Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/i85a2XVAKzP644pG6ma01IdJlNw.roa
File: i85a2XVAKzP644pG6ma01IdJlNw.roa (raw, json)
Hash identifier: ztZpnHDAbeSlZD5TVHQJf98B52BLgkgxvARoWVgma38=
Subject key identifier: 8B:CE:5A:D9:75:40:2B:33:FA:E3:8A:46:EA:66:B4:D4:87:49:94:DC
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 1818DE29
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/i85a2XVAKzP644pG6ma01IdJlNw.roa
Signing time: Thu 14 Apr 2022 03:05:22 +0000
ROA not before: Thu 14 Apr 2022 03:05:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211954
IP address blocks: 2a06:a005:434::/48 maxlen: 48
2a0a:6040::/32 maxlen: 48
2a06:a005:450::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 404282921 (0x1818de29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Apr 14 03:05:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8bce5ad975402b33fae38a46ea66b4d4874994dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a0:fb:07:f1:ff:c2:84:84:23:81:71:96:c1:
89:5b:fe:0a:84:9c:d8:93:f6:44:6c:1e:87:0e:f0:
c8:cd:8e:03:05:5e:c8:02:75:52:dc:e7:84:87:88:
86:95:c0:a5:98:19:0e:dc:6e:fa:76:d6:d2:1b:f1:
df:a2:9c:7a:55:af:e1:e9:23:b0:7b:3e:bd:d9:d9:
40:5d:ee:a3:1b:09:9f:40:77:3e:80:cd:f8:0a:41:
04:bf:2f:66:59:40:34:40:83:fc:5e:6a:a2:8f:29:
78:3a:fe:5f:29:47:7d:73:42:3a:57:e1:35:70:c6:
5f:ff:c4:52:9f:fb:30:69:86:c3:fc:e7:c5:d1:dd:
40:36:f0:46:d0:90:11:34:73:2b:33:55:7e:2b:9e:
20:86:f7:01:b3:b5:19:49:e1:8f:7c:45:4c:48:89:
9e:57:b5:80:39:83:96:45:5d:42:09:eb:df:5c:b6:
c9:0b:f7:60:4b:89:f1:11:2f:94:02:28:56:d3:7c:
6f:d4:c8:cc:cf:12:dd:c2:99:aa:10:76:be:4a:e6:
4b:15:02:b1:98:5f:58:6f:24:0c:f9:5d:f3:3a:44:
d2:17:b1:ce:94:b1:98:9b:f0:d9:6a:c6:3d:5a:ac:
2d:8e:b0:d9:64:fb:7d:b4:06:a8:aa:7d:0e:c7:85:
86:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:CE:5A:D9:75:40:2B:33:FA:E3:8A:46:EA:66:B4:D4:87:49:94:DC
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/i85a2XVAKzP644pG6ma01IdJlNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:434::/48
2a06:a005:450::/44
2a0a:6040::/32
Signature Algorithm: sha256WithRSAEncryption
65:7e:01:0d:6f:e4:ef:d7:70:7e:4f:06:5b:0f:8b:b0:11:60:
78:cd:8b:56:1b:70:37:69:27:f8:0e:45:f5:d5:bf:a3:f6:b2:
d9:db:c1:c0:46:2c:a2:bd:68:21:8c:92:33:bd:15:02:fd:d1:
72:69:25:68:4f:a7:86:77:f3:41:5d:c1:a4:23:36:50:53:f9:
28:0a:97:d8:31:e9:52:5b:5c:03:b4:d6:fc:32:18:5f:b6:b3:
04:c5:6f:5d:33:7a:0d:f9:a3:2e:4e:fa:c8:ce:7d:93:42:6f:
ba:83:ea:c7:5e:28:7f:a5:5b:e0:62:b2:7a:65:7c:5d:59:7b:
96:54:2e:5c:7f:11:8e:05:92:84:f8:2e:2f:2a:21:6f:d5:98:
9c:c3:ce:2d:b3:89:9a:62:67:bc:a3:2f:22:7b:af:10:5c:4e:
6f:16:f4:49:02:e9:40:91:a3:f9:7c:16:a5:b1:45:3c:19:4b:
0d:b7:e5:66:1c:90:7c:07:f6:c7:b7:88:6a:52:fb:f0:61:61:
bd:ae:2d:47:8f:7f:ae:8f:c8:03:c2:f7:4a:5f:d4:e6:2f:e1:
65:ed:24:4c:75:0a:18:e1:fe:b7:62:57:4d:ed:5d:d5:bf:3f:
8a:d5:27:24:f7:ef:7f:fc:b2:0a:a3:bb:78:87:83:65:49:ec:
b7:0c:ef:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 15:41:00 2025 by rpki-client