Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/oG4QHJfHro7-SDKpv0gdrdVYOTI.roa
File: oG4QHJfHro7-SDKpv0gdrdVYOTI.roa (raw, json)
Hash identifier: WzDjgfRADPTbIP2epbIhNguSk/5bWCjLjE5yHTEOiMs=
Subject key identifier: A0:6E:10:1C:97:C7:AE:8E:FE:48:32:A9:BF:48:1D:AD:D5:58:39:32
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01840BC2EB1C3066AD36927733CCD8EAA7E0
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/oG4QHJfHro7-SDKpv0gdrdVYOTI.roa
Signing time: Mon 24 Oct 2022 20:50:34 +0000
ROA not before: Mon 24 Oct 2022 20:50:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211535
IP address blocks: 2a06:a005:1670::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:0b:c2:eb:1c:30:66:ad:36:92:77:33:cc:d8:ea:a7:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Oct 24 20:50:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a06e101c97c7ae8efe4832a9bf481dadd5583932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:93:8b:75:5a:24:de:11:80:1a:81:55:42:35:
a6:c5:68:af:e2:fe:ba:27:85:b1:f8:70:98:4d:97:
54:76:d2:33:7d:eb:2f:aa:e9:0e:fc:dd:ac:82:03:
2e:31:b7:b3:8e:fb:eb:cb:8b:35:93:a4:48:43:ea:
2a:c1:30:81:3f:82:28:7a:b8:b4:0d:96:b3:d2:e4:
1b:95:2f:aa:48:2e:73:e8:50:55:d3:77:fc:a2:04:
88:1d:5b:40:b9:e7:e0:f1:61:e7:26:b3:00:94:62:
ed:3a:3d:2e:72:91:8d:94:e7:f9:1f:64:26:89:82:
01:6e:a3:3d:9f:e1:f5:6f:e8:17:c2:c9:4c:91:6b:
6a:cb:c5:d8:59:82:78:33:e1:af:4f:d3:cb:c2:20:
02:88:2e:91:06:c1:c4:cf:43:03:1f:36:27:8f:b7:
97:d6:85:36:1a:03:38:c3:cc:e5:4a:1d:24:bd:14:
ac:a5:64:b0:e8:4f:76:44:92:61:69:d7:28:0d:b6:
bf:11:f9:7d:d7:46:17:28:ae:23:8b:07:c8:08:cd:
ce:3e:41:64:69:a5:7b:a1:97:76:d8:14:ee:bd:46:
cb:09:78:0b:0a:05:46:64:33:bc:b6:67:6a:52:bc:
77:fa:2f:e5:83:a2:68:bf:bd:68:fc:cd:73:16:b8:
31:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:6E:10:1C:97:C7:AE:8E:FE:48:32:A9:BF:48:1D:AD:D5:58:39:32
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/oG4QHJfHro7-SDKpv0gdrdVYOTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1670::/44
Signature Algorithm: sha256WithRSAEncryption
75:91:c9:62:69:9f:89:1c:6a:95:5f:8a:43:8f:d6:ec:c3:3d:
70:0b:ca:97:9f:28:93:66:91:c7:35:9c:f4:8c:60:19:f9:19:
85:63:45:76:9a:5e:cb:0c:ad:b9:52:62:fc:a1:fa:c6:54:b7:
77:78:7a:1c:66:f8:6f:3d:8d:bf:1b:05:45:76:3f:fb:bc:50:
dc:67:69:82:f9:57:ff:4c:89:8b:5b:cb:28:01:f8:d3:0d:56:
7f:c6:5f:26:21:22:c1:5b:6c:9f:cd:95:f1:60:92:61:8c:dc:
64:87:dd:bc:49:7f:b0:bb:2a:bd:9c:80:ad:4d:41:52:4d:0b:
0f:04:76:50:0d:04:0f:d6:83:7d:80:28:69:56:90:db:d8:4f:
b6:ca:e9:9f:c1:a2:62:de:06:80:da:0c:57:ed:95:6c:14:4b:
db:02:3d:fc:78:65:dd:a2:bd:06:ee:1d:15:65:42:c6:f5:f5:
28:b6:91:ab:b6:c5:1f:ac:ea:63:c1:4e:2d:42:2a:31:24:a6:
ae:39:c4:df:2c:61:f7:ff:c3:52:ad:55:33:b0:c0:9c:3f:d9:
c9:69:c1:d9:d9:fc:0b:81:7b:38:45:02:55:8e:be:b4:af:ad:
76:19:ac:77:a0:42:07:c8:dc:5d:97:6b:95:b0:07:8b:39:10:
61:33:61:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 09:49:38 2025 by rpki-client