Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/lB4oOHOqrbcBAHTtp_YOGIWV2f8.roa
File: lB4oOHOqrbcBAHTtp_YOGIWV2f8.roa (raw, json)
Hash identifier: 3Mvr/A/BMuhmlySYVeorSal2mfcKtxMrls6U3TNYhjk=
Subject key identifier: 94:1E:28:38:73:AA:AD:B7:01:00:74:ED:A7:F6:0E:18:85:95:D9:FF
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0183D92F804E53C5F52FD11DA20AAD255871
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/lB4oOHOqrbcBAHTtp_YOGIWV2f8.roa
Signing time: Sat 15 Oct 2022 01:08:32 +0000
ROA not before: Sat 15 Oct 2022 01:08:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207341
IP address blocks: 2a07:54c2:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d9:2f:80:4e:53:c5:f5:2f:d1:1d:a2:0a:ad:25:58:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Oct 15 01:08:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=941e283873aaadb7010074eda7f60e188595d9ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:d4:2b:ed:95:ce:87:72:b9:87:cc:f4:1c:51:
90:70:0c:de:40:39:9a:28:85:2b:71:8b:c3:fb:dd:
66:9d:8c:fc:60:21:f2:6a:d1:c1:b1:ce:e3:d3:0b:
16:e3:a0:c1:16:74:f5:92:5d:de:9e:32:5b:1b:ea:
b9:90:9d:28:9b:66:b5:eb:e7:ca:1a:53:e1:96:0d:
07:da:84:e6:fd:c6:68:aa:0c:02:fd:8a:69:6a:4b:
a3:46:78:b4:ae:c0:66:bb:dd:10:91:0d:f1:e2:aa:
42:49:3a:bd:f4:bd:b5:6e:b4:58:aa:b4:83:67:53:
29:43:e1:45:05:a5:e7:86:98:d9:52:2b:1d:a7:54:
23:76:9f:d1:9c:21:1f:50:4e:35:f8:e7:36:2d:d4:
d1:8a:ea:29:a3:c7:b8:ac:ba:48:ff:3f:8d:dd:ff:
5d:73:8a:bd:24:0e:89:d6:43:88:a9:2e:8c:43:42:
7f:94:a3:a8:e7:bb:71:00:77:08:4b:ea:d5:6c:a0:
3f:a8:25:e8:64:e4:ac:94:c2:e1:e9:ec:f8:8f:a4:
54:fe:6c:b4:23:4b:c9:79:10:54:ed:a4:9d:21:a6:
46:e6:06:cf:77:11:8c:6d:ea:ef:41:43:53:0b:fb:
fe:73:ed:62:ee:9c:b4:2a:64:f7:0b:b9:6d:67:72:
be:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:1E:28:38:73:AA:AD:B7:01:00:74:ED:A7:F6:0E:18:85:95:D9:FF
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/lB4oOHOqrbcBAHTtp_YOGIWV2f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:54c2:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
3c:07:d7:a0:ae:40:41:bf:44:b1:c7:64:1a:10:6b:84:8a:e5:
7c:d0:ad:71:0e:19:27:50:bd:1e:23:07:19:a3:80:53:8d:9d:
b4:e8:b0:1d:b6:e5:b9:15:b7:6c:50:8f:fd:0b:6c:41:10:da:
c1:5c:52:e1:c5:5e:10:5a:cf:dd:c8:45:bb:57:9a:31:3e:a2:
87:62:b5:1e:4d:33:12:bc:6d:81:d9:84:fd:70:ff:11:a3:fd:
0f:16:f5:c1:36:df:dd:b5:4c:24:c6:33:24:4b:90:1b:9a:d9:
17:fe:ba:35:fa:be:7f:aa:45:12:02:56:81:59:83:58:6b:01:
38:86:cb:e0:4c:44:e1:23:a5:09:c3:55:84:57:14:38:9a:b7:
e2:7d:16:2a:ab:0d:f9:f4:d9:a1:14:5f:31:c0:51:d1:4f:cf:
4b:2c:4b:77:4e:24:44:e6:e6:98:24:23:2e:19:b9:90:d5:8a:
f3:6b:42:7d:99:14:73:d6:e1:fd:67:41:a3:4e:eb:8a:ff:a5:
38:54:86:31:b8:30:67:ba:80:0a:bb:50:e5:eb:a9:bb:18:70:
7a:6f:fb:9c:32:a0:f8:4f:9b:42:09:f4:fe:62:fe:a8:05:20:
21:03:9d:9e:39:9a:03:c7:64:33:fc:e9:5d:60:55:d3:19:84:
ad:e3:04:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 09:59:37 2025 by rpki-client