Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/vf35Z0xAdjLlihg-xr4s7NloNXY.roa
File: vf35Z0xAdjLlihg-xr4s7NloNXY.roa (raw, json)
Hash identifier: WP5rATSpYxZxpzp5+cSTAdkK/XbhqhrKrAgV7FFObpM=
Subject key identifier: BD:FD:F9:67:4C:40:76:32:E5:8A:18:3E:C6:BE:2C:EC:D9:68:35:76
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 1913C01E
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/vf35Z0xAdjLlihg-xr4s7NloNXY.roa
Signing time: Tue 03 May 2022 11:13:30 +0000
ROA not before: Tue 03 May 2022 11:13:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44406
IP address blocks: 2a06:a005:1e::/47 maxlen: 48
2a06:a005:740::/44 maxlen: 48
2a06:a005:4e0::/44 maxlen: 48
2a06:a005:670::/44 maxlen: 48
2a06:a005:760::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 420724766 (0x1913c01e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: May 3 11:13:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bdfdf9674c407632e58a183ec6be2cecd9683576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:44:f3:bb:63:7c:81:b9:55:f7:70:b3:78:ac:
38:21:3a:36:9b:98:fd:1a:44:90:00:db:4c:d9:f3:
70:35:c9:41:b1:55:39:5c:12:6b:54:92:35:8c:1f:
1a:25:12:fd:50:2b:5d:ab:f3:e6:1e:5b:51:42:e4:
62:de:20:bd:c0:e5:d2:d7:72:b9:97:82:3d:f3:66:
bc:69:8a:8c:fb:8d:cb:40:0a:68:55:13:e1:44:d4:
2a:ae:06:c2:57:1b:55:28:ca:76:3a:1c:09:a2:53:
c3:9e:86:0c:7c:52:39:ba:d9:b3:0e:d6:ea:1f:fe:
96:e3:cc:ac:45:48:20:21:1a:d5:74:9f:fe:ae:a0:
78:24:b4:d2:b9:57:69:eb:24:e2:b1:54:7a:b6:5c:
6d:4a:26:ef:9a:56:33:7e:6e:a9:7a:5c:d6:da:de:
f5:6c:6c:b3:c6:4e:1a:54:6b:25:01:43:3f:2b:e9:
33:6a:b8:0e:58:6b:96:20:31:22:1d:0a:37:f9:95:
59:72:4e:38:75:4d:a1:a5:87:aa:09:34:36:6f:72:
c9:2a:05:a3:4e:3b:8a:42:04:5a:7b:4f:8a:34:c1:
d0:58:72:e1:90:a8:8a:2b:72:2d:d4:11:25:bc:a5:
9c:32:16:1c:78:62:21:a2:b3:e4:6d:da:69:c2:e7:
c2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:FD:F9:67:4C:40:76:32:E5:8A:18:3E:C6:BE:2C:EC:D9:68:35:76
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/vf35Z0xAdjLlihg-xr4s7NloNXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1e::/47
2a06:a005:4e0::/44
2a06:a005:670::/44
2a06:a005:740::/44
2a06:a005:760::/44
Signature Algorithm: sha256WithRSAEncryption
8a:76:0c:f1:86:83:7f:2f:0c:cf:9d:bf:20:25:33:a0:12:20:
44:04:5e:71:6a:cc:ab:5f:f3:3b:f1:cc:69:4a:32:e6:5a:67:
cf:a9:08:66:d5:bb:c8:bb:ac:6e:77:1a:28:a2:e4:ee:f0:23:
cc:5f:7c:fa:17:d8:cf:e1:2a:6b:4a:31:0a:ff:dd:c1:61:8a:
84:a3:d3:db:7c:7d:43:c9:64:19:e8:43:b6:4e:db:fc:9b:de:
77:cc:3c:5a:c6:3c:f7:90:69:41:ae:48:ba:b6:c1:c4:92:18:
dd:43:f9:16:83:cd:45:f5:7b:a0:0a:bc:48:85:24:77:10:c0:
d7:18:ce:66:af:50:be:47:5e:7b:5e:c3:61:94:a7:31:66:0a:
6d:40:8b:8b:4c:04:3f:a1:4d:07:2d:24:e0:70:68:84:66:78:
c5:d7:0f:87:84:36:4b:bb:db:af:9f:bc:0b:79:9c:0b:cb:7a:
b7:06:72:07:0a:99:44:66:16:a5:54:9a:06:af:67:79:b2:5b:
9e:ae:4b:e6:e7:aa:60:e9:67:94:5a:a6:e7:83:ec:dd:ea:02:
e7:6c:6b:de:e1:4a:cd:1c:6f:98:f4:e9:0f:4e:96:1b:c1:52:
21:11:97:9d:77:20:f6:5c:6e:6c:36:b6:ee:42:5f:91:34:c9:
cd:fc:e8:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 09:58:20 2025 by rpki-client