Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/oOZ5pwmfjrM-RzBrQExTzP517Gc.roa
File: oOZ5pwmfjrM-RzBrQExTzP517Gc.roa (raw, json)
Hash identifier: 4VDR48MuP0gpVyvdr16q3K0t7TIPPUvADyfGKNFVnoA=
Subject key identifier: A0:E6:79:A7:09:9F:8E:B3:3E:47:30:6B:40:4C:53:CC:FE:75:EC:67
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0183DC7635CA461B878799CADD086D319661
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/oOZ5pwmfjrM-RzBrQExTzP517Gc.roa
Signing time: Sat 15 Oct 2022 16:24:38 +0000
ROA not before: Sat 15 Oct 2022 16:24:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202828
IP address blocks: 2a06:a005:43c::/48 maxlen: 48
2a06:a005:baf::/48 maxlen: 48
2a06:a005:17a0::/44 maxlen: 48
2a06:a005:2dd::/48 maxlen: 48
2a06:a005:bae::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:dc:76:35:ca:46:1b:87:87:99:ca:dd:08:6d:31:96:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Oct 15 16:24:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a0e679a7099f8eb33e47306b404c53ccfe75ec67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ad:e6:92:32:52:3b:0a:c5:f4:32:26:1c:98:
07:4f:2e:88:7b:86:35:53:13:b1:32:41:c7:8b:a1:
7c:1b:8d:43:cf:d3:35:34:49:76:d6:4a:ba:ae:a7:
10:c9:8d:eb:12:f7:be:3b:74:ba:58:63:10:c2:89:
c3:46:2e:1f:ff:7e:b9:9e:a3:25:04:9d:01:2b:3c:
3a:90:c1:64:10:a0:d1:3b:1c:79:fa:ec:40:8e:30:
31:26:4b:0e:ee:76:f3:0b:56:19:32:6e:f0:37:0a:
70:ed:48:ef:90:e6:a9:04:85:24:78:3c:35:01:b3:
93:bf:97:fa:eb:6f:52:8e:24:0c:6f:64:be:ba:28:
f9:86:50:c2:de:16:d4:3f:16:aa:32:1c:61:ce:45:
0c:41:99:7c:c0:57:4b:91:bd:8d:3f:b1:4f:97:c8:
e8:7e:c4:e1:20:53:6e:80:0c:a8:6f:21:25:40:fc:
01:25:3a:8a:43:77:f9:d0:a7:a2:65:5c:46:99:78:
0e:ec:70:65:ca:d4:1a:7c:77:e2:c4:a7:59:e4:10:
0d:f5:d1:62:02:02:d1:ae:14:d8:5f:76:36:08:ce:
5c:85:aa:9e:14:93:c6:cf:fb:7f:12:6b:99:96:34:
63:f2:b2:5a:62:85:31:7a:e4:25:15:19:fb:79:b0:
3e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:E6:79:A7:09:9F:8E:B3:3E:47:30:6B:40:4C:53:CC:FE:75:EC:67
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/oOZ5pwmfjrM-RzBrQExTzP517Gc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2dd::/48
2a06:a005:43c::/48
2a06:a005:bae::/47
2a06:a005:17a0::/44
Signature Algorithm: sha256WithRSAEncryption
52:f5:80:c8:c8:8e:c5:36:f3:0c:5c:a6:d2:c5:7b:b8:dc:b7:
46:a1:a6:bc:aa:ad:29:23:41:bd:51:50:a8:d5:53:c9:2d:1c:
02:39:0d:97:c0:2d:1d:99:82:86:61:75:f3:d5:a2:01:da:2e:
3e:9a:19:1a:5e:9e:27:03:2b:40:e9:01:30:d4:03:d1:ec:43:
6c:23:cb:55:4d:a0:14:50:94:b7:e6:fe:51:54:e8:e5:79:54:
a5:93:68:ad:92:93:fa:65:87:34:32:ef:62:7b:03:50:dd:f2:
cf:e5:45:ca:e8:5f:b7:6a:af:56:38:00:64:c6:cc:91:4a:b3:
73:87:44:35:9f:ee:7d:6f:e8:cf:c8:36:62:7d:9e:de:7c:6c:
2a:13:5c:b1:40:fd:8c:f9:00:2e:21:ee:78:dd:43:16:ef:01:
6c:13:ba:c7:ab:d7:f8:12:5c:cc:b6:9c:4d:30:90:ea:3e:5a:
5e:40:2c:04:7b:88:9d:16:fb:ec:3d:67:c1:1f:e8:44:1a:ce:
2c:2b:c8:6d:90:6a:56:75:51:26:97:0e:8b:5d:c2:19:04:e8:
e5:f5:64:31:e9:20:8c:d6:60:fc:b7:c8:d4:eb:05:09:32:25:
59:b7:5b:1b:d7:f2:3e:82:fa:b5:32:a5:22:23:70:aa:85:4a:
23:a3:cb:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:43:35 2025 by rpki-client