Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/z_K2FmuFMWu2MPoSBF_PKtE2ksA.roa
File: z_K2FmuFMWu2MPoSBF_PKtE2ksA.roa (raw, json)
Hash identifier: tE578C7th3dx7t9v8n0QJfTyqIlw3EgiN7SF6JhcKKs=
Subject key identifier: CF:F2:B6:16:6B:85:31:6B:B6:30:FA:12:04:5F:CF:2A:D1:36:92:C0
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0182022450A14C1B7C271A229F0F342DE7DA
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/z_K2FmuFMWu2MPoSBF_PKtE2ksA.roa
Signing time: Fri 15 Jul 2022 13:55:10 +0000
ROA not before: Fri 15 Jul 2022 13:55:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203899
IP address blocks: 2a06:a005:1230::/44 maxlen: 48
2a06:a005:1210::/44 maxlen: 48
2a06:a005:1240::/44 maxlen: 48
2a06:a005:1220::/44 maxlen: 48
2a06:a005:1200::/44 maxlen: 48
2a06:a005:12a0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:02:24:50:a1:4c:1b:7c:27:1a:22:9f:0f:34:2d:e7:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jul 15 13:55:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cff2b6166b85316bb630fa12045fcf2ad13692c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:94:1a:e3:15:ef:a1:82:33:05:36:59:0b:c4:
6a:38:9e:e8:eb:be:d4:d3:a0:d6:63:77:e3:92:5c:
48:bb:b5:f5:82:cc:1c:70:e4:5a:bc:8b:60:08:9b:
62:aa:8f:f2:79:77:42:94:ed:83:98:76:3a:71:af:
e1:37:d2:d7:f0:6f:71:4e:01:17:df:c1:44:66:86:
16:d4:f8:06:f5:ee:43:1e:1c:b4:56:8d:14:c9:0d:
a5:aa:be:66:b1:f0:57:6b:ee:b1:d1:b3:cf:17:37:
a4:b7:82:40:db:1e:51:44:63:fa:99:41:60:e5:7d:
ff:2f:0e:e2:1d:69:b9:ab:6b:8b:1b:51:dd:c2:bc:
8f:19:9f:b9:fc:c5:d5:a1:b9:85:65:56:c7:03:b3:
f6:87:02:aa:2a:17:22:11:aa:2b:d8:7a:fa:7e:80:
ab:e8:f8:31:9a:c2:58:e2:6c:77:97:d7:01:c2:c0:
fe:f8:d2:cc:c5:ae:21:8a:c9:e9:17:2b:53:04:f0:
ab:95:ae:39:03:15:44:e8:67:be:47:3d:1c:54:e5:
2e:2f:56:f9:85:c5:28:df:c8:59:69:5f:c2:15:c9:
a2:d1:57:62:52:e7:d5:55:8f:44:1f:e1:ba:ad:57:
3c:7e:3d:19:eb:d6:5f:8a:0b:a1:c3:08:01:f4:96:
36:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:F2:B6:16:6B:85:31:6B:B6:30:FA:12:04:5F:CF:2A:D1:36:92:C0
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/z_K2FmuFMWu2MPoSBF_PKtE2ksA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1200::-2a06:a005:124f:ffff:ffff:ffff:ffff:ffff
2a06:a005:12a0::/44
Signature Algorithm: sha256WithRSAEncryption
07:25:62:8c:89:3a:ae:c8:2b:e9:7b:fe:86:69:9c:77:cf:53:
94:d9:4a:a9:46:51:d6:14:a4:56:0f:9f:d7:de:db:00:7d:21:
84:9d:86:12:c5:f2:df:96:f0:cf:d0:46:08:9b:cf:78:74:1d:
bd:f3:c8:f0:65:dd:2f:2c:83:6e:f5:4f:43:bf:a1:5a:05:c2:
4d:23:c0:c6:22:e6:12:a7:8a:4d:2e:b3:79:12:e1:03:dc:f5:
bf:09:d4:89:d7:16:fb:c7:40:8d:dc:aa:40:c9:61:b5:87:09:
1d:de:d2:82:cb:7e:45:f8:81:4c:06:f3:c4:4b:9b:65:1c:28:
a6:ba:d1:af:96:a3:f5:c0:18:6d:28:a5:f1:ba:87:44:fc:54:
3d:cc:0d:23:c8:ed:c9:ef:c0:a0:d6:9e:60:f9:10:03:cb:97:
b5:94:37:a3:22:78:90:0d:f9:be:ee:eb:aa:57:ec:f4:00:5a:
0c:b3:21:7a:2c:6a:0d:cb:44:d4:ae:f2:d4:74:0c:6d:e9:70:
1a:12:c9:1c:95:b6:57:ef:b3:70:3f:0b:c5:cb:fa:a4:74:e1:
e5:b9:3f:c4:23:33:3a:ce:05:2f:bd:76:f2:f1:35:ec:1a:e2:
af:3c:bc:12:29:f5:eb:4d:df:0c:c4:c0:7b:88:8c:d4:3c:67:
b2:d9:4b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 02:38:59 2025 by rpki-client