Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/zWJ4sqpZo0xEJ2DwEktsUgA-d3U.roa
File: zWJ4sqpZo0xEJ2DwEktsUgA-d3U.roa (raw, json)
Hash identifier: 1+N3yyG0yJDbp/aOLKPQLbpKfW99WvIurNB8qjb5kNA=
Subject key identifier: CD:62:78:B2:AA:59:A3:4C:44:27:60:F0:12:4B:6C:52:00:3E:77:75
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0184EE8E7248DA5297ED225ACF7627A8B35D
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/zWJ4sqpZo0xEJ2DwEktsUgA-d3U.roa
Signing time: Wed 07 Dec 2022 21:47:03 +0000
ROA not before: Wed 07 Dec 2022 21:47:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200879
IP address blocks: 2a0a:6040:f200::/40 maxlen: 48
2a06:a005:6::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ee:8e:72:48:da:52:97:ed:22:5a:cf:76:27:a8:b3:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Dec 7 21:47:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cd6278b2aa59a34c442760f0124b6c52003e7775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:bb:e7:43:76:0a:31:37:e0:c2:ed:fd:c6:f1:
74:3c:31:cc:43:97:5b:96:3e:b1:d7:e9:32:a7:de:
2f:bd:9e:f9:cd:da:55:76:ac:0d:6b:df:10:1b:03:
3c:b5:b5:2f:90:22:f8:10:12:97:fb:2a:aa:c3:45:
b8:4b:df:bd:f0:e6:4c:c3:d8:24:84:51:d3:d5:b5:
d6:63:3a:0f:75:b7:da:1b:a9:44:9c:a1:32:57:32:
19:0d:d4:15:95:ec:48:90:e6:8d:af:12:78:1c:ac:
85:ad:c3:f8:59:2c:52:2c:fd:ab:ae:54:cb:4d:cb:
f3:bf:18:8c:f4:e2:95:f0:f8:41:23:01:51:ea:b3:
56:4d:e9:5e:ff:de:4e:3d:ad:24:06:f2:dd:6f:05:
55:f5:ab:dc:39:a7:45:00:4b:21:13:a3:8c:fd:94:
f9:56:7e:97:cd:a8:e8:f4:7d:61:73:98:95:01:1d:
b4:ee:db:11:05:c6:a6:fd:44:d0:47:cc:a0:bf:b4:
e8:9e:9a:0e:ee:fc:1d:7f:9f:ae:5f:46:79:96:c6:
ca:88:eb:c5:8a:8a:b1:96:80:13:a2:bc:5a:59:7c:
c1:a3:d7:1e:81:e5:d2:75:57:3d:28:f0:67:b8:33:
23:65:05:67:1c:75:eb:cc:7d:7b:99:64:5c:8c:8f:
8c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:62:78:B2:AA:59:A3:4C:44:27:60:F0:12:4B:6C:52:00:3E:77:75
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/zWJ4sqpZo0xEJ2DwEktsUgA-d3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:6::/48
2a0a:6040:f200::/40
Signature Algorithm: sha256WithRSAEncryption
95:2f:31:4f:85:6d:04:a7:0d:09:83:39:5d:bf:98:39:64:39:
3f:c7:69:c6:b6:c4:8f:74:8d:96:28:02:49:be:0e:89:ed:ac:
0e:4b:ac:19:6c:61:e3:4c:ec:e9:51:1d:f7:d1:8d:e9:4f:8f:
48:c6:2f:c0:a1:fa:f5:de:41:11:5a:3d:56:00:84:1c:73:45:
df:4e:db:8a:7d:e8:98:4a:88:54:79:73:ec:b6:6c:22:d3:0a:
bc:38:d4:22:4f:ba:06:dd:a9:74:73:78:9d:7f:c0:e6:92:a1:
54:da:67:9a:b0:9d:42:eb:e3:0f:9b:49:d3:62:73:c7:39:ed:
9b:a8:03:49:4a:9f:a7:5f:2d:df:fa:16:73:59:7c:f0:63:30:
f0:a6:d3:73:ca:08:b0:65:f8:73:70:0d:98:19:96:43:dc:e6:
db:46:7a:46:9c:3d:cf:39:10:ff:3b:43:ff:1a:3e:d9:11:eb:
a6:74:e1:4c:f5:69:f7:06:3a:3b:89:44:e2:c5:19:d9:74:f6:
e9:73:11:ee:e3:34:05:c0:63:78:6f:7a:b0:5f:64:83:17:80:
c3:4f:71:7a:52:ae:69:5f:d4:6e:2a:14:6d:ac:b7:5f:36:09:
2b:06:71:2e:d4:5c:28:12:96:43:97:bf:0f:d1:7f:d4:8a:ba:
0b:33:61:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:09:28 2025 by rpki-client