Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/11b094-dd92-4b85-b8f1-2bcad2abc0af/1/qMcanFB6uhpgmB6PdXHLrnRi0hg.roa
File: qMcanFB6uhpgmB6PdXHLrnRi0hg.roa (raw, json)
Hash identifier: /K4xuLyiLVIU7Db2lCneAMd4x7bkCCMvtWQVwJZdtYU=
Subject key identifier: A8:C7:1A:9C:50:7A:BA:1A:60:98:1E:8F:75:71:CB:AE:74:62:D2:18
Certificate issuer: /CN=54f0b58a6e6f005e5d5d7f478f03c44800447109
Certificate serial: 018ACC51086449DB268A38C6FC22FE9F3CB2
Authority key identifier: 54:F0:B5:8A:6E:6F:00:5E:5D:5D:7F:47:8F:03:C4:48:00:44:71:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VPC1im5vAF5dXX9HjwPESABEcQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/11b094-dd92-4b85-b8f1-2bcad2abc0af/1/qMcanFB6uhpgmB6PdXHLrnRi0hg.roa
Signing time: Mon 25 Sep 2023 12:29:37 +0000
ROA not before: Mon 25 Sep 2023 12:29:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57565
IP address blocks: 2a13:ee46::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:cc:51:08:64:49:db:26:8a:38:c6:fc:22:fe:9f:3c:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54f0b58a6e6f005e5d5d7f478f03c44800447109
Validity
Not Before: Sep 25 12:29:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a8c71a9c507aba1a60981e8f7571cbae7462d218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fa:fa:2d:c4:6c:61:3c:e5:4f:f3:d2:41:f1:
d2:07:a8:5e:5d:f4:88:f1:e1:55:ce:11:4d:0d:08:
b2:99:c0:58:25:f2:f6:d5:55:fd:24:0f:09:93:18:
d4:6c:64:27:97:eb:0a:9b:b5:59:02:9c:d1:35:d0:
2b:20:fb:66:fb:1d:2a:d9:17:91:b2:9b:58:5e:62:
e5:38:43:cf:33:63:d9:9c:0e:00:b2:60:74:08:f1:
99:39:c6:86:60:0a:6b:be:78:95:0b:8b:84:47:f7:
17:dc:23:4d:fc:a0:c3:91:ad:ad:a1:76:f5:28:f4:
53:36:da:ab:d4:41:11:e6:77:59:9d:61:40:26:a7:
ec:73:17:9c:7b:ff:f2:47:c4:d9:a9:8a:b1:cd:fe:
28:8e:f0:dd:e0:03:90:db:5c:bd:77:5b:92:83:87:
8b:03:d0:f8:33:b2:d4:a4:df:2c:be:be:97:de:38:
03:01:2d:37:a9:1a:6d:3f:13:a3:f7:cc:8e:29:61:
09:72:85:57:0f:e5:49:1f:f2:e6:ae:9d:21:a0:2d:
e7:b3:a8:79:35:9f:f3:9c:9e:dc:c2:6c:87:5e:d4:
8c:f5:89:d1:9a:0c:8f:51:8b:72:8f:28:8a:57:57:
f4:4d:e6:5c:a1:dd:26:b7:de:4b:ec:4d:65:57:c7:
37:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:C7:1A:9C:50:7A:BA:1A:60:98:1E:8F:75:71:CB:AE:74:62:D2:18
X509v3 Authority Key Identifier:
keyid:54:F0:B5:8A:6E:6F:00:5E:5D:5D:7F:47:8F:03:C4:48:00:44:71:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VPC1im5vAF5dXX9HjwPESABEcQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/11b094-dd92-4b85-b8f1-2bcad2abc0af/1/qMcanFB6uhpgmB6PdXHLrnRi0hg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/11b094-dd92-4b85-b8f1-2bcad2abc0af/1/VPC1im5vAF5dXX9HjwPESABEcQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:ee46::/32
Signature Algorithm: sha256WithRSAEncryption
3b:e8:d1:e0:18:de:e8:fd:bf:03:d4:77:7b:78:ba:2d:ea:04:
9b:66:f7:0d:eb:2c:46:fb:81:df:9d:fc:c5:cb:8a:b7:6c:09:
83:dd:94:77:24:8b:45:a0:0f:56:30:ed:fa:9a:33:d5:74:48:
e3:e5:51:9d:9b:61:cb:e5:60:ee:16:3e:02:de:4c:f4:32:94:
ed:32:2a:b3:ae:d1:6b:64:67:0a:9d:a5:cd:f3:1a:1a:1e:d0:
3f:2f:dc:48:e0:a2:a0:2a:f9:13:6c:41:c3:da:2a:a1:6d:a3:
c1:32:2a:03:ba:fb:38:53:db:d1:18:0b:e2:ef:f3:06:68:55:
53:57:8c:d0:f5:7e:ca:e8:ef:d6:53:8f:6d:8f:9f:16:84:7e:
05:5f:cc:f8:b6:09:37:0a:2b:76:67:e1:2c:1f:91:43:72:60:
fe:36:c8:55:6e:a2:bb:0d:e0:f9:a5:42:b5:fc:52:cb:37:70:
3b:f5:02:b3:51:54:9f:c2:c8:55:ad:b1:74:4d:7c:8d:f0:74:
aa:e9:1b:8f:0a:87:21:86:21:04:8a:e6:ee:41:7e:1d:d7:1b:
e2:af:fc:37:4e:ea:fc:68:32:a2:79:8a:20:fa:e9:4f:28:8e:
5b:1a:f5:7d:dc:43:4e:f7:8b:70:d8:df:6a:3e:4d:74:96:b4:
89:97:37:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:41:15 2025 by rpki-client