Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/grUbTQz61zOFXzLXxemAtWkFoKc.roa
File: grUbTQz61zOFXzLXxemAtWkFoKc.roa (raw, json)
Hash identifier: HXUOPVG4SMxbpXS2hHBs7X7HS2ChoDQALnrGtT6JHFo=
Subject key identifier: 82:B5:1B:4D:0C:FA:D7:33:85:5F:32:D7:C5:E9:80:B5:69:05:A0:A7
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01835BC7001DFD41E25C257C7B576826C20E
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/grUbTQz61zOFXzLXxemAtWkFoKc.roa
Signing time: Tue 20 Sep 2022 16:41:51 +0000
ROA not before: Tue 20 Sep 2022 16:41:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213327
IP address blocks: 2a06:a005:1272::/48 maxlen: 48
2a06:a005:1c7b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:5b:c7:00:1d:fd:41:e2:5c:25:7c:7b:57:68:26:c2:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Sep 20 16:41:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=82b51b4d0cfad733855f32d7c5e980b56905a0a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:62:1c:26:b5:7f:43:96:ac:6a:35:2a:7e:58:
bf:b3:17:d1:73:58:10:e8:f2:1a:51:a5:eb:17:fb:
1f:14:b5:e0:ae:81:be:6d:7c:02:41:c5:0b:80:48:
c7:bc:01:d6:56:30:5c:71:53:2b:f8:76:22:f9:6b:
11:a7:51:76:57:63:6d:2a:cc:ba:2a:b1:ef:cd:b1:
42:03:c8:cb:ae:b0:5d:5f:18:a4:1a:b2:56:87:87:
d3:de:f0:77:c3:1a:ec:16:3a:b9:b5:b6:37:0a:23:
0a:fc:0e:22:ed:73:08:6d:1f:9d:89:da:75:39:42:
7c:2a:90:b1:3a:12:32:03:0d:7e:75:5b:78:f9:5a:
ac:c6:eb:a3:68:cf:02:09:fd:33:ca:cf:dc:7b:5d:
50:da:15:07:72:c1:3d:12:9a:ab:c4:71:93:5a:bb:
80:e0:bc:eb:06:3d:37:d1:28:1d:47:ef:c9:ba:58:
6e:6d:91:74:40:98:25:b8:42:b0:af:11:77:e7:b2:
b6:9d:7e:8f:27:26:5a:37:a4:03:96:8e:f1:16:ee:
7b:35:0f:70:e3:8e:fb:a5:f7:9c:3d:b2:8c:14:3c:
b4:ba:2b:3f:0f:1e:98:6c:9e:39:0f:5b:e3:80:25:
90:d6:bf:86:75:c7:84:1f:5d:21:c9:a4:e7:53:59:
f8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:B5:1B:4D:0C:FA:D7:33:85:5F:32:D7:C5:E9:80:B5:69:05:A0:A7
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/grUbTQz61zOFXzLXxemAtWkFoKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1272::/48
2a06:a005:1c7b::/48
Signature Algorithm: sha256WithRSAEncryption
9e:db:c8:3e:39:23:2b:12:41:17:26:d3:7d:c7:a6:bc:94:42:
96:d1:a8:b0:3a:90:33:69:27:b2:ba:cf:98:4f:35:4d:9f:bb:
38:d0:64:cc:59:53:cf:46:c0:57:1c:24:c3:f8:99:6f:2d:8f:
cd:63:73:3f:13:61:4d:d8:f0:3f:ac:0b:df:65:ac:15:ee:89:
d4:0a:59:63:98:0d:0d:34:56:20:20:e9:d1:c2:5a:56:81:38:
69:c9:23:25:3b:e8:e1:7b:81:cd:40:ef:f0:32:a0:27:b0:93:
3e:08:cb:ce:63:80:5f:f6:81:5c:05:da:6d:d5:41:46:ca:12:
2a:6a:f0:6e:fc:9f:d3:dc:62:8f:4f:95:1b:a7:a2:10:a3:85:
b4:3e:cb:c8:47:7f:7c:e4:ad:f9:af:3a:7b:ab:64:b7:cf:ba:
5c:cf:41:55:c7:db:3a:d7:14:df:55:3b:ee:84:dd:1b:d4:a0:
7d:93:d0:c9:f8:f8:06:1a:69:d1:91:43:4b:f0:61:9d:89:eb:
df:be:23:0c:cb:76:1a:31:10:65:b3:ef:85:1a:fa:ba:43:78:
4d:fa:f9:f8:1e:75:39:98:f5:24:bc:9e:81:d2:5e:89:8a:e6:
2b:62:06:a4:3a:6b:61:44:64:24:d8:61:e1:ef:f6:4e:4a:01:
fc:aa:11:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 09:59:30 2025 by rpki-client