Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/1-TZz7lth-dkMEfxfe57gL3QbsmQ.roa
File: 1-TZz7lth-dkMEfxfe57gL3QbsmQ.roa (raw, json)
Hash identifier: FoNhLRJ5GZIC4tKEXyOWemN6bym8aipob6sHOoNhfUs=
Subject key identifier: F9:36:73:EE:5B:61:F9:D9:0C:11:FC:5F:7B:9E:E0:2F:74:1B:B2:64
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01841B0C2896E824F4C67BC77A5CB7E00784
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/1-TZz7lth-dkMEfxfe57gL3QbsmQ.roa
Signing time: Thu 27 Oct 2022 20:04:52 +0000
ROA not before: Thu 27 Oct 2022 20:04:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61977
IP address blocks: 2a06:a005:1da0::/44 maxlen: 48
2a06:a005:5b8::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1b:0c:28:96:e8:24:f4:c6:7b:c7:7a:5c:b7:e0:07:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Oct 27 20:04:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f93673ee5b61f9d90c11fc5f7b9ee02f741bb264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0a:1f:6d:3f:f0:1d:ff:7c:e9:12:14:b1:54:
46:80:bf:11:cb:ad:4d:bb:5e:a5:9e:c0:7b:84:7d:
8a:10:8a:63:93:28:50:a5:5a:eb:33:88:2a:33:0e:
cb:a6:e2:80:6d:c4:01:6e:11:76:aa:34:50:60:62:
b7:a8:ba:ee:1a:a7:ee:70:58:f5:68:44:41:4b:63:
a5:fc:3a:f1:63:eb:be:d8:78:47:67:ab:07:33:c9:
04:a2:05:13:0b:dd:49:5d:f6:1b:18:65:09:96:26:
82:51:3b:76:ec:dd:f3:5b:89:2a:3d:ef:1a:bc:e0:
7b:12:14:d4:c3:1c:ff:3d:9e:0c:b0:26:e1:de:7d:
54:eb:94:5b:c7:b1:59:56:7c:d1:2f:2c:7e:ac:e0:
78:a9:81:c1:27:cf:88:51:91:07:85:f0:16:2f:24:
8c:ea:d7:61:52:8b:32:03:2d:81:a4:54:c8:b8:a6:
ca:a5:be:b9:91:be:96:cb:8f:d4:c4:24:01:60:03:
8a:b1:f6:c7:dd:f5:a7:08:40:51:12:1c:b6:c7:73:
d7:79:87:bd:dc:ba:26:45:c1:e3:2a:b7:4d:59:13:
a8:3e:90:29:3e:3a:0c:3b:42:77:ed:54:54:ea:1b:
3f:6b:93:a0:85:ce:79:95:b2:25:6e:d0:6b:d5:eb:
1b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:36:73:EE:5B:61:F9:D9:0C:11:FC:5F:7B:9E:E0:2F:74:1B:B2:64
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/1-TZz7lth-dkMEfxfe57gL3QbsmQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5b8::/48
2a06:a005:1da0::/44
Signature Algorithm: sha256WithRSAEncryption
50:b6:12:62:38:8d:53:8c:e2:c4:e9:4c:05:ad:3a:34:c6:f9:
cb:e3:27:f0:ea:1f:fa:43:4b:a0:83:ab:11:0d:9d:92:8e:86:
80:c0:08:d8:3d:87:84:02:c6:d4:14:a8:92:f9:8f:4d:33:89:
40:05:34:a8:b4:84:30:96:a8:8f:00:c6:ff:6f:50:55:c3:25:
35:e6:0c:d4:66:23:18:ac:8f:79:b5:65:83:ff:65:ee:dd:e1:
38:5d:1a:e1:42:2f:50:99:76:7a:af:24:47:76:2a:b0:85:fc:
a9:d9:0d:4c:2d:cb:9d:f7:0c:3b:a9:2c:66:b8:be:dc:6b:26:
c8:36:5c:fa:23:7d:ed:7b:dc:d8:26:a0:91:fb:99:46:69:3d:
b2:02:2d:aa:c8:85:8c:8a:6e:6d:00:62:38:c0:9d:c9:47:a4:
f2:74:50:45:4e:d5:a7:e2:a5:6b:48:8f:e3:bb:06:ef:68:9a:
8f:2d:86:9f:d4:2b:df:ad:54:ad:4f:5d:8a:79:4b:07:d8:28:
10:f7:23:b3:7d:3a:c9:00:bb:08:bb:22:76:4b:ee:a0:1f:6e:
07:0e:e6:5d:bd:36:6b:97:e5:26:aa:f7:62:53:5f:5c:f1:a5:
d9:a5:d7:da:1c:71:29:1e:34:69:44:05:84:3a:56:d3:00:cc:
a8:ec:69:53
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue May 13 22:58:19 2025 by rpki-client