Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/sETRqVAxBFKWPwMtRTBgW0ndRBQ.roa
File: sETRqVAxBFKWPwMtRTBgW0ndRBQ.roa (raw, json)
Hash identifier: l5dRnGrSUnjDGOd7DvsDPL23+e2+w8oS1eOkK50ml9o=
Subject key identifier: B0:44:D1:A9:50:31:04:52:96:3F:03:2D:45:30:60:5B:49:DD:44:14
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0183212A4F9C984A51CC19273AD15FA2BF46
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/sETRqVAxBFKWPwMtRTBgW0ndRBQ.roa
Signing time: Fri 09 Sep 2022 07:32:44 +0000
ROA not before: Fri 09 Sep 2022 07:32:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 54681
IP address blocks: 2a07:54c2:b00b::/48 maxlen: 48
2a06:a005:1980::/44 maxlen: 48
2a06:a005:f00::/44 maxlen: 48
2a06:a005:1960::/44 maxlen: 48
2a06:a005:ee0::/44 maxlen: 48
2a06:a005:f20::/44 maxlen: 48
2a06:a005:18a0::/44 maxlen: 48
2a07:54c7::/32 maxlen: 48
2a06:9f80::/29 maxlen: 48
2a06:a005:1970::/44 maxlen: 48
2a06:a005:ef0::/44 maxlen: 48
2a06:a005:1950::/44 maxlen: 48
2a06:a005:f10::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:21:2a:4f:9c:98:4a:51:cc:19:27:3a:d1:5f:a2:bf:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Sep 9 07:32:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b044d1a950310452963f032d4530605b49dd4414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5e:c4:6c:6b:6f:52:54:94:01:75:c8:c4:dd:
d0:9b:9a:ae:73:15:ad:ed:00:2c:05:e7:3c:75:ea:
22:57:43:a8:79:d6:a4:aa:dd:ed:01:45:7a:66:75:
88:a0:6d:4e:5e:4e:8d:0d:1f:e6:d3:bb:37:06:c5:
4f:8e:80:48:59:6f:ea:2a:83:f0:88:0b:cd:c2:dd:
2c:26:b5:28:56:78:af:a0:c7:d3:e5:a9:12:35:8e:
bd:2d:d4:f2:d3:b6:84:42:29:5f:96:5b:cd:10:e1:
ce:73:35:80:c0:c7:70:cc:9f:91:bc:cb:c4:8e:a2:
0e:d6:e2:9a:2a:ad:d2:8d:49:89:46:c4:79:1a:d3:
8c:69:8a:8d:94:07:83:6c:c1:4e:d2:3d:50:96:b3:
4b:b5:d3:c4:7e:8e:be:72:69:92:80:f5:47:6b:e0:
a5:41:f8:f5:d0:ed:f2:2b:1e:cc:40:1e:f1:02:c4:
ff:05:01:85:31:e7:91:c1:e8:59:31:59:be:4c:ad:
a5:e3:95:cf:31:52:19:02:b7:c6:cb:30:e5:e0:fe:
57:15:a4:2b:18:87:ed:7a:de:cd:bb:4b:8e:cf:02:
c8:25:88:2d:a5:18:8f:b1:bd:00:98:d9:d9:de:8e:
03:52:a5:40:5d:46:78:8e:af:19:f7:f1:aa:f3:b2:
bb:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:44:D1:A9:50:31:04:52:96:3F:03:2D:45:30:60:5B:49:DD:44:14
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/sETRqVAxBFKWPwMtRTBgW0ndRBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9f80::/29
2a06:a005:ee0::-2a06:a005:f2f:ffff:ffff:ffff:ffff:ffff
2a06:a005:18a0::/44
2a06:a005:1950::-2a06:a005:198f:ffff:ffff:ffff:ffff:ffff
2a07:54c2:b00b::/48
2a07:54c7::/32
Signature Algorithm: sha256WithRSAEncryption
49:86:74:ea:44:86:ac:51:4c:a5:5c:af:7b:88:c4:d3:1f:82:
0e:df:81:69:6d:37:a8:0d:1e:f2:f5:ee:27:f3:64:ca:a7:92:
4a:b7:00:2c:b7:22:31:a2:98:da:27:bd:a8:92:16:3c:71:a5:
fb:df:6a:47:15:c3:f1:77:98:4e:b6:cb:12:b3:b1:59:9b:54:
33:8b:e7:a3:c3:62:d3:2a:35:3a:f0:c7:14:43:b3:06:90:c9:
64:10:e8:a5:f9:d6:ed:a8:b1:37:52:e5:e2:11:5b:3e:ae:9b:
22:44:df:be:b6:87:22:d1:fa:52:04:a5:7b:a0:e5:07:c8:dc:
10:3d:f3:9a:72:69:f3:5c:50:4f:1d:ce:e1:78:86:b0:ec:34:
7f:1f:23:aa:c3:9a:ee:e2:a2:66:3f:19:43:1c:39:5a:89:60:
fb:0e:0f:c8:7f:87:59:d5:51:f9:26:bc:bc:4d:87:80:68:8a:
63:1f:98:ba:f2:a0:11:1f:8f:fc:6f:4e:ac:94:09:00:30:c3:
ed:58:8e:11:80:57:00:87:66:9b:c0:cb:42:10:b1:e0:86:96:
b2:21:56:2e:24:f5:2a:2b:2d:c9:65:95:27:8d:44:73:58:b8:
73:6b:f8:77:1d:96:c3:de:f9:6e:33:25:a6:29:d3:26:8a:13:
24:55:ed:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:11:10 2025 by rpki-client