Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/zVyZACKR64VvGTIyjIVmh2jCnhI.roa
File: zVyZACKR64VvGTIyjIVmh2jCnhI.roa (raw, json)
Hash identifier: /Q4ZZcQTe1KKo8uoGxl//C1NOLfbdq8rMbw/fu71oIM=
Subject key identifier: CD:5C:99:00:22:91:EB:85:6F:19:32:32:8C:85:66:87:68:C2:9E:12
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0181DE7E8B6238A1B01DF62EA1CAB19791EB
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/zVyZACKR64VvGTIyjIVmh2jCnhI.roa
Signing time: Fri 08 Jul 2022 15:47:24 +0000
ROA not before: Fri 08 Jul 2022 15:47:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204268
IP address blocks: 2a06:a005:a12::/48 maxlen: 48
2a06:a005:1000::/44 maxlen: 48
2a06:a005:a0e::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:de:7e:8b:62:38:a1:b0:1d:f6:2e:a1:ca:b1:97:91:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jul 8 15:47:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cd5c99002291eb856f1932328c85668768c29e12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:20:3c:f5:62:5c:bf:7b:c2:32:62:11:26:a6:
ff:d9:fa:ee:8d:d0:48:68:e3:2b:8e:60:fa:38:79:
6f:67:27:af:8e:63:5d:eb:44:ce:82:59:8f:77:e2:
84:e3:97:f7:48:4c:81:ff:b9:59:96:77:dd:cc:11:
3e:ed:95:d0:a2:0a:e6:42:b2:5a:cc:dc:c7:5c:db:
fc:1b:6a:4f:0a:32:ff:c5:f9:78:69:c7:62:7d:6d:
e0:ff:fd:58:60:f0:c4:39:cb:ba:a5:ab:55:d7:8f:
58:5d:68:46:03:ad:5d:6d:a4:55:18:c4:7a:db:5c:
71:7d:7c:85:05:24:c0:a3:ea:b3:06:73:d2:73:7d:
b9:b0:9b:74:e9:aa:63:dd:2e:ad:4b:3b:80:e4:97:
c6:dc:a1:86:9a:1a:f8:f8:2a:18:3b:27:d9:14:d3:
27:22:30:69:31:7b:54:cf:67:38:86:f0:28:06:86:
eb:b6:b2:b5:1f:b3:c0:65:93:d5:bb:0e:46:1e:66:
94:a2:66:04:39:f7:4b:56:ea:ae:1c:5a:67:de:ff:
ae:75:22:64:eb:7c:d6:7e:bf:a1:fb:3b:ab:af:2c:
9e:a7:b5:94:f5:6b:db:2f:00:42:c3:38:0a:91:23:
46:ac:78:ce:e5:f2:5c:d2:93:27:c1:83:30:af:69:
30:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:5C:99:00:22:91:EB:85:6F:19:32:32:8C:85:66:87:68:C2:9E:12
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/zVyZACKR64VvGTIyjIVmh2jCnhI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:a0e::/48
2a06:a005:a12::/48
2a06:a005:1000::/44
Signature Algorithm: sha256WithRSAEncryption
3d:81:94:38:dc:ed:8d:04:48:b2:e0:cb:ea:b9:fb:67:66:40:
e9:37:be:ea:d1:a9:23:ca:36:75:9a:7e:58:ae:d4:5a:18:c2:
80:17:c3:64:60:e5:80:40:ea:0a:08:61:5d:89:71:94:26:f1:
69:4e:36:48:2f:34:62:bf:4f:79:43:35:17:8d:c6:9a:9f:5d:
43:9a:9a:19:dc:e9:15:91:d2:6e:20:15:2f:31:97:16:41:66:
1c:60:a3:29:2a:56:0c:da:3d:7d:6a:70:58:3e:2d:64:f8:cb:
37:9c:56:31:d7:6b:53:7f:aa:36:0e:e7:ed:ea:f7:22:6e:ff:
4d:97:1e:4c:a5:57:0e:83:49:52:79:18:86:a2:24:3f:3d:39:
47:d4:29:0f:44:c7:44:82:dd:46:c8:74:bf:a3:46:0c:16:cc:
50:1e:61:70:18:ab:93:93:57:ec:e9:3a:61:3e:5d:72:a6:06:
ed:10:88:df:88:57:63:33:c3:07:8b:d8:d8:53:a7:a9:5c:83:
33:c6:77:c1:18:cf:17:9e:b5:24:76:9e:5e:d3:3f:30:e5:44:
6f:74:6f:fb:c5:ba:d7:77:80:9d:22:7c:a5:98:5f:c2:e6:6c:
a9:a5:d9:95:a4:d6:40:55:69:ca:68:11:6d:98:f1:41:b2:f8:
4b:b8:65:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:09:30 2025 by rpki-client