Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/AkRTO7oXrKNjAz5sfZEAdYaw6l8.roa
File: AkRTO7oXrKNjAz5sfZEAdYaw6l8.roa (raw, json)
Hash identifier: J2UAX5hu5SxDE7cIYMJw4sAaX+7zicT+wLv4XKFxxSs=
Subject key identifier: 02:44:53:3B:BA:17:AC:A3:63:03:3E:6C:7D:91:00:75:86:B0:EA:5F
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 018220D851BEF2B4E14C85092776F9F01785
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/AkRTO7oXrKNjAz5sfZEAdYaw6l8.roa
Signing time: Thu 21 Jul 2022 13:00:23 +0000
ROA not before: Thu 21 Jul 2022 13:00:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210013
IP address blocks: 2a06:a005:490::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:20:d8:51:be:f2:b4:e1:4c:85:09:27:76:f9:f0:17:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jul 21 13:00:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0244533bba17aca363033e6c7d91007586b0ea5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:eb:1d:82:64:50:4b:b1:db:e1:87:41:88:de:
8e:65:f2:85:8c:24:bb:bb:27:1f:3c:36:e3:0c:28:
dc:36:72:23:a0:02:dd:c9:46:b6:ac:c8:3c:03:12:
0b:27:25:56:4b:70:28:1f:a1:41:ec:53:18:74:f3:
b5:86:b8:4b:9b:1c:b7:84:fe:37:1b:a0:22:e5:6e:
9e:6e:20:db:f2:d4:4f:ff:01:c8:4a:01:4a:21:79:
76:75:39:07:8b:05:97:47:b2:d7:64:13:f5:9a:5d:
ad:ef:e2:2f:82:c0:47:cf:b0:4c:90:08:a9:90:32:
83:e2:d4:0c:a9:4d:9f:4b:9e:c7:a6:14:83:8d:1a:
57:16:58:ba:85:37:56:48:0c:d0:37:ff:c9:26:1a:
74:6e:91:53:9c:8b:d9:47:f8:39:f4:6d:f9:1a:c1:
0a:d6:7f:b6:cf:73:a7:4c:e4:96:09:7f:c6:86:ed:
75:14:2f:c9:00:91:18:50:c3:8c:4b:89:0f:01:8f:
4d:d2:ad:1c:d7:ab:62:07:3f:e9:a5:ed:cd:fc:4d:
7a:fd:1b:03:3d:96:77:dd:02:8a:b8:f2:37:8a:3d:
5c:cb:b4:77:cb:75:28:fb:59:a3:a3:95:2c:f7:6a:
8f:58:d3:10:a7:aa:66:84:61:80:14:af:ed:8c:e7:
3f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:44:53:3B:BA:17:AC:A3:63:03:3E:6C:7D:91:00:75:86:B0:EA:5F
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/AkRTO7oXrKNjAz5sfZEAdYaw6l8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:490::/44
Signature Algorithm: sha256WithRSAEncryption
94:10:c4:c2:94:8e:2b:5d:f8:7a:d3:7d:e0:fb:32:99:77:c4:
55:55:ef:01:b0:16:1b:18:a3:63:86:df:dc:e9:bf:74:38:90:
e8:3e:75:56:ef:04:7f:3f:2e:d2:40:ea:99:b7:24:1b:fa:19:
0f:8e:25:7a:91:d8:b4:9e:bd:c1:3d:8c:03:c1:6c:8c:ab:2c:
10:d9:e4:98:de:e2:fc:7a:3a:f7:d0:5c:5f:b6:31:58:0e:64:
4a:01:30:b9:6d:94:0f:bd:fb:07:6e:4f:1e:bc:83:e2:9b:57:
cd:c2:a6:ec:96:34:93:b4:da:e4:87:19:d1:01:6d:44:75:6a:
99:0e:09:65:2d:19:6a:78:e2:ca:77:ca:0c:69:2f:b5:06:e4:
36:8a:73:d4:29:5e:f6:5d:9a:22:94:8f:7b:77:cd:7e:b7:f2:
51:3c:d1:75:48:9a:2a:a9:a4:c0:2b:59:3a:72:d5:d7:e4:2b:
e1:9c:11:10:fa:ca:35:63:dc:4d:d0:80:e9:93:f4:44:e2:63:
7d:45:5b:58:65:49:74:b4:c3:82:54:d2:56:a0:8d:25:4c:08:
95:1c:d1:9c:44:3f:1f:ef:81:a0:6d:25:57:74:20:f8:90:c7:
ce:30:8f:33:fd:f5:12:d2:1c:23:d6:31:98:1a:b0:e8:7c:51:
c8:2e:5c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 03:46:23 2025 by rpki-client