Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/rxeT1oX8Ejoyyezx5eGsVoW0oG8.roa
File: rxeT1oX8Ejoyyezx5eGsVoW0oG8.roa (raw, json)
Hash identifier: rVt68lJ6oDti6DEFGuolO95ERA37QFzYxYBbh/CgzjY=
Subject key identifier: AF:17:93:D6:85:FC:12:3A:32:C9:EC:F1:E5:E1:AC:56:85:B4:A0:6F
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01825A67BCA5BB4CCACA53CD1AFBBD94FA21
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/rxeT1oX8Ejoyyezx5eGsVoW0oG8.roa
Signing time: Mon 01 Aug 2022 17:15:24 +0000
ROA not before: Mon 01 Aug 2022 17:15:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206016
IP address blocks: 2a06:a005:a0c::/48 maxlen: 48
2a06:a005:db0::/44 maxlen: 48
2a06:a005:990::/44 maxlen: 48
2a06:a005:1390::/44 maxlen: 48
2a06:a005:1380::/44 maxlen: 48
2a07:54c2:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:5a:67:bc:a5:bb:4c:ca:ca:53:cd:1a:fb:bd:94:fa:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Aug 1 17:15:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=af1793d685fc123a32c9ecf1e5e1ac5685b4a06f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:15:90:d8:65:45:86:f4:8c:30:cd:5e:34:63:
e8:42:3e:34:19:ab:67:28:c5:94:e0:80:69:df:4e:
59:b2:8f:93:2b:07:2f:fb:9a:3b:e8:87:de:5e:65:
b4:0e:46:d5:8b:c2:17:90:d7:cb:c7:70:70:8e:6b:
6a:07:79:a4:ca:44:b0:df:e0:18:a0:2b:ac:ba:99:
77:8d:bb:5c:18:3c:9f:49:1c:56:4f:89:a5:f9:83:
57:e3:9b:29:b2:80:b2:5e:15:3b:ab:d3:72:86:15:
1d:49:98:27:4b:2d:46:db:3a:26:7c:f5:13:a6:f1:
bc:0f:40:84:8d:54:54:6d:9a:b3:a5:56:1e:e6:3d:
fb:a7:b6:a5:75:1f:84:6f:a0:cc:6f:23:77:9a:f2:
9b:29:57:c6:73:df:84:da:49:99:3e:1f:01:cf:7b:
ab:c7:64:a8:09:da:dd:41:21:6b:68:0f:aa:d1:f4:
71:08:00:5a:7a:a9:ce:67:6b:d8:77:84:56:04:bb:
fa:49:50:54:f2:5e:88:ee:b5:32:a5:f4:cf:46:09:
0d:c2:22:a3:bb:30:b9:82:ec:d9:ab:88:b8:d5:5a:
5b:37:15:70:cb:ec:9e:12:88:7a:d3:c2:5d:a6:c1:
a3:a5:e2:d5:c9:a3:12:45:21:f3:59:6f:8e:42:43:
78:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:17:93:D6:85:FC:12:3A:32:C9:EC:F1:E5:E1:AC:56:85:B4:A0:6F
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/rxeT1oX8Ejoyyezx5eGsVoW0oG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:990::/44
2a06:a005:a0c::/48
2a06:a005:db0::/44
2a06:a005:1380::/43
2a07:54c2:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
24:65:87:c1:40:a4:fd:e9:d2:8e:f8:06:69:6d:55:40:e0:70:
29:63:71:9f:df:0a:e9:72:f5:1c:ed:64:04:49:39:42:a4:22:
d0:57:53:30:5d:84:ed:02:77:80:59:f1:66:12:54:bd:53:4a:
04:d5:2a:92:56:43:30:06:04:26:85:9c:ef:4b:52:a1:1c:ec:
d0:e7:41:54:5d:0a:2b:27:3a:d0:e6:4c:4b:19:a5:3d:6b:2d:
55:a5:6d:a1:f4:0f:f5:a7:0e:a6:a1:b0:54:86:20:8c:f5:13:
66:48:6a:6f:5b:51:af:38:ff:c5:03:fa:c8:ab:ca:41:36:cb:
3e:06:bc:4e:10:81:fd:a1:d4:47:22:01:ff:a0:fa:a6:2b:c7:
c9:fe:c1:eb:b9:39:5f:0c:97:15:98:66:ae:8c:6d:3e:69:e7:
2c:a9:f1:dc:3a:5c:79:6d:93:e9:c2:ec:00:ce:b4:e0:63:6c:
ff:cf:61:87:98:43:a2:03:bc:a8:9b:a2:ae:ae:5e:17:c0:6a:
79:e3:d4:a5:42:a0:a9:ca:dd:2f:21:13:93:07:92:fd:00:9b:
a7:5d:bb:73:53:53:6a:a4:76:49:8c:8e:43:90:2f:46:cb:83:
09:ba:8c:5b:b2:23:e6:2b:26:b1:f8:da:ca:38:76:52:1b:bb:
a7:90:23:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:49:25 2025 by rpki-client