Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/pjtmQ-AJjy1eOZq7sPvFbFkvGnw.roa
File: pjtmQ-AJjy1eOZq7sPvFbFkvGnw.roa (raw, json)
Hash identifier: uGSfZW5bOSvExMI1zsRE9DOTPBrpx/bvE67MZV4uU6E=
Subject key identifier: A6:3B:66:43:E0:09:8F:2D:5E:39:9A:BB:B0:FB:C5:6C:59:2F:1A:7C
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 18CEF702
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/pjtmQ-AJjy1eOZq7sPvFbFkvGnw.roa
Signing time: Wed 27 Apr 2022 07:37:06 +0000
ROA not before: Wed 27 Apr 2022 07:37:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 139328
IP address blocks: 2a06:a005:520::/44 maxlen: 48
2a06:a005:540::/44 maxlen: 48
2a06:a005:530::/44 maxlen: 48
2a06:a005:550::/44 maxlen: 48
2a06:a005:4c0::/44 maxlen: 48
2a06:a005:510::/44 maxlen: 48
2a06:a005:660::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 416216834 (0x18cef702)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Apr 27 07:37:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a63b6643e0098f2d5e399abbb0fbc56c592f1a7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:04:ec:19:03:00:a0:d3:74:cf:b2:ed:5f:f7:
b3:fe:5a:cb:8b:82:39:fa:3e:45:86:8b:b5:ce:1b:
2d:3d:ae:c7:aa:96:51:bb:75:c4:35:c6:14:af:6a:
6d:1a:6d:db:60:e5:47:a2:5b:38:b8:55:81:52:e1:
c7:ba:8e:5e:a6:7e:e0:48:2e:ea:25:48:a5:bc:d6:
b9:b0:8f:01:76:b7:04:94:23:ac:d7:e5:84:a9:bb:
ea:71:59:fc:6c:a1:a6:fd:54:f7:09:db:e7:56:26:
d0:e5:ab:2c:38:43:65:a3:8b:63:ac:8c:b6:95:ac:
a3:d2:21:0d:20:69:13:52:80:dd:e3:8f:ef:bd:71:
40:41:88:98:a4:5f:a7:d7:2e:5a:0d:da:30:0e:9f:
57:66:1f:fc:b8:85:29:b7:28:0d:48:47:62:44:bd:
b1:89:81:1d:92:c0:7d:72:b8:92:2d:99:d1:b5:07:
8e:bc:56:2e:31:87:5c:46:7d:94:c5:7a:5f:e0:7f:
b6:7a:dc:3d:66:be:6f:cf:6e:f6:e1:7f:0e:11:bd:
8b:6c:c1:23:d7:c4:78:b3:90:52:c7:02:64:42:c6:
fd:21:87:48:42:96:2c:c7:5a:91:f8:2b:91:3a:66:
54:0e:67:67:a5:ad:46:58:cd:d1:b3:50:30:1f:9a:
1c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:3B:66:43:E0:09:8F:2D:5E:39:9A:BB:B0:FB:C5:6C:59:2F:1A:7C
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/pjtmQ-AJjy1eOZq7sPvFbFkvGnw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:4c0::/44
2a06:a005:510::-2a06:a005:55f:ffff:ffff:ffff:ffff:ffff
2a06:a005:660::/44
Signature Algorithm: sha256WithRSAEncryption
21:6f:77:0e:61:e7:20:6c:10:c7:2e:66:19:97:cf:4b:67:7a:
71:28:97:4b:cd:a1:db:8a:c5:2d:d4:83:86:22:ae:62:04:cb:
aa:0c:75:65:b6:93:41:05:7d:61:b5:01:50:b0:02:98:5e:ae:
d8:d2:78:c6:ae:8b:52:fd:a8:55:03:c5:f8:2c:af:a0:1a:38:
f2:21:f6:b7:d2:b0:da:6c:ab:e5:d2:ec:36:0c:0a:6e:2b:60:
25:5e:82:2d:85:63:47:f7:a2:88:8d:6c:e7:4d:e7:ad:b7:7f:
b7:c6:84:f4:9e:85:4f:a3:3c:e4:0d:5b:f8:df:26:03:37:64:
09:2c:a6:51:1d:0c:db:06:75:36:fe:f2:df:70:67:89:3f:b4:
76:d8:7c:67:f0:14:e1:f5:9b:62:3f:af:e5:90:d5:83:69:90:
bf:df:3c:7e:b8:29:db:08:2f:76:30:a7:18:45:39:47:5f:0c:
a8:15:82:e9:12:e6:5e:d5:15:35:5b:f8:4d:8a:8a:1d:f9:03:
e0:8f:5d:98:4c:7d:3d:f6:de:66:b5:ec:1b:f5:71:df:68:62:
cc:dd:11:5b:ea:3e:41:21:ec:5e:ca:e7:9c:0f:fb:37:32:5b:
10:a4:87:a3:3f:23:2b:73:b5:8f:85:13:23:3b:44:e6:08:a1:
29:38:29:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 09:59:26 2025 by rpki-client