Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/x-h1vcG-6kh18f8X5QSEoWT6mfA.roa
File: x-h1vcG-6kh18f8X5QSEoWT6mfA.roa (raw, json)
Hash identifier: d7pi4MUuCdVE2bs4sgfNT/92AEovb0p985yT/WsGiA4=
Subject key identifier: C7:E8:75:BD:C1:BE:EA:48:75:F1:FF:17:E5:04:84:A1:64:FA:99:F0
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0181F75279F46F052A1AECCF76D9FD2AD9E8
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/x-h1vcG-6kh18f8X5QSEoWT6mfA.roa
Signing time: Wed 13 Jul 2022 11:29:46 +0000
ROA not before: Wed 13 Jul 2022 11:29:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203915
IP address blocks: 2a06:a005:11f0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f7:52:79:f4:6f:05:2a:1a:ec:cf:76:d9:fd:2a:d9:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jul 13 11:29:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c7e875bdc1beea4875f1ff17e50484a164fa99f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5b:e8:78:b5:ca:f8:07:57:11:5e:2c:4e:3e:
b6:1c:dd:81:fe:d5:e5:34:f4:fe:c0:9e:d9:fd:a0:
f9:45:ae:c3:b0:ed:e1:cf:d0:59:a5:1f:cb:bc:6c:
6b:71:3c:eb:54:1b:c9:6c:78:83:74:46:6a:e5:59:
e8:16:2a:88:65:0b:aa:1b:df:3e:ad:f4:fe:6f:ac:
bb:87:d6:fb:20:33:65:86:5b:36:22:2d:e6:fa:3d:
09:12:d0:eb:5e:49:44:11:1c:62:2f:2f:99:36:78:
6e:21:fd:fb:d3:4c:6c:ff:03:2e:d6:3d:bd:df:e0:
52:fe:91:19:b0:51:97:94:5b:b5:9e:f3:5a:84:2b:
0c:ec:4b:07:0b:c5:d1:79:a8:2f:37:8c:78:a3:dd:
5d:35:0a:ed:29:57:29:44:e4:31:09:5f:e8:e3:fc:
79:e8:59:7d:55:a3:b9:91:71:e3:7c:9b:80:f9:3b:
3e:17:26:8d:da:27:e0:ed:90:6d:2c:8c:68:8c:68:
0d:23:fd:e4:5f:ce:fe:f7:c6:1a:00:de:46:9c:d0:
f4:18:aa:b5:44:33:5a:cf:bd:4a:7a:89:9e:75:32:
1a:1f:75:3e:5f:f3:79:59:f1:98:66:b9:bb:42:0b:
2c:9a:67:c4:7c:bc:6d:13:c8:cd:67:18:24:19:f4:
c6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:E8:75:BD:C1:BE:EA:48:75:F1:FF:17:E5:04:84:A1:64:FA:99:F0
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/x-h1vcG-6kh18f8X5QSEoWT6mfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:11f0::/44
Signature Algorithm: sha256WithRSAEncryption
84:e3:e6:27:1f:fc:a4:87:07:8f:8f:c3:19:4a:55:d5:12:58:
56:3c:8d:24:59:36:8b:78:f0:03:98:ee:39:6b:ce:62:a0:70:
7e:4c:df:87:39:0c:a1:89:87:36:0c:da:d7:ed:19:71:3b:90:
03:eb:a3:be:14:ed:0a:bd:6f:06:a8:1a:97:22:3b:5a:f9:88:
c2:bc:af:59:1d:be:da:b6:45:9c:00:ec:ab:48:be:86:20:90:
36:75:9c:ea:5f:c9:26:49:ef:53:a4:31:e6:94:c9:a2:c4:fb:
02:f7:9c:65:7b:55:85:f8:84:54:ea:7e:f8:b0:38:7f:7d:d9:
ff:d0:2c:6f:ac:f8:26:86:99:c8:fb:28:d5:35:28:a2:b2:10:
6b:a1:6c:31:a2:93:6c:58:aa:d0:6b:a5:89:80:41:03:3f:3b:
d7:79:3a:9a:10:cb:0e:4b:6e:6e:50:71:9f:ef:96:20:b3:1a:
6e:24:85:10:13:af:fb:e4:0d:b5:e1:a3:55:28:12:7d:15:da:
66:b8:96:98:8b:3f:36:73:7a:ea:ea:15:41:8b:50:c2:da:34:
62:61:23:9c:5c:6c:60:c4:60:90:10:c6:dc:dc:cc:7f:91:44:
49:58:d4:60:fd:aa:63:6c:a1:6b:54:e7:c1:49:c5:c2:2c:e6:
10:20:99:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 22:15:14 2025 by rpki-client