Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/faRKIkYd8Vj3D8YMF68kg-AIjFE.roa
File: faRKIkYd8Vj3D8YMF68kg-AIjFE.roa (raw, json)
Hash identifier: eXFjTfqYQ6gIcDPZw0kaJr79EWmijUVmT6P7Wvi1vhk=
Subject key identifier: 7D:A4:4A:22:46:1D:F1:58:F7:0F:C6:0C:17:AF:24:83:E0:08:8C:51
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01833130E2BEDE9316AFFAFF7A44B7472257
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/faRKIkYd8Vj3D8YMF68kg-AIjFE.roa
Signing time: Mon 12 Sep 2022 10:13:50 +0000
ROA not before: Mon 12 Sep 2022 10:13:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44570
IP address blocks: 2a06:a004::/32 maxlen: 48
2a06:a000::/32 maxlen: 48
2a06:1280:1000::/36 maxlen: 48
2a06:a005::/32 maxlen: 48
2a06:a005:a::/47 maxlen: 48
2a06:a005:5::/48 maxlen: 48
2a07:54c2:b00b::/48 maxlen: 48
2a06:a005:6::/48 maxlen: 48
2a06:a005:5ab::/48 maxlen: 48
2a06:a005:4::/48 maxlen: 48
2a06:a003::/32 maxlen: 48
2a06:a005:1730::/44 maxlen: 48
2a06:a005:1bc0::/44 maxlen: 48
2a06:a005:1b40::/44 maxlen: 48
2a06:a005:43d::/48 maxlen: 48
2a06:a005:5ae::/48 maxlen: 48
2a05:dfc7:1300::/40 maxlen: 48
2a06:a005:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:31:30:e2:be:de:93:16:af:fa:ff:7a:44:b7:47:22:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Sep 12 10:13:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7da44a22461df158f70fc60c17af2483e0088c51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:27:51:aa:54:e7:87:49:51:ca:4d:ba:53:5a:
56:b2:3c:ba:b5:90:ff:37:2a:82:05:8f:a1:a4:cc:
c6:1b:3e:8a:42:aa:1d:7b:e8:72:a9:05:da:39:4a:
0c:a6:41:ca:90:20:11:39:0a:48:ef:7f:d5:c4:87:
ee:8c:2e:a9:c4:1f:d2:bf:17:7c:2a:8b:36:fe:f5:
da:0a:01:2a:bb:1a:1d:3c:52:98:d9:1f:06:a2:e8:
51:85:01:75:a8:d1:4f:26:06:1f:95:95:1a:f1:7c:
d1:78:29:c8:10:ae:0d:5a:0b:ee:d0:15:41:90:60:
fc:dd:16:ff:00:9d:87:74:d4:cb:d5:ed:aa:99:2f:
cc:d0:09:c3:e9:49:95:fc:75:01:fb:72:3b:b1:23:
cc:2f:2d:7c:26:25:0a:25:68:b5:76:79:db:eb:1f:
f4:d8:ba:ea:65:05:b6:a4:3f:76:36:55:53:07:78:
07:a0:d6:4a:b9:5c:56:3e:14:a9:6d:38:04:bd:1c:
50:d2:ac:bb:6b:25:16:86:6f:c1:a1:4f:19:54:fb:
ec:04:83:9d:7b:7b:8b:6d:07:76:a1:a6:19:37:13:
11:a0:13:37:46:1f:8b:8b:3d:da:8a:7a:16:7e:58:
b8:fa:c7:e8:8a:47:bb:c0:f6:2d:dd:16:8f:44:7d:
82:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:A4:4A:22:46:1D:F1:58:F7:0F:C6:0C:17:AF:24:83:E0:08:8C:51
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/faRKIkYd8Vj3D8YMF68kg-AIjFE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc7:1300::/40
2a06:1280:1000::/36
2a06:a000::/32
2a06:a003::-2a06:a005:ffff:ffff:ffff:ffff:ffff:ffff
2a07:54c2:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
0a:a7:73:80:9e:dd:8c:28:32:ac:3f:87:07:ec:dd:75:7c:93:
53:3d:c1:5c:93:c5:61:01:94:be:90:24:57:72:27:98:c1:af:
6a:04:8b:07:5a:25:32:2b:d1:9e:fb:83:75:15:a3:73:78:b4:
81:a8:5f:40:54:cc:c7:9b:13:56:50:e4:3a:7a:d0:bf:07:76:
37:fa:c5:ff:ac:cb:bd:de:76:63:c0:5c:60:82:f3:3c:83:70:
ad:99:6a:28:0c:6e:68:6d:53:00:2b:2f:51:67:c7:e3:66:a3:
89:14:aa:be:e1:0d:9c:e5:a0:96:32:14:14:d6:57:b0:8a:4e:
0c:72:ca:8d:74:12:71:da:eb:a1:b5:2f:14:83:c7:25:8e:18:
72:42:86:ee:30:72:53:27:02:25:95:68:5f:51:7b:b2:7b:4f:
5e:1a:e5:f1:73:42:73:80:eb:a9:06:ac:68:24:56:19:e3:df:
88:71:06:7f:b5:2b:25:da:84:e0:98:be:bb:57:e5:2c:ce:43:
4c:36:76:2d:ff:40:7d:45:e7:36:53:0f:b4:05:5b:d7:ad:13:
00:16:14:f2:fe:1f:8f:24:05:ac:9c:cf:cd:30:56:4b:44:b7:
51:e0:3f:e5:90:98:48:9c:12:31:a3:7f:46:2e:43:3b:58:21:
a0:1d:e9:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 18:12:27 2025 by rpki-client