Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ROtu1AxlQpSEE9W3gMVTyGGk954.roa
File: ROtu1AxlQpSEE9W3gMVTyGGk954.roa (raw, json)
Hash identifier: 0bqmLoSg2TdErMSBGQYYtUz0liFhzcmakPfetuk7wMw=
Subject key identifier: 44:EB:6E:D4:0C:65:42:94:84:13:D5:B7:80:C5:53:C8:61:A4:F7:9E
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01849E69B6E0414D00AF5F26985E75BDDB66
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ROtu1AxlQpSEE9W3gMVTyGGk954.roa
Signing time: Tue 22 Nov 2022 08:17:18 +0000
ROA not before: Tue 22 Nov 2022 08:17:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 142594
IP address blocks: 2a06:a005:108c::/48 maxlen: 48
2a06:a000:1d0::/44 maxlen: 48
2a06:a000:1c0::/44 maxlen: 48
2a06:a005:1730::/44 maxlen: 48
2a06:a005:16e0::/44 maxlen: 48
2a06:a005:16d0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:9e:69:b6:e0:41:4d:00:af:5f:26:98:5e:75:bd:db:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Nov 22 08:17:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=44eb6ed40c6542948413d5b780c553c861a4f79e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c1:ac:e6:6b:f3:cc:d3:64:c3:7c:8c:c1:8c:
2b:fa:c4:af:9a:19:57:3d:fb:1f:8f:67:79:9d:46:
dc:e4:37:92:25:4b:ac:05:aa:5d:c5:0a:ad:b8:9e:
7e:5f:45:37:75:42:65:7f:6b:4a:cd:17:a7:48:db:
3a:66:66:42:7b:a4:4a:41:ff:85:c0:57:fe:19:bb:
52:08:df:7a:a4:ab:b7:43:80:fd:e9:a8:17:64:3c:
9c:7c:2c:cc:28:4f:5f:0a:e6:cb:4a:bd:b6:6f:e9:
98:2d:c2:77:98:6e:34:2f:a1:c1:c8:f8:c5:aa:27:
64:3f:0f:0e:1c:b5:f0:1b:11:45:cc:94:12:63:18:
2d:0a:42:d1:13:89:b9:be:b6:3f:09:d6:84:d9:46:
4f:4d:c3:97:ff:6d:e1:ae:31:d2:bc:5e:39:64:ec:
8e:c2:77:e8:7f:1f:37:d2:2a:54:8a:c4:df:ea:74:
d0:9e:b7:4f:91:c1:53:97:ec:70:43:41:01:2c:a8:
80:95:59:2d:7a:da:7b:10:39:da:fd:56:e1:37:fa:
59:f4:c9:b8:70:bc:56:97:5a:c0:00:0e:6f:3d:b4:
ae:8c:9a:f1:b5:a5:62:79:71:ca:91:7f:d4:da:b2:
9a:23:91:61:f0:51:f2:c0:f7:65:27:85:af:75:f7:
b3:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:EB:6E:D4:0C:65:42:94:84:13:D5:B7:80:C5:53:C8:61:A4:F7:9E
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ROtu1AxlQpSEE9W3gMVTyGGk954.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a000:1c0::/43
2a06:a005:108c::/48
2a06:a005:16d0::-2a06:a005:16ef:ffff:ffff:ffff:ffff:ffff
2a06:a005:1730::/44
Signature Algorithm: sha256WithRSAEncryption
02:4d:1f:5f:41:ad:25:43:00:42:f1:30:53:ed:4f:d2:39:d1:
7f:c7:2e:77:e4:59:18:ff:fb:22:d6:e0:ff:9a:db:b1:78:d3:
88:83:22:61:3c:8d:7e:dc:cd:f2:0d:db:a5:df:40:87:05:d7:
c2:be:2f:a6:44:ca:7e:1e:18:0f:83:14:1a:3e:49:40:64:a4:
33:68:26:0b:3b:88:77:54:6d:fd:e4:23:ed:62:32:7d:15:ee:
f5:51:b6:c3:99:cb:2e:b0:53:19:c0:59:b2:17:d6:ab:41:ea:
b3:de:1c:77:20:d3:7e:dd:cd:92:91:ae:70:56:41:92:7d:ea:
8a:b5:3a:a4:8a:a8:b9:36:8e:b7:6e:2b:1d:95:05:82:c8:dd:
d2:e4:9d:80:94:b8:bd:86:35:fd:a2:7b:6a:3d:45:ca:b5:1c:
6d:37:b5:99:31:e4:f5:93:a1:29:0a:2b:87:da:98:b8:a4:ab:
91:87:3f:4c:b2:68:30:b3:f3:a8:d1:8b:1e:28:23:03:c7:61:
82:15:ef:e3:a9:62:d8:d2:5d:4e:1b:5e:a3:29:b6:82:ff:2e:
02:02:68:7d:6e:32:d4:d9:34:ef:d5:f8:41:41:46:63:b7:6d:
4f:b9:19:7e:db:76:76:1c:42:f8:bb:90:b0:49:f2:1d:d6:71:
a3:a9:0d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 11:28:42 2025 by rpki-client