Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/bz6HoiAZfci5ZWzMNNS1sETfx_4.roa
File: bz6HoiAZfci5ZWzMNNS1sETfx_4.roa (raw, json)
Hash identifier: Hw51fE3RftzwcnDnBVa10r8sC6NNP6tk+9xyGbi+bOc=
Subject key identifier: 6F:3E:87:A2:20:19:7D:C8:B9:65:6C:CC:34:D4:B5:B0:44:DF:C7:FE
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01822914C7C38FD18BB70635F3ACC7648E3C
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/bz6HoiAZfci5ZWzMNNS1sETfx_4.roa
Signing time: Sat 23 Jul 2022 03:23:23 +0000
ROA not before: Sat 23 Jul 2022 03:23:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203979
IP address blocks: 2a06:a005:454::/48 maxlen: 48
2a06:a005:8b0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:29:14:c7:c3:8f:d1:8b:b7:06:35:f3:ac:c7:64:8e:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jul 23 03:23:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6f3e87a220197dc8b9656ccc34d4b5b044dfc7fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5d:9f:4b:d3:c1:53:a6:b8:51:99:5f:a5:13:
eb:fa:79:9b:fb:18:af:74:ad:ad:68:21:ac:14:4c:
36:37:45:06:7c:70:80:86:a8:9c:08:41:e4:83:8b:
6a:3a:4e:8a:2a:1e:bc:95:1a:e0:8a:7e:68:74:ee:
1f:81:16:7b:da:07:4a:e8:b2:23:23:9d:fd:2a:0b:
82:33:14:60:9b:ae:f8:92:c9:c9:a7:df:96:42:40:
33:00:32:a9:ab:5f:50:c0:19:02:8e:4d:fe:45:8a:
c1:72:f7:4b:95:7a:d1:f1:e6:6c:d3:ec:5d:90:a0:
66:ce:1a:42:97:bf:1b:fb:9c:83:07:ff:7f:0d:8c:
b8:fd:dd:b9:f6:25:f6:31:64:02:94:7f:ef:15:9d:
ba:b8:93:fc:2b:81:29:ca:e3:c5:a3:d8:40:0a:f4:
d9:6e:13:62:12:c2:4d:a4:f2:bd:f8:d3:b9:2c:01:
1d:a4:59:a4:ab:a2:dc:25:df:3b:f9:da:e9:ac:2f:
12:ec:96:7f:9b:3b:e2:15:ba:f7:6c:98:84:24:b7:
de:ca:7d:c6:88:ad:04:59:bd:fc:8e:f0:60:2b:5b:
b9:7a:4b:58:c3:86:52:45:7e:2a:bc:29:c8:a9:5c:
fc:27:a0:eb:9f:64:3c:54:16:40:4a:64:72:95:7c:
35:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:3E:87:A2:20:19:7D:C8:B9:65:6C:CC:34:D4:B5:B0:44:DF:C7:FE
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/bz6HoiAZfci5ZWzMNNS1sETfx_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:454::/48
2a06:a005:8b0::/44
Signature Algorithm: sha256WithRSAEncryption
28:bb:c8:50:c3:60:df:48:f7:f6:a5:bd:1e:02:e5:fe:d4:58:
7b:13:9e:c0:95:48:1a:52:92:2d:9a:6c:e7:47:f1:6c:47:e1:
53:6d:2c:0c:4e:31:9b:3d:f6:1a:39:d5:e5:04:bc:2e:8f:09:
7b:3e:1c:4d:56:85:92:99:90:3b:3e:d5:d9:6c:e2:6c:ac:4e:
78:ca:9d:a6:f7:15:84:27:2d:27:84:99:c8:1d:b1:04:8a:2c:
f3:eb:71:54:2b:ba:52:27:64:f9:88:78:ac:dd:e0:55:69:d5:
24:0b:8a:a3:97:ef:9d:27:e5:04:43:ad:da:b0:7a:07:bc:29:
49:87:82:b3:9d:6b:c6:f9:aa:50:6c:41:b8:ce:4e:5d:df:9c:
df:8b:40:a3:5d:c8:46:2a:3e:b2:fd:71:96:0d:6c:d6:c0:2d:
d2:f4:64:ad:81:91:37:45:6a:dc:6b:40:ae:24:5f:2e:06:f4:
42:27:3d:54:e1:72:93:02:5a:f2:a9:b1:c3:9a:d4:3f:7e:9f:
6e:1a:de:63:0d:1b:91:5b:61:54:7a:a2:76:25:66:f4:30:5d:
e4:f2:35:35:86:d5:78:ba:79:65:39:f4:0d:c9:5f:34:06:7a:
31:0d:d8:d9:b2:65:d6:b4:66:5c:4a:ee:68:07:c9:29:7d:5d:
74:18:9a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 13:11:08 2025 by rpki-client