Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/fhPEumj6TOS9fl6sH4xVBy5n-ho.roa
File: fhPEumj6TOS9fl6sH4xVBy5n-ho.roa (raw, json)
Hash identifier: jsNFkbxkV2VPcQ3P1niBYqN8PrA9+gKPPh+Dnn2MkgE=
Subject key identifier: 7E:13:C4:BA:68:FA:4C:E4:BD:7E:5E:AC:1F:8C:55:07:2E:67:FA:1A
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 17FBAB73
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/fhPEumj6TOS9fl6sH4xVBy5n-ho.roa
Signing time: Tue 12 Apr 2022 09:28:13 +0000
ROA not before: Tue 12 Apr 2022 09:28:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60438
IP address blocks: 2a06:a005:1::/48 maxlen: 48
2a06:a005:2::/48 maxlen: 48
2a06:a005:450::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 402369395 (0x17fbab73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Apr 12 09:28:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7e13c4ba68fa4ce4bd7e5eac1f8c55072e67fa1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a6:55:65:72:42:09:82:28:df:0e:2f:cb:c7:
da:92:b4:b9:2e:02:5c:b2:29:40:67:d2:82:2d:bd:
d0:80:f4:73:1b:97:dc:5a:0c:90:cf:4d:85:b9:f9:
b1:c9:9a:91:c0:a2:bd:cf:f7:ff:03:44:4f:d5:d8:
5b:07:46:17:28:cf:5b:0c:50:82:57:2e:aa:6d:67:
e9:03:ba:d2:f5:4f:05:8a:52:75:64:26:e3:9e:f2:
32:34:82:d9:de:a9:40:08:0c:af:e4:e2:96:2b:d2:
b6:c0:69:33:24:64:4a:f7:2b:39:0d:fb:c0:b5:29:
33:56:be:74:f4:f8:15:a1:e6:c6:e0:3d:b6:28:c7:
bc:51:b5:f7:56:b8:f4:d0:d3:96:1e:f9:86:80:31:
0c:89:c8:80:e1:83:c9:a4:1a:bd:39:d9:1e:6e:11:
1f:d3:09:60:4c:6e:e3:97:1d:81:44:60:c2:ce:3a:
22:8f:48:7b:e7:da:97:e5:f0:a4:d3:b4:f8:fb:64:
5c:a1:52:00:86:e3:65:22:62:fa:c5:be:71:a6:6b:
5c:a5:0a:19:0a:3c:58:45:72:f4:9f:e6:a0:76:54:
01:8a:88:cb:7a:1f:5e:2b:78:36:96:47:db:6f:97:
d5:4b:e0:fc:7a:82:5f:f2:73:a6:ce:0e:ad:8d:70:
1d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:13:C4:BA:68:FA:4C:E4:BD:7E:5E:AC:1F:8C:55:07:2E:67:FA:1A
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/fhPEumj6TOS9fl6sH4xVBy5n-ho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1::-2a06:a005:2:ffff:ffff:ffff:ffff:ffff
2a06:a005:450::/44
Signature Algorithm: sha256WithRSAEncryption
62:31:64:8a:59:26:d7:f0:e2:9f:79:7c:ff:7d:f8:da:0f:74:
92:7d:51:ab:b5:9a:18:88:0e:46:5e:cc:67:6b:ad:24:a5:34:
1e:3b:44:3c:49:9c:f3:91:65:53:e1:5c:48:4e:36:7a:6e:d1:
61:66:ce:07:f6:8e:7a:42:5b:da:7e:51:12:cc:21:78:8c:be:
10:1f:9b:9b:61:a3:73:2f:6b:90:c9:f4:b8:c4:b9:73:43:a6:
91:bf:4f:73:48:ad:28:28:41:f6:dc:e5:a9:bf:8d:08:4f:47:
20:03:ea:2c:6e:84:2f:6a:a1:3d:51:ac:7d:01:b1:a1:da:4e:
18:0e:85:99:f4:ed:e2:59:ad:cb:8c:80:96:c7:b8:c5:87:29:
61:26:aa:a8:80:7c:84:e5:41:a9:96:b8:0f:46:9d:d8:b0:56:
1a:eb:7c:a1:4a:05:46:4a:f0:8c:32:12:c2:d1:72:5e:d1:fe:
bd:a9:1a:7c:a2:32:19:57:c3:83:88:37:a8:6e:12:d9:21:4d:
31:1f:12:54:8e:85:3c:ce:7c:db:38:73:c9:65:f5:94:d3:12:
06:2f:08:a5:ab:9c:45:28:5b:b5:d5:be:42:88:d6:3f:e7:21:
16:2b:db:29:34:90:87:06:c1:fe:98:7b:62:64:81:fc:71:23:
85:ba:c6:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:08:05 2025 by rpki-client