Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/v6EXmjmc5yNkWovmdaYXeHSlO18.roa
File: v6EXmjmc5yNkWovmdaYXeHSlO18.roa (raw, json)
Hash identifier: q1QbSUzz55vSIzsa7LYPNAtBhi/6AFPy7kobR2mUIOE=
Subject key identifier: BF:A1:17:9A:39:9C:E7:23:64:5A:8B:E6:75:A6:17:78:74:A5:3B:5F
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0184EDC500E2941329AB3C3E9FE568540A19
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/v6EXmjmc5yNkWovmdaYXeHSlO18.roa
Signing time: Wed 07 Dec 2022 18:07:01 +0000
ROA not before: Wed 07 Dec 2022 18:07:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210912
IP address blocks: 2a06:a005:2600::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ed:c5:00:e2:94:13:29:ab:3c:3e:9f:e5:68:54:0a:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Dec 7 18:07:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bfa1179a399ce723645a8be675a6177874a53b5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:bb:3c:32:00:39:e3:20:ef:c7:d9:95:bf:9c:
6c:2e:59:b3:04:0d:6b:0e:a0:5b:5e:c4:21:db:93:
bd:c3:b5:cd:42:bf:33:f1:8f:f4:49:e6:8a:b1:45:
08:f3:f9:65:af:88:06:51:17:c8:01:4d:01:19:a6:
2a:63:9a:bc:60:9d:7c:2e:07:99:cd:c6:95:65:7c:
0f:26:5f:ab:d2:e1:53:da:07:ba:8c:76:06:b5:8c:
5e:27:b2:56:99:4d:52:17:b7:79:09:2e:94:5d:64:
a8:bc:ec:db:52:e3:30:9c:5f:fb:ea:d0:14:22:32:
87:6d:84:61:ac:2e:ce:32:51:9e:28:2d:62:28:cb:
bc:1d:6f:58:44:7c:9a:9c:93:82:d2:80:05:b7:90:
3d:1b:6c:18:db:9a:14:21:c0:e0:a5:ab:2d:a6:53:
ec:0f:b5:55:9b:3c:7c:94:64:d2:38:8f:05:c9:27:
3a:c1:e0:c3:79:36:52:28:ca:34:be:6e:9f:d8:72:
59:3f:58:a5:3e:6b:2d:c9:15:78:24:eb:39:de:c2:
ee:b7:f2:ba:1b:d7:7a:52:65:bd:be:f5:c5:cf:a8:
87:b5:4c:25:3d:3f:3d:22:95:c0:6e:6d:8c:28:83:
4e:42:c9:1b:3c:39:23:f2:08:4b:0f:86:73:a5:a5:
f4:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:A1:17:9A:39:9C:E7:23:64:5A:8B:E6:75:A6:17:78:74:A5:3B:5F
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/v6EXmjmc5yNkWovmdaYXeHSlO18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2600::/44
Signature Algorithm: sha256WithRSAEncryption
2a:81:b9:f2:67:c9:8f:ad:c1:dd:6e:81:4e:9b:42:50:69:df:
ab:fe:0c:27:fe:b2:7c:29:63:06:92:73:20:62:13:f9:00:5e:
d1:63:68:8f:b1:85:a0:f8:11:6a:34:d5:27:05:95:62:a4:ef:
70:44:1f:00:82:e0:e6:00:10:e5:57:d1:01:26:a5:43:82:fb:
27:4d:45:d2:71:fa:84:c4:ea:43:63:99:94:93:fd:cf:64:2f:
b8:ef:4b:51:04:24:7a:c4:c7:6d:b7:f8:eb:e4:d2:8f:28:aa:
38:a1:92:8f:5e:e3:a5:f2:66:a1:20:e1:9f:9d:26:23:69:43:
7e:e9:ef:58:d7:37:73:b0:70:25:bc:3f:14:f4:7b:24:d7:81:
26:3a:f8:60:d7:e3:77:40:1a:40:23:64:d6:ab:82:cc:9e:68:
c8:e4:2d:d5:33:5b:5f:08:e6:26:28:7e:f0:a9:21:a2:52:1d:
a1:ce:c8:4e:bf:2f:2b:0e:4c:3c:ef:a5:7d:d2:1e:ee:df:f9:
41:ce:d5:a6:a6:7b:1a:93:2a:c9:04:a7:0c:5c:28:29:93:8d:
af:d6:df:82:3c:35:83:5e:3d:f7:80:ed:e3:c2:ba:c5:45:1b:
4a:3a:3e:84:ed:d6:53:59:9d:01:96:0c:e6:db:82:39:7f:86:
28:61:57:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:09:29 2025 by rpki-client