Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/9vfoR-Uvq7uQmjkREjzH-ocyQ8s.roa
File: 9vfoR-Uvq7uQmjkREjzH-ocyQ8s.roa (raw, json)
Hash identifier: dUU+xQvQSiktXQVbZt08+WHgMaWTA1uDewJZ6m3LlR0=
Subject key identifier: F6:F7:E8:47:E5:2F:AB:BB:90:9A:39:11:12:3C:C7:FA:87:32:43:CB
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0184E702A9E61D5D2AD5334165E279B8B305
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/9vfoR-Uvq7uQmjkREjzH-ocyQ8s.roa
Signing time: Tue 06 Dec 2022 10:37:02 +0000
ROA not before: Tue 06 Dec 2022 10:37:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212532
IP address blocks: 2a0a:6040:f00::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e7:02:a9:e6:1d:5d:2a:d5:33:41:65:e2:79:b8:b3:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Dec 6 10:37:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f6f7e847e52fabbb909a3911123cc7fa873243cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:5b:cf:d8:48:10:ed:0b:b2:1a:50:49:84:e8:
3c:11:16:35:e0:1f:fe:55:5f:63:d1:80:ec:67:71:
e0:fc:f0:b8:c8:e0:6f:99:a4:2e:ab:8d:37:36:70:
d3:25:b9:2f:35:d2:cd:a4:f5:3f:77:1c:ff:1e:c1:
ad:09:5a:6f:24:70:b7:45:8c:04:2f:96:9b:44:38:
1a:e5:88:ad:5a:5e:6b:32:95:56:de:6d:e0:0d:61:
e8:59:bd:c2:0d:1d:a3:c1:0b:8c:cf:31:c8:93:24:
06:b1:55:db:50:93:b4:d8:84:b5:56:b5:5f:1b:44:
fb:42:84:8b:68:6a:e2:b6:a1:1f:81:60:8a:a4:d5:
d4:02:21:51:64:ce:6b:88:65:0e:e2:f9:9b:ac:19:
0e:dc:4a:c1:d3:22:79:4b:a1:35:93:bf:46:5b:68:
b6:29:9c:de:a5:d4:6d:24:47:b9:9f:e5:32:17:59:
e3:bb:24:84:52:0e:d4:0f:50:ea:93:e6:26:8c:3e:
8d:6e:f6:03:39:8b:8a:4e:8b:bf:6f:90:4f:75:d2:
cc:63:9b:a4:1d:23:92:cb:99:80:89:ae:75:a1:3a:
86:55:2f:fa:6c:fb:ac:b1:13:c8:04:27:1f:f7:60:
e5:3d:ea:11:cd:7e:22:be:33:a7:93:70:c1:68:58:
22:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:F7:E8:47:E5:2F:AB:BB:90:9A:39:11:12:3C:C7:FA:87:32:43:CB
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/9vfoR-Uvq7uQmjkREjzH-ocyQ8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:f00::/40
Signature Algorithm: sha256WithRSAEncryption
4f:bd:b5:1d:d6:b8:0e:0f:76:31:5d:2b:d4:55:d7:4d:61:0a:
89:b9:5b:d8:53:e9:7c:11:84:06:de:f0:69:91:ba:83:28:67:
9c:8e:b9:c0:24:12:49:d7:48:f9:9f:d0:e6:23:f1:3f:93:8e:
e3:47:b9:e3:5f:fd:0e:dc:e0:15:28:8f:ce:94:4e:f2:e2:36:
4a:da:35:53:f1:3f:32:e2:dd:7a:1e:a3:32:7b:ac:c2:1e:ca:
91:13:ad:c7:71:3d:6d:f9:8b:35:2e:33:cf:bb:a0:22:1c:69:
e5:bc:84:4c:29:dd:dd:7a:3e:25:2d:4b:7f:4b:6d:46:8c:e2:
54:89:25:21:c0:9b:d7:9a:20:94:41:e8:14:ac:f8:7c:9b:69:
13:2d:71:57:c2:bc:1f:b1:72:88:62:2e:0c:f2:b5:44:97:f9:
7f:85:f0:ff:97:59:d7:a2:5f:4d:3b:64:5d:62:6e:cc:b4:29:
ae:c2:8d:bd:92:9e:20:1e:25:89:a6:b2:55:f7:a6:24:ad:e0:
88:fc:a8:49:9c:c9:c7:ee:9c:94:cb:b4:87:0f:8c:e4:71:8d:
3d:b8:a3:48:dd:d1:dc:77:79:8e:bc:81:4c:88:9d:b9:7b:fc:
e3:e5:ac:c4:d1:e9:85:84:54:90:03:c5:e4:8b:70:74:0d:6b:
af:1a:01:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 09:50:53 2025 by rpki-client