Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/yYfnvPW3xgGSeuwkGIvw-Ql_sEQ.roa
File: yYfnvPW3xgGSeuwkGIvw-Ql_sEQ.roa (raw, json)
Hash identifier: RjJrTnGxoUZ067BEfT2Kn4HlwE5o1+uTwFB2Uv+B0JI=
Subject key identifier: C9:87:E7:BC:F5:B7:C6:01:92:7A:EC:24:18:8B:F0:F9:09:7F:B0:44
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 173D5DE7
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/yYfnvPW3xgGSeuwkGIvw-Ql_sEQ.roa
Signing time: Sun 27 Mar 2022 08:22:28 +0000
ROA not before: Sun 27 Mar 2022 08:22:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207705
IP address blocks: 2a06:a005:210::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 389897703 (0x173d5de7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Mar 27 08:22:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c987e7bcf5b7c601927aec24188bf0f9097fb044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a5:27:8d:ca:b4:a4:d7:0a:1b:c5:47:8f:98:
6f:48:f5:91:06:01:90:67:70:0b:b7:77:f2:67:3f:
3a:93:18:30:b0:fa:e1:78:f6:02:9e:5d:2b:70:1d:
92:51:9d:61:7e:ad:c3:5c:42:80:d3:d2:95:09:b5:
1b:5e:3d:73:78:15:6b:7d:c6:20:51:89:c0:8b:dd:
9e:bc:13:b0:d3:54:2d:1d:30:26:d4:5e:84:6b:67:
35:3b:c2:c1:81:7b:e6:e5:71:dd:e6:49:4e:93:c0:
17:f9:76:11:f7:6b:19:4a:7d:83:2b:e2:6c:4a:54:
7f:59:7f:f9:58:70:e6:0a:09:d9:03:be:f0:b7:f0:
da:8a:a1:8a:e8:b2:fc:2c:5a:8e:22:cc:40:82:ac:
17:c7:ce:a1:b9:10:2d:bd:b8:83:ac:e5:c5:41:38:
ca:93:b0:b2:79:fb:2a:7f:5c:6b:08:14:ba:f3:21:
36:e4:a8:12:b3:38:95:9f:08:93:12:ab:db:3f:8c:
e1:4d:9c:2a:19:9b:75:f7:0c:43:b1:fc:73:b8:c4:
34:ac:81:ba:24:d5:39:f0:5d:38:aa:23:98:df:08:
df:00:b9:38:da:56:56:dd:06:1f:52:30:e7:e0:b7:
40:48:43:0b:19:e3:bb:db:ec:77:49:1d:57:a1:3f:
0a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:87:E7:BC:F5:B7:C6:01:92:7A:EC:24:18:8B:F0:F9:09:7F:B0:44
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/yYfnvPW3xgGSeuwkGIvw-Ql_sEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:210::/44
Signature Algorithm: sha256WithRSAEncryption
51:b6:9e:e8:42:ce:9d:0b:7f:a7:c0:c9:0e:37:8f:4e:33:f3:
a2:30:f5:c3:2e:72:4e:b3:e3:d5:6e:5c:c2:be:37:8d:d0:87:
67:2b:fc:eb:5a:e3:27:8d:2f:cc:48:e8:0b:3f:97:93:af:a6:
e0:86:0d:21:8a:1c:b4:fb:31:9b:f6:c5:85:35:74:4d:71:5d:
eb:b3:00:c6:fd:24:68:78:bd:a3:72:8e:9c:e7:e6:3d:01:71:
33:04:9f:cf:da:8a:5b:9b:8b:5b:b5:47:b0:c9:4b:27:cc:8f:
87:56:20:f5:d1:90:d2:c8:9f:27:bb:c0:82:e0:23:0c:15:57:
f1:78:26:7e:fe:3d:74:15:7e:03:d6:bf:9a:a9:ba:1d:cf:d1:
db:4f:f5:68:e0:31:2b:63:ba:7f:f4:56:49:41:7c:14:97:94:
2c:e2:74:03:29:c8:86:13:32:36:1a:8b:94:2a:31:4e:9d:67:
73:32:a0:27:b7:7c:6d:f2:ca:9f:bd:67:3c:a3:28:17:62:49:
29:fa:14:3c:eb:0a:22:03:e8:02:60:33:80:c5:15:1e:ae:a0:
1a:4b:08:a8:64:99:28:35:1a:fa:12:3f:cd:a4:90:ea:72:6b:
14:86:2c:8f:27:20:93:0b:9c:f1:2f:19:77:ec:fc:73:59:00:
6e:2e:b2:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 14:24:58 2025 by rpki-client