Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/vYFFWDYp2a8SRuboOTsE7Hg-ud4.roa
File: vYFFWDYp2a8SRuboOTsE7Hg-ud4.roa (raw, json)
Hash identifier: ZQEO2wPfCSbwxsvrT9h2yTDTsKoAckyEKeu9EWVKvao=
Subject key identifier: BD:81:45:58:36:29:D9:AF:12:46:E6:E8:39:3B:04:EC:78:3E:B9:DE
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 17DA32B9
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/vYFFWDYp2a8SRuboOTsE7Hg-ud4.roa
Signing time: Sun 10 Apr 2022 18:59:15 +0000
ROA not before: Sun 10 Apr 2022 18:59:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200681
IP address blocks: 2a06:a005:1c::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 400175801 (0x17da32b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Apr 10 18:59:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bd8145583629d9af1246e6e8393b04ec783eb9de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4f:7d:48:e2:a2:6a:25:14:fb:e0:3c:f4:dd:
89:5e:97:71:fe:87:3b:ab:34:ec:1c:bd:df:8d:ac:
6f:78:d2:49:d4:e6:7f:07:db:85:ca:71:08:9f:af:
b8:da:a2:31:05:94:42:76:bc:da:de:3a:49:49:b1:
b4:4e:ee:05:6b:8d:7d:04:f1:83:89:19:1c:5b:01:
c8:fe:c7:de:41:23:d6:b9:3d:aa:67:2e:ff:65:a1:
a9:7b:d0:ce:84:5c:18:d4:8c:1a:fd:40:c4:48:da:
60:4f:e6:2c:f8:06:a0:f5:64:74:73:a4:56:2b:25:
41:a0:fa:ed:6d:e3:a9:f1:68:58:01:59:4e:46:8f:
f5:ba:8b:74:67:6f:bc:fb:01:88:13:31:b5:ad:b2:
2f:43:3a:ef:81:15:b9:e2:78:4d:b6:5b:99:2c:93:
08:c0:61:21:f6:c1:dd:14:c4:f7:c6:47:da:b1:aa:
74:54:7a:b3:a4:91:2e:a2:af:46:00:3e:ca:d8:55:
a1:24:54:ae:85:f9:54:4a:40:21:33:a7:cb:a3:f5:
b4:49:7a:4f:d5:a3:2a:fb:74:cc:ba:b2:40:5c:1d:
0c:ea:6e:8a:6d:99:c6:91:04:8b:5a:b8:3a:25:65:
70:dd:0d:28:57:ed:9f:9a:d1:94:59:17:28:29:1d:
2c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:81:45:58:36:29:D9:AF:12:46:E6:E8:39:3B:04:EC:78:3E:B9:DE
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/vYFFWDYp2a8SRuboOTsE7Hg-ud4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1c::/46
Signature Algorithm: sha256WithRSAEncryption
66:6c:02:2a:5e:0f:68:41:7f:cc:f1:c0:20:09:02:66:49:82:
c9:23:12:b5:d0:d8:d5:1f:2b:ff:1d:e2:cd:9e:3d:55:3a:f5:
f3:f1:49:c7:d6:7e:d5:c7:f7:2f:c1:13:4c:6b:4d:51:a4:88:
9c:30:8c:eb:af:62:da:7c:36:12:6b:56:f0:d3:08:53:3f:59:
14:19:6f:35:90:70:6a:67:da:a9:79:be:9e:79:1a:fe:42:d7:
d9:de:b4:11:02:69:69:97:0b:d7:95:fc:e2:19:8c:a4:f9:fb:
f1:8f:3d:b9:31:c1:ca:9d:d2:8c:c5:29:55:10:74:85:2f:87:
e5:59:5e:44:3d:e3:b8:31:e6:26:87:9a:1b:aa:31:dd:cb:20:
0e:d4:0a:c0:7e:c6:98:d7:b1:e4:d8:98:b5:3b:6c:28:11:73:
15:b0:c0:d7:99:83:a9:66:e5:b1:09:c2:2a:df:d9:cf:b2:09:
38:37:8f:20:f9:83:af:ba:1f:68:bb:d1:fb:5e:42:5d:a8:25:
f1:43:88:ee:bf:b6:70:61:2a:af:d9:af:d3:62:ea:53:4d:dc:
60:d8:f6:5f:82:0b:b8:0a:a8:a9:34:d8:e7:30:34:12:25:33:
4e:85:17:89:cd:bb:ba:f3:f2:91:49:f7:0f:08:a1:dd:0a:ea:
61:4a:d9:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:03:29 2025 by rpki-client