Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/j7tyRWo2wWz6bk5C6kCn0vA2mnI.roa
File: j7tyRWo2wWz6bk5C6kCn0vA2mnI.roa (raw, json)
Hash identifier: OE8xjB6TxxlSiTXC50S0AGbY0uOQgEfLq+eYUyPbzek=
Subject key identifier: 8F:BB:72:45:6A:36:C1:6C:FA:6E:4E:42:EA:40:A7:D2:F0:36:9A:72
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0184F00C303C8E63CE39DE77340867487B99
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/j7tyRWo2wWz6bk5C6kCn0vA2mnI.roa
Signing time: Thu 08 Dec 2022 04:44:01 +0000
ROA not before: Thu 08 Dec 2022 04:44:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203888
IP address blocks: 2a06:a005:150a::/48 maxlen: 48
2a06:a005:d22::/48 maxlen: 48
2a0a:6040:300::/40 maxlen: 48
2a06:a005:2480::/44 maxlen: 48
2a06:a005:b60::/44 maxlen: 48
2a06:a005:d80::/44 maxlen: 48
2a06:a005:24b0::/44 maxlen: 48
2a07:54c2:b00b::/48 maxlen: 48
2a06:a005:1166::/48 maxlen: 48
2a05:dfc7:6400::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f0:0c:30:3c:8e:63:ce:39:de:77:34:08:67:48:7b:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Dec 8 04:44:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8fbb72456a36c16cfa6e4e42ea40a7d2f0369a72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a3:34:33:80:1a:2d:38:a9:02:55:0c:a8:0c:
ae:49:d3:01:07:a2:d2:fe:c3:77:df:b1:b0:b0:19:
22:c1:18:80:0f:07:41:db:78:e1:53:34:9b:7f:f9:
e3:f9:52:0c:e9:14:0d:b1:c9:cd:64:61:3d:4a:45:
79:63:ab:66:db:36:1a:57:1f:69:bd:b5:10:7f:d5:
d6:98:45:00:0c:8b:4a:92:e3:69:6e:eb:c1:3a:46:
f8:03:53:c9:24:d2:25:57:cf:76:04:04:e4:aa:1b:
d8:75:bb:50:6d:14:2a:50:79:f1:60:5b:ce:02:ca:
c0:58:ae:16:fb:e2:af:36:ee:09:fd:3e:ef:44:ba:
13:e1:b5:8a:64:28:6f:41:b3:bf:e8:43:2b:b4:05:
ff:34:13:87:90:59:dd:a1:c9:c1:81:6a:2d:ec:9e:
fa:1e:e2:09:42:89:0d:f7:ab:ea:2b:c7:54:21:d1:
06:96:35:30:ec:bf:f0:e6:91:1a:ec:d2:f0:b6:6c:
6b:09:6c:8e:69:cd:96:5a:8b:2e:29:e3:fb:de:2d:
e9:5e:cf:22:b4:82:6b:46:11:18:cb:09:53:cb:1d:
53:46:ea:47:8d:b6:0c:6e:71:1d:f9:4d:de:f1:c1:
2a:97:a9:9d:5c:97:8b:a6:8e:19:5f:b9:59:b7:ab:
60:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:BB:72:45:6A:36:C1:6C:FA:6E:4E:42:EA:40:A7:D2:F0:36:9A:72
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/j7tyRWo2wWz6bk5C6kCn0vA2mnI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc7:6400::/40
2a06:a005:b60::/44
2a06:a005:d22::/48
2a06:a005:d80::/44
2a06:a005:1166::/48
2a06:a005:150a::/48
2a06:a005:2480::/44
2a06:a005:24b0::/44
2a07:54c2:b00b::/48
2a0a:6040:300::/40
Signature Algorithm: sha256WithRSAEncryption
6f:d8:97:2f:a0:01:0c:ab:6c:8e:7e:45:b4:23:d6:37:52:74:
59:4c:79:af:45:23:1e:da:40:2b:27:08:44:c3:ee:b3:58:d0:
32:bc:0d:48:c8:4d:e4:ab:cc:6d:da:54:11:66:57:61:0c:4e:
a2:12:fb:a6:8b:c2:67:e7:31:6b:24:82:d8:ed:f5:7d:42:27:
81:c7:2c:2d:b6:7a:fb:a6:42:08:f0:9c:6f:49:fc:a2:ed:83:
fb:5f:87:4d:af:ee:04:c3:58:d6:01:65:48:6f:7f:6c:c9:c8:
71:d6:fb:2a:52:18:1e:40:57:b1:bb:a9:18:4a:39:97:98:07:
82:19:d0:bc:01:a0:31:5e:b8:1d:21:65:4b:63:e8:0a:94:88:
aa:b3:a0:9f:c5:8e:e2:13:38:74:d2:47:13:56:ae:bd:17:12:
fa:2a:17:44:db:84:67:ba:d9:fe:b9:46:7c:26:f9:b6:1a:d4:
96:6a:81:1a:20:79:7f:ea:8a:17:00:af:85:ff:a5:c1:7a:ed:
f1:c6:b8:39:41:33:8e:7e:32:5b:5c:43:d9:a5:0a:d6:fb:ee:
71:93:63:2e:c7:cd:f8:92:76:8b:9e:15:ec:36:07:39:52:9c:
9f:28:fa:bd:a5:27:70:ad:85:15:99:46:e4:7d:75:b9:da:40:
eb:31:cf:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 09:58:10 2025 by rpki-client