:b3:3a:d5:21:83:6c:26:7f:7d:
73:77:41:72:42:3d:ec:05:c6:5a:28:1a:3c:eb:4c:
4e:9d:04:a5:52:15:41:07:f7:ef:ad:c1:d8:0c:a3:
3d:2a:8f:1a:5e:29:52:15:71:0c:6d:e6:08:9b:cc:
66:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:63:5C:08:7B:F9:B4:F4:6C:B2:7F:C8:EC:90:A8:4C:0D:F8:00:08
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/eGNcCHv5tPRssn_I7JCoTA34AAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:e0::/44
2a06:a005:240::/43
2a06:a005:400::/44
2a06:a005:6c0::/44
2a06:a005:730::/44
2a06:a005:750::/44
Signature Algorithm: sha256WithRSAEncryption
36:92:99:49:68:d0:2e:88:c5:c6:bc:8f:2e:74:5a:65:da:ba:
4d:bf:b2:1e:57:b2:31:2c:4a:d8:29:5b:f7:51:23:65:8f:32:
13:26:23:cb:24:d9:6a:2d:e9:02:1f:45:6b:82:45:38:a9:2e:
48:b8:a2:84:70:95:be:2c:3a:6f:a9:03:93:b5:83:c0:c7:ad:
13:e1:f0:ed:a3:45:1e:45:27:11:81:34:d2:01:16:de:d9:68:
75:a7:70:32:c3:f1:7c:b3:62:c7:4b:1b:24:de:e5:d8:07:bc:
95:56:93:98:c4:93:6b:ca:1a:1e:d0:df:01:3c:76:a3:68:36:
22:fe:21:2b:38:43:ed:ba:37:34:48:c7:65:9b:33:46:6f:58:
b8:2e:ad:ca:d4:e1:e6:60:1c:ab:29:a0:9d:f4:6d:87:93:21:
80:e5:6e:60:9c:8d:53:a6:41:89:4b:ef:26:93:af:b7:93:56:
b3:e2:d1:cf:a2:2e:85:8c:02:a3:62:c8:af:1d:1f:e0:aa:03:
07:98:4c:0f:4f:89:57:90:b8:88:e0:d5:cd:73:b7:b9:21:49:
94:2f:8e:e8:61:bf:13:82:5f:f7:eb:fe:c7:c9:9b:ad:f2:0b:
b6:41:77:04:76:e1:c3:d0:b4:de:51:90:c6:14:4b:3f:fe:30:
84:bb:d7:df
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgIEGRIxsTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NDkxNDU0MWZkMWI5NWU3YzBhZmM4NzVmYmVmNzg3OTRmNTUzODZiMB4XDTIyMDUw
MzAzMTMyNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzg2MzVjMDg3YmY5
YjRmNDZjYjI3ZmM4ZWM5MGE4NGMwZGY4MDAwODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKw/JJ89SPduR8L02XEkN9L9SDmU32G+7Kh1TegIa5rVzRGC
Ts1KPea8gcqaQmWe7DtkFDvrnXLEJEXa4G4Z6x0Aij3gJS1SPRwWq8Xv8nNaxlLh
pb+2zg7rrbBsdzDWeCFlBbUrckkvKZJeo/gQldQzW95YMqRcUkmxAQOOUEIE2RK7
7nCftHpspEstFuBuKsNtsFN9sWEDKFKs2VdHx+bLqlO1T3Vj5NdbRG7LGaFMP01g
EF9881oM18xYjO4HylVASIKDJuEuszrVIYNsJn99c3dBckI97AXGWigaPOtMTp0E
pVIVQQf3763B2AyjPSqPGl4pUhVxDG3mCJvMZuMCAwEAAaOCAjkwggI1MB0GA1Ud
DgQWBBR4Y1wIe/m09Gyyf8jskKhMDfgACDAfBgNVHSMEGDAWgBRUkUVB/RuV58Cv
yHX773h5T1U4azAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ZKRkZRZjBibGVmQXI4aDEtLTk0ZVU5Vk9Hcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGEvNDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8x
L2VHTmNDSHY1dFBSc3NuX0k3SkNvVEEzNEFBZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEv
NDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8xL1ZKRkZRZjBibGVm
QXI4aDEtLTk0ZVU5Vk9Hcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBP
BggrBgEFBQcBBwEB/wRAMD4wPAQCAAIwNgMHBCoGoAUA4AMHBSoGoAUCQAMHBCoG
oAUEAAMHBCoGoAUGwAMHBCoGoAUHMAMHBCoGoAUHUDANBgkqhkiG9w0BAQsFAAOC
AQEANpKZSWjQLojFxryPLnRaZdq6Tb+yHleyMSxK2Clb91EjZY8yEyYjyyTZai3p
Ah9Fa4JFOKkuSLiihHCVviw6b6kDk7WDwMetE+Hw7aNFHkUnEYE00gEW3tlodadw
MsPxfLNix0sbJN7l2Ae8lVaTmMSTa8oaHtDfATx2o2g2Iv4hKzhD7bo3NEjHZZsz
Rm9YuC6tytTh5mAcqymgnfRth5MhgOVuYJyNU6ZBiUvvJpOvt5NWs+LRz6IuhYwC
o2LIrx0f4KoDB5hMD0+JV5C4iODVzXO3uSFJlC+O6GG/E4Jf9+v+x8mbrfILtkF3
BHbhw9C03lGQxhRLP/4whLvX3w==
-----END CERTIFICATE-----
Generated at Fri Apr 18 09:54:12 2025 by rpki-client