Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/yIBOJ2ZkGIkB6TOdLQlZZf2oWpQ.roa
File: yIBOJ2ZkGIkB6TOdLQlZZf2oWpQ.roa (raw, json)
Hash identifier: +heZsfIzt2nQQSuHIixE7NiKdiVB2lXfHFeiXF9UR7Y=
Subject key identifier: C8:80:4E:27:66:64:18:89:01:E9:33:9D:2D:09:59:65:FD:A8:5A:94
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0184490F4E3CB47FDE6AFA7D8724206CE69E
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/yIBOJ2ZkGIkB6TOdLQlZZf2oWpQ.roa
Signing time: Sat 05 Nov 2022 18:30:50 +0000
ROA not before: Sat 05 Nov 2022 18:30:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202262
IP address blocks: 2a07:54c2:b00b::/48 maxlen: 48
2a07:54c1:3000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:49:0f:4e:3c:b4:7f:de:6a:fa:7d:87:24:20:6c:e6:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Nov 5 18:30:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c8804e276664188901e9339d2d095965fda85a94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:df:21:87:9a:d2:70:b7:13:2b:8f:0a:9e:b9:
72:c8:c0:ea:ce:35:17:be:71:4e:c7:56:84:80:bf:
9b:5e:e2:57:55:c5:f9:40:74:8a:b8:a7:c1:13:05:
c4:bb:ff:b7:40:11:bc:c2:11:cc:9a:eb:91:75:83:
09:96:1e:5e:d1:bd:86:b3:58:c9:58:24:b0:29:7d:
da:f4:07:98:8f:7c:08:c4:15:ea:32:68:e0:e0:ac:
96:e4:f3:ad:6b:77:c3:d1:ba:ea:00:8f:5b:81:41:
79:b3:06:8d:d9:bf:67:36:c8:94:a2:52:04:2d:6b:
44:e7:53:5c:90:3e:c3:1b:2d:a5:0f:32:b2:5d:23:
54:59:1f:a3:79:ee:7f:1e:30:e3:16:39:2d:b9:dc:
fd:ab:74:e8:94:32:29:01:49:c8:a4:2b:a3:64:d8:
90:2b:a8:ed:c0:98:cc:62:46:39:0c:8f:23:26:74:
8a:b1:fc:8a:f0:98:5d:2e:3b:c2:ea:db:91:98:9a:
8b:65:e8:15:67:aa:8d:76:00:e0:f0:2d:1a:7f:9f:
be:3c:eb:88:11:16:d8:be:a5:14:b7:bc:97:25:3e:
a2:ea:d5:36:aa:bb:ce:39:b9:3c:2c:e1:e0:0a:76:
96:94:99:a2:eb:71:0f:28:36:a8:1a:6b:3a:d0:48:
a7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:80:4E:27:66:64:18:89:01:E9:33:9D:2D:09:59:65:FD:A8:5A:94
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/yIBOJ2ZkGIkB6TOdLQlZZf2oWpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:54c1:3000::/40
2a07:54c2:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
39:8e:45:9c:f4:7e:e6:59:b4:93:6e:d5:1c:ae:a3:bd:19:60:
39:ea:54:c5:58:8b:f9:e4:10:95:90:40:0e:fb:1d:24:ec:3d:
34:33:fe:b5:88:a4:4f:55:68:b9:19:57:4d:69:b7:4a:a9:c3:
6a:da:2d:44:63:b2:2b:0a:f2:1f:6d:74:32:ed:e0:2e:24:bf:
c9:be:d2:3d:12:f3:50:9f:77:bc:b7:d1:15:25:b8:2f:f9:c4:
14:0f:e6:27:18:f4:6d:9c:bb:0b:aa:b5:5d:36:50:3a:55:30:
43:a3:0b:3e:77:19:50:95:1d:b4:1e:5c:a5:40:f0:cf:88:42:
fa:60:ca:a3:bb:f8:e5:95:80:d0:41:04:39:8a:7f:e4:52:52:
28:ed:51:02:31:b6:71:8f:8e:a5:ec:a1:48:ae:99:e6:80:ac:
46:e9:3f:7e:8c:f7:24:fa:05:16:c8:fc:47:70:de:31:2f:16:
99:9f:02:bd:d0:cb:9c:1f:ef:9f:ca:29:23:41:f4:f8:b4:a6:
1d:78:9b:94:06:fa:ec:f8:09:18:40:26:92:f9:8b:a2:c6:e5:
5f:9e:97:bd:f9:f1:a0:76:73:64:65:79:a2:cd:3f:a8:7d:ce:
a9:f8:76:21:16:6a:5c:4c:88:1a:63:b9:14:21:aa:84:84:ee:
ac:e3:61:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 22:09:16 2025 by rpki-client