Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/WTrThgWqy8lTHNhuL_aEjyi7uyE.roa
File: WTrThgWqy8lTHNhuL_aEjyi7uyE.roa (raw, json)
Hash identifier: X0ymla64d2cgURGA4Qah7/beHcyYmqfIuAZ/IOvTEpc=
Subject key identifier: 59:3A:D3:86:05:AA:CB:C9:53:1C:D8:6E:2F:F6:84:8F:28:BB:BB:21
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 018354F1104878C74C34E9610B5D10FF2C44
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/WTrThgWqy8lTHNhuL_aEjyi7uyE.roa
Signing time: Mon 19 Sep 2022 08:50:27 +0000
ROA not before: Mon 19 Sep 2022 08:50:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204160
IP address blocks: 2a06:a005:1d90::/44 maxlen: 48
2a06:a005:1940::/44 maxlen: 48
2a06:a005:1930::/44 maxlen: 48
2a06:a005:1da0::/44 maxlen: 48
2a06:a005:18b0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:54:f1:10:48:78:c7:4c:34:e9:61:0b:5d:10:ff:2c:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Sep 19 08:50:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=593ad38605aacbc9531cd86e2ff6848f28bbbb21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:98:5a:44:30:fc:c3:55:8f:21:6e:1c:96:8b:
53:38:84:eb:e2:f1:82:39:24:65:fa:73:5e:4f:d4:
5f:5b:86:91:46:89:12:16:3d:71:94:c4:63:9c:c1:
13:e5:50:3a:d3:3e:f3:42:0e:ee:21:97:d8:35:de:
79:4d:9e:75:33:06:04:9e:da:37:3e:81:ee:7a:11:
8c:43:b6:f7:89:bb:d4:ce:98:63:a8:b2:fc:21:3f:
d9:70:61:75:ce:44:3e:c9:29:09:ae:42:3c:c1:8d:
6e:ad:03:8c:08:8d:1a:6c:44:f8:00:44:a9:96:bb:
3d:6b:7b:5c:2e:4e:4a:c4:9f:95:52:d5:1d:a1:54:
ef:d5:ce:10:bb:24:cd:34:be:84:c3:99:e7:3a:04:
82:21:51:38:24:e4:d4:a4:26:78:d3:ca:d1:38:0d:
79:16:f1:48:ba:7f:53:ce:22:27:e6:e5:31:ec:8c:
90:71:5e:30:3d:c2:e1:75:a3:a0:81:c7:4c:b8:34:
68:60:db:64:1e:b9:8b:74:d3:82:85:91:a0:9f:7a:
09:9a:ce:b2:0c:75:12:79:05:de:9c:c6:84:5d:e0:
a2:99:74:26:dd:d9:2b:f8:11:51:8f:1f:68:6b:b0:
0b:2d:73:d2:c6:27:e0:d4:fe:0a:fa:4c:ba:3a:31:
63:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:3A:D3:86:05:AA:CB:C9:53:1C:D8:6E:2F:F6:84:8F:28:BB:BB:21
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/WTrThgWqy8lTHNhuL_aEjyi7uyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:18b0::/44
2a06:a005:1930::-2a06:a005:194f:ffff:ffff:ffff:ffff:ffff
2a06:a005:1d90::-2a06:a005:1daf:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
08:f7:b2:39:50:dd:c0:cf:2b:88:9e:fa:7e:98:93:c0:8b:15:
60:d7:57:bb:21:c6:56:24:00:b2:16:b3:a7:72:aa:9e:66:1d:
27:13:eb:b9:6a:53:02:1f:0b:73:ea:e2:e3:bc:39:89:9d:60:
02:96:82:30:8e:cd:58:9e:04:04:da:9a:d8:7e:19:7c:6c:a7:
6d:63:49:cc:0d:9c:d6:fa:bd:4b:6b:32:bb:7f:c3:ab:63:1d:
c2:7c:93:c3:ee:cf:7f:be:2b:f0:07:d9:2a:0d:15:e9:99:08:
ac:e1:d5:79:01:30:c9:91:00:2a:69:79:6a:62:a1:d8:fe:9d:
e3:aa:6f:38:d7:6b:e1:57:33:d1:ed:5d:aa:e9:df:ec:d4:81:
55:67:2d:c5:70:fd:a9:8a:67:2d:33:d7:a5:16:40:f5:01:bd:
5d:24:7d:46:4b:1c:28:8b:1d:f9:31:77:d5:1f:7e:1d:eb:8f:
0d:be:da:75:34:8d:59:ce:2e:29:19:33:b6:a2:56:ee:ff:65:
fd:c0:4d:01:c4:d6:6d:0d:de:72:13:94:91:8a:01:ca:c2:84:
62:f0:d4:08:52:14:cc:df:28:90:5f:a6:e2:68:da:e4:8b:20:
ca:0d:c7:54:94:94:39:6b:bb:05:94:05:63:47:99:ee:a7:d9:
6f:31:11:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 02:54:51 2025 by rpki-client