Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/TWSvycJwJLdOpkFPVN1rXg9Y-Zo.roa
File: TWSvycJwJLdOpkFPVN1rXg9Y-Zo.roa (raw, json)
Hash identifier: zlEK9JcvkapXINTljlLLDqNRSirlHdTtSagvEgLR9TY=
Subject key identifier: 4D:64:AF:C9:C2:70:24:B7:4E:A6:41:4F:54:DD:6B:5E:0F:58:F9:9A
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01848CA38498AE996651A1C70DBF9ED6457F
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/TWSvycJwJLdOpkFPVN1rXg9Y-Zo.roa
Signing time: Fri 18 Nov 2022 21:27:17 +0000
ROA not before: Fri 18 Nov 2022 21:27:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203062
IP address blocks: 2a06:a005:487::/48 maxlen: 48
2a06:a005:5af::/48 maxlen: 48
2a06:a005:22e0::/44 maxlen: 48
2a06:a005:22d0::/44 maxlen: 48
2a06:a005:1d40::/44 maxlen: 48
2a05:dfc7:1300::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:8c:a3:84:98:ae:99:66:51:a1:c7:0d:bf:9e:d6:45:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Nov 18 21:27:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4d64afc9c27024b74ea6414f54dd6b5e0f58f99a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:b6:3f:14:11:90:99:e3:2b:ae:3c:a9:49:ee:
4b:8e:15:b2:8e:1f:ff:8f:66:6e:5f:50:53:98:80:
ff:fc:58:46:3e:82:42:bf:81:54:9c:e6:14:99:9f:
59:66:98:82:46:6c:b0:49:b8:e9:36:da:d3:5a:16:
48:76:7e:cf:41:af:cc:a5:36:f7:90:b5:bc:2c:66:
3c:f6:93:24:cf:5a:01:e9:18:d9:c6:9d:a9:da:12:
52:05:bd:dc:46:f9:eb:09:8e:e7:34:2c:7c:bf:e3:
37:36:cc:a8:e6:99:bb:ac:03:78:b2:e2:49:d5:bd:
27:38:a8:72:2d:c2:dc:a2:f3:f9:aa:59:60:b7:99:
e5:73:22:ed:9c:f8:c2:d5:75:0e:ca:4b:ad:e4:04:
29:c8:d1:f1:df:c1:44:9b:1e:1b:54:ec:90:bb:f2:
02:87:8d:53:42:eb:60:bd:7a:a3:c0:3d:f3:d5:d3:
99:c0:5c:a8:78:9c:3a:4e:fd:d8:85:6b:fd:13:bd:
12:15:ee:78:b0:0d:64:f4:a4:2e:5e:ae:6b:a7:de:
2b:bd:7a:2b:b0:7a:f4:55:17:b5:0f:89:99:e3:eb:
e2:74:60:b5:44:0a:8d:a1:1a:19:a3:12:08:b9:ba:
90:21:9e:18:2e:42:10:66:ee:ba:85:1e:f8:42:75:
8a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:64:AF:C9:C2:70:24:B7:4E:A6:41:4F:54:DD:6B:5E:0F:58:F9:9A
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/TWSvycJwJLdOpkFPVN1rXg9Y-Zo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc7:1300::/40
2a06:a005:487::/48
2a06:a005:5af::/48
2a06:a005:1d40::/44
2a06:a005:22d0::-2a06:a005:22ef:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
00:51:5b:bb:8f:81:d6:02:da:3a:b2:ae:8d:49:b5:d1:75:b3:
e5:05:c8:0b:58:35:68:a4:65:0e:46:9c:73:ef:7d:30:e6:41:
96:b5:d3:9d:94:30:25:83:4a:aa:a4:b0:07:ad:5c:ce:24:00:
16:33:11:f1:17:bc:1d:00:ef:58:d9:9b:1e:57:21:04:7b:7e:
87:d7:6c:93:86:a9:a5:e7:68:42:83:8d:c3:ea:e2:5c:43:25:
09:9c:12:c2:b9:ed:47:80:f8:99:9a:95:03:bc:73:e9:10:54:
de:a4:d5:29:7a:20:9d:b4:88:bb:f7:f1:fd:d6:bc:5e:9d:1e:
fa:e9:1f:9b:46:66:be:28:2b:d1:97:ce:4d:c8:4e:c0:f9:8c:
bf:79:55:14:6b:a0:18:84:2f:07:45:4a:85:6b:19:8d:69:13:
79:a2:e5:34:0a:15:4e:0a:9b:a8:8e:bd:78:d7:0a:a4:a6:95:
74:79:fe:22:7a:f0:92:24:ae:6b:47:c0:16:4c:93:a1:2a:71:
1b:ad:32:56:d6:ff:12:f2:14:78:e4:dd:c6:f6:40:97:92:8d:
96:4f:05:f4:07:de:fe:12:ce:80:83:8e:7f:2a:0e:90:e7:7e:
7d:35:30:3f:f6:63:95:63:89:94:9a:bb:3f:50:c6:64:20:c6:
ff:50:aa:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:59:48 2025 by rpki-client