Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/GFmVWYK_Hsub0IhxVJKQdiEugsk.roa
File: GFmVWYK_Hsub0IhxVJKQdiEugsk.roa (raw, json)
Hash identifier: FOL2z4EiKO8oiYeSJ7/jR0ORVe89ltsEu7Gawf4w380=
Subject key identifier: 18:59:95:59:82:BF:1E:CB:9B:D0:88:71:54:92:90:76:21:2E:82:C9
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 1B794058
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/GFmVWYK_Hsub0IhxVJKQdiEugsk.roa
Signing time: Mon 27 Jun 2022 12:52:33 +0000
ROA not before: Mon 27 Jun 2022 12:52:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205980
IP address blocks: 2a06:a005:5f0::/47 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 460931160 (0x1b794058)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jun 27 12:52:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1859955982bf1ecb9bd0887154929076212e82c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1e:40:eb:dd:35:03:c3:bb:08:ae:1f:d0:be:
6d:a6:5e:ec:bb:77:3e:1e:a0:c5:03:e5:53:ee:70:
73:5a:9b:3f:73:90:7a:e4:b2:90:92:0b:2b:6b:5f:
e8:f2:5b:a7:e2:b5:51:01:90:0c:c1:44:3d:6d:71:
49:a8:d3:ed:60:7d:fb:de:7d:fd:30:be:dd:b4:94:
0e:83:13:d4:c1:fd:99:82:b3:df:18:f7:27:54:d9:
d0:60:62:71:06:e6:22:33:30:b2:64:81:ef:cc:c2:
fd:12:2b:8c:ad:5e:9c:58:ec:af:79:c2:a4:a6:0e:
3a:0a:58:ad:6a:08:7e:07:14:a4:a9:4b:17:38:f1:
a0:76:38:42:3e:19:3f:cd:5b:a3:b9:b9:02:46:6b:
0e:ca:b3:a9:33:29:d5:30:29:b6:25:5e:0e:1c:9e:
c6:ff:d7:6b:5f:71:51:05:d6:1d:77:5a:7e:97:cb:
0a:2d:73:a2:07:1b:3d:18:db:e2:a9:67:46:af:6c:
1a:64:e7:76:f0:2a:72:fd:04:cf:63:9b:99:d0:28:
91:01:3b:81:1e:de:55:41:3f:4c:2b:0a:1a:40:35:
d7:d8:2d:8f:a0:9f:b2:ff:6e:91:bc:b9:62:80:c8:
e7:8a:84:a3:bb:1c:23:b9:9e:79:e0:be:59:e8:92:
df:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:59:95:59:82:BF:1E:CB:9B:D0:88:71:54:92:90:76:21:2E:82:C9
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/GFmVWYK_Hsub0IhxVJKQdiEugsk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5f0::/47
Signature Algorithm: sha256WithRSAEncryption
1a:0c:ef:55:40:ac:73:33:d3:70:86:07:86:66:1b:94:a9:53:
77:88:9c:0b:c7:ad:2b:fb:ba:b9:7a:7a:62:7d:60:c3:a1:3a:
2e:95:91:13:2a:ad:c0:1f:89:80:54:25:e3:05:20:4b:6f:45:
e3:cf:1f:9e:08:fc:81:96:55:49:b6:ab:f4:39:7f:c6:87:4a:
fc:00:8b:25:8e:f0:d2:b7:8f:92:ae:61:d3:1c:0a:02:a6:80:
0e:cb:24:09:a1:10:11:fc:5c:07:1a:3e:ef:12:8c:93:9c:e6:
34:2d:c5:6c:57:b7:3e:df:7b:80:3a:1f:eb:fa:a4:40:72:c4:
5e:6f:d4:c6:e1:58:ee:07:d5:a2:e9:4b:56:2d:e6:11:31:9b:
55:78:c4:60:b4:66:a6:5d:34:b2:96:0a:87:b6:f2:4c:58:c2:
0d:f8:64:6b:5e:0c:5a:bf:af:fe:b6:12:66:a7:f7:a6:ff:c5:
e7:b3:10:00:d2:f5:23:dc:6f:8c:f5:a4:c8:85:10:ef:ce:07:
38:72:e8:fe:d4:b6:da:5c:cd:31:06:cb:3a:de:ba:cb:cc:72:
db:a4:31:53:41:89:af:72:8a:dd:f1:f5:8a:93:09:27:56:c9:
5b:c7:03:97:d7:96:09:b2:97:6e:95:3d:59:85:13:ab:f0:cb:
ac:b3:d1:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 15:58:14 2025 by rpki-client