Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/nYwM85RqDbiw1ntCB2K0_V7Nisg.roa
File: nYwM85RqDbiw1ntCB2K0_V7Nisg.roa (raw, json)
Hash identifier: daYOSSJwMMUgD0UmkWHi1YwpEUVebf9iTPIsXBL/x/k=
Subject key identifier: 9D:8C:0C:F3:94:6A:0D:B8:B0:D6:7B:42:07:62:B4:FD:5E:CD:8A:C8
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 177FD7EE
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/nYwM85RqDbiw1ntCB2K0_V7Nisg.roa
Signing time: Tue 29 Mar 2022 02:50:07 +0000
ROA not before: Tue 29 Mar 2022 02:50:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208680
IP address blocks: 2a06:a005:330::/44 maxlen: 48
2a06:a005:310::/44 maxlen: 48
2a06:a005:2f0::/44 maxlen: 48
2a06:a005:320::/44 maxlen: 48
2a06:a005:300::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 394254318 (0x177fd7ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Mar 29 02:50:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9d8c0cf3946a0db8b0d67b420762b4fd5ecd8ac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:52:92:44:ea:f6:da:2c:c2:8c:be:54:f8:fd:
3c:95:a7:fb:54:80:18:ac:d2:c8:f4:57:19:49:6c:
d7:b0:01:64:0c:88:65:f8:21:ff:04:14:a2:c4:62:
c6:ea:d0:13:5e:0b:08:fa:ad:83:31:92:1d:83:ec:
b7:0d:99:bf:ec:5d:86:46:2a:ed:9b:55:ab:92:4d:
60:cf:51:3f:0e:87:a1:ec:31:90:b2:55:83:27:37:
02:f4:88:7b:3d:a3:14:83:df:7e:73:4f:1c:78:ae:
19:80:e0:fe:84:b5:9c:26:e1:b9:ff:15:c0:e6:34:
e7:1f:03:03:3b:df:b3:be:fc:ac:99:6f:38:b3:82:
43:f6:f6:15:e6:ae:7d:85:23:19:f5:5e:27:e4:4a:
2a:bb:65:78:7b:be:cc:9c:14:29:45:ea:33:61:6d:
90:a9:97:5f:0a:ef:07:67:4c:ef:64:65:64:9b:6f:
ba:13:fb:aa:ac:f6:f2:ea:96:de:aa:58:c1:72:0f:
00:9d:b5:7f:b3:d0:b4:5e:a9:7c:e8:c2:09:ef:f7:
80:ba:fc:53:8a:d6:cc:52:b0:b4:9a:a4:c2:61:08:
fd:6a:e9:b0:cc:c1:37:26:fe:06:4b:e6:48:14:a5:
33:7f:37:45:31:65:be:dc:ce:79:59:9f:17:de:51:
fa:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:8C:0C:F3:94:6A:0D:B8:B0:D6:7B:42:07:62:B4:FD:5E:CD:8A:C8
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/nYwM85RqDbiw1ntCB2K0_V7Nisg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2f0::-2a06:a005:33f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
07:2c:4a:92:e7:8e:20:42:d6:88:fc:90:7d:ee:07:fa:93:05:
f7:45:36:62:29:e5:6e:fa:46:8a:b5:69:0f:77:01:3f:d3:d1:
d4:7f:b5:ec:90:e1:12:4d:30:29:bc:34:75:1f:ef:b6:47:f5:
de:81:8b:62:84:f0:61:57:39:45:36:e4:24:3c:93:9d:82:48:
05:62:28:88:78:ee:42:a6:67:93:98:63:da:48:b5:8b:d1:70:
ac:4b:21:4c:98:81:df:d3:b3:ca:da:a3:20:4c:3a:63:44:f5:
55:73:3f:62:a0:55:bb:d4:b9:95:3a:6c:be:87:86:e9:c7:20:
9b:5b:3b:f0:e9:a1:57:eb:3a:ab:fd:51:28:c2:db:8a:06:fd:
f2:70:47:39:3a:d1:63:3a:60:5f:0f:ed:13:a6:7a:8d:b9:9e:
67:39:76:0b:86:b0:ab:c8:a5:5d:d2:4a:d6:90:63:45:f9:42:
72:0a:fe:07:97:51:1a:71:14:77:54:a4:43:fa:cb:6e:27:e5:
68:a8:bd:12:9c:9c:16:15:49:d3:0d:d0:0c:66:3c:4a:66:88:
ee:8b:00:cf:8c:b6:2b:77:45:34:e5:54:9f:a5:ae:f4:60:35:
d6:f0:03:44:60:66:fb:58:49:f0:3d:94:f2:ae:f0:11:2b:e5:
1b:c7:9c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:18:40 2025 by rpki-client