Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/r0qgwwuhQBZ0z1X3jxRHjeM45NE.roa
File: r0qgwwuhQBZ0z1X3jxRHjeM45NE.roa (raw, json)
Hash identifier: lVvurNuPPjd5SJwQOEKZW3f9kHcpOuVW6EESJRl0dp4=
Subject key identifier: AF:4A:A0:C3:0B:A1:40:16:74:CF:55:F7:8F:14:47:8D:E3:38:E4:D1
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01824F8B46FCF0FA598619D0D4652F583B35
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/r0qgwwuhQBZ0z1X3jxRHjeM45NE.roa
Signing time: Sat 30 Jul 2022 14:38:23 +0000
ROA not before: Sat 30 Jul 2022 14:38:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203597
IP address blocks: 2a06:a005:1580::/44 maxlen: 48
2a06:a005:1560::/44 maxlen: 48
2a06:a005:1590::/44 maxlen: 48
2a06:a005:1570::/44 maxlen: 48
2a06:a005:15a0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:4f:8b:46:fc:f0:fa:59:86:19:d0:d4:65:2f:58:3b:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jul 30 14:38:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=af4aa0c30ba1401674cf55f78f14478de338e4d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:79:9d:7e:1e:22:f6:df:98:58:3d:7d:a0:af:
20:fa:04:ee:72:f5:aa:34:52:45:c3:f6:88:99:30:
39:55:74:39:ed:b4:19:65:1b:af:6d:d9:5e:b2:03:
1f:14:83:3b:18:ad:9d:ca:64:d6:b8:a9:a8:39:d0:
b0:67:ed:54:bb:6d:85:9b:2a:55:ce:73:32:85:c0:
a9:c1:cb:bc:a6:5d:2d:12:b4:d1:7d:06:6a:47:e7:
e3:20:8b:88:89:ee:19:14:27:3c:c3:b8:b5:43:52:
a1:05:e1:93:11:15:c9:61:f2:bd:4b:ae:af:61:63:
0a:5d:0d:af:19:29:73:34:cd:5e:36:1e:27:58:8e:
ca:1b:54:24:3a:0e:07:3e:d3:80:a7:f3:f3:76:2f:
bd:16:9d:fc:4b:b8:2b:28:b4:4b:8e:b5:b8:f5:7f:
78:b5:43:32:39:91:a2:e6:ab:15:0c:9b:48:17:7d:
57:9d:e8:f1:bc:fa:18:40:cd:3a:b9:6f:ba:ae:f2:
63:c9:0b:8c:1c:cc:85:e7:7f:e7:77:cc:a1:13:6e:
d8:6e:d1:82:8f:42:48:6d:71:5a:b2:54:8c:78:3f:
bf:ed:4a:54:d3:34:36:4e:fb:20:91:4f:f0:c9:38:
54:cd:21:02:21:66:f3:1b:58:34:ce:04:71:1f:f8:
c1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:4A:A0:C3:0B:A1:40:16:74:CF:55:F7:8F:14:47:8D:E3:38:E4:D1
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/r0qgwwuhQBZ0z1X3jxRHjeM45NE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1560::-2a06:a005:15af:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
00:20:ce:e3:bd:12:9f:78:bb:1a:cd:49:58:4f:4b:c4:33:9c:
21:3a:64:32:88:91:ff:34:c7:ed:bd:e4:2b:3e:3c:2e:4a:97:
2b:30:a9:69:0f:80:37:d5:70:74:fe:b2:2e:be:39:e6:74:27:
e1:22:ae:b0:68:ea:63:37:02:d5:40:0f:0a:5e:57:12:cf:46:
ee:93:05:6e:28:33:42:a6:df:f1:0d:82:24:34:63:41:8c:3e:
81:b1:34:be:19:9f:8e:87:21:34:f3:24:e1:6c:1b:71:2a:cf:
18:16:eb:f0:ac:6a:2e:4e:50:95:54:09:5b:64:e1:90:d7:7e:
c8:43:70:6e:5e:43:bc:5e:42:96:b7:ab:76:bc:5c:3d:78:ec:
ac:03:41:fb:af:6c:55:db:1a:a6:ff:d6:9e:58:81:eb:ce:ff:
32:87:ea:5b:e3:08:8d:2e:17:95:0d:d1:91:ce:14:8a:e0:83:
31:26:be:12:39:2a:03:a4:4b:78:ea:aa:7a:40:f6:29:9b:86:
52:bb:34:6a:50:3c:6d:48:8a:2a:8b:de:b4:80:25:10:b0:47:
4e:1b:3f:8b:43:6b:f0:fc:47:59:b2:47:93:ae:e2:3a:4e:0b:
83:f8:17:a1:b5:63:20:25:04:bb:2b:7d:93:11:5e:a6:67:9d:
b7:1e:3c:f6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Apr 23 03:10:35 2025 by rpki-client