Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/bec153-160c-438b-862a-d81d3b616fa4/1/2dONE8I4uqngErTsE47rMuYzsL0.roa
File: 2dONE8I4uqngErTsE47rMuYzsL0.roa (raw, json)
Hash identifier: SN6EShqm4dgZcJNXQJh5HAQyhunbTM9SyYvJMFnI2e8=
Subject key identifier: D9:D3:8D:13:C2:38:BA:A9:E0:12:B4:EC:13:8E:EB:32:E6:33:B0:BD
Certificate issuer: /CN=b4d1901a7eba6e575bc79f936e94ade7b7b48b53
Certificate serial: 04C740EC
Authority key identifier: B4:D1:90:1A:7E:BA:6E:57:5B:C7:9F:93:6E:94:AD:E7:B7:B4:8B:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tNGQGn66bldbx5-TbpSt57e0i1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/bec153-160c-438b-862a-d81d3b616fa4/1/2dONE8I4uqngErTsE47rMuYzsL0.roa
Signing time: Sat 01 Jan 2022 07:00:13 +0000
ROA not before: Sat 01 Jan 2022 07:00:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1836
IP address blocks: 2a01:bc60::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80167148 (0x4c740ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4d1901a7eba6e575bc79f936e94ade7b7b48b53
Validity
Not Before: Jan 1 07:00:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d9d38d13c238baa9e012b4ec138eeb32e633b0bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:f4:31:41:b8:cf:50:fe:f3:5a:95:b1:0b:cc:
9b:f4:12:e2:c0:cf:0a:31:c9:81:7b:0c:c6:75:ea:
bd:75:d6:cd:b9:3a:1f:59:8f:8d:91:5d:53:84:82:
c7:82:7b:29:6f:85:79:ec:f7:93:2d:8e:b4:d3:4a:
08:4e:da:72:67:4d:9c:eb:02:fa:0e:0c:d5:64:a0:
1a:ff:9a:b1:86:39:be:f7:d1:40:01:82:44:95:d7:
07:b5:00:64:cd:47:dd:8e:3f:03:3c:ed:88:54:9f:
f5:c6:9d:cb:bb:f9:c3:f5:cf:e8:e7:5a:80:c5:5d:
5c:2e:c1:8f:90:b4:f3:cb:58:8e:83:eb:ad:10:67:
7e:64:44:4f:e0:0b:28:f1:ae:c5:d7:7f:23:da:69:
42:b0:ff:9d:31:aa:38:d1:c9:59:66:c5:b8:65:1d:
f5:b8:11:01:52:1d:fa:1d:a6:1b:5f:90:b4:8e:3c:
85:86:76:5c:39:8d:c0:1f:80:c6:af:19:e3:31:a0:
28:b8:22:16:92:1a:ca:ea:6f:44:00:21:2c:c2:76:
d5:a3:bb:b4:d8:23:9f:d6:08:33:7f:ac:25:64:bc:
7e:77:51:a4:b8:38:00:7b:5d:2a:e5:11:c1:7a:3a:
14:37:20:ee:9e:8f:0a:fc:cb:e1:a1:ca:bf:1a:55:
25:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:D3:8D:13:C2:38:BA:A9:E0:12:B4:EC:13:8E:EB:32:E6:33:B0:BD
X509v3 Authority Key Identifier:
keyid:B4:D1:90:1A:7E:BA:6E:57:5B:C7:9F:93:6E:94:AD:E7:B7:B4:8B:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tNGQGn66bldbx5-TbpSt57e0i1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bec153-160c-438b-862a-d81d3b616fa4/1/2dONE8I4uqngErTsE47rMuYzsL0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bec153-160c-438b-862a-d81d3b616fa4/1/tNGQGn66bldbx5-TbpSt57e0i1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:bc60::/32
Signature Algorithm: sha256WithRSAEncryption
03:b5:3a:52:d0:56:c2:e1:2a:24:20:d7:ec:0d:78:b4:cb:d7:
6e:76:46:62:84:09:89:38:f6:1b:91:c6:bd:36:1d:9b:a7:53:
86:d1:47:92:8a:cb:21:de:21:db:c5:2d:cd:09:08:f6:63:9e:
f1:3c:a6:f7:4d:20:c0:f9:c2:1f:fc:ed:b9:fe:c7:51:b8:d4:
f3:5b:f2:e0:18:c8:52:dc:8d:e8:0c:63:7e:8d:0c:58:53:ae:
22:1f:d0:10:db:d3:ed:ca:42:39:34:11:76:5e:fb:1e:4f:9f:
d7:09:b0:a0:da:1c:a5:af:30:bc:6d:9f:70:e7:a0:3b:d6:77:
fd:f6:48:83:1b:3d:d3:26:8c:8a:98:c1:3c:82:cc:bf:8b:66:
40:f6:51:5c:41:46:2a:a8:80:5c:bf:02:4a:e0:c2:6f:75:38:
05:05:cb:a4:35:ed:35:e6:e0:95:8d:d3:6a:e1:b0:54:7f:e0:
15:08:2b:48:6b:64:02:45:76:c9:d5:2b:75:3c:df:b0:c6:13:
dc:e7:2d:27:ca:ed:38:2d:e5:a4:72:94:49:d0:cf:e1:2b:e5:
b3:fc:d8:a1:21:07:1d:c8:2f:11:a5:df:de:a4:b9:13:70:6b:
da:9c:4f:f8:ab:7f:cd:1b:f7:99:eb:a7:eb:9b:56:7b:c0:72:
af:56:a4:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 02:04:08 2025 by rpki-client