Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/9zp1H2RKmNY1QeA2QKc5FEycL-8.roa
File: 9zp1H2RKmNY1QeA2QKc5FEycL-8.roa (raw, json)
Hash identifier: hBkLnme8LbI0vqfj1RbYiMXJcKqrDmKPtqNH65oTDFI=
Subject key identifier: F7:3A:75:1F:64:4A:98:D6:35:41:E0:36:40:A7:39:14:4C:9C:2F:EF
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0181DBAC31B925E138FEAAF83C08169B6F33
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/9zp1H2RKmNY1QeA2QKc5FEycL-8.roa
Signing time: Fri 08 Jul 2022 02:38:23 +0000
ROA not before: Fri 08 Jul 2022 02:38:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 139989
IP address blocks: 2a06:a005:a10::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:db:ac:31:b9:25:e1:38:fe:aa:f8:3c:08:16:9b:6f:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jul 8 02:38:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f73a751f644a98d63541e03640a739144c9c2fef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:5f:91:91:f8:43:8c:54:92:3a:2e:84:a1:03:
98:ff:f3:f8:03:bf:04:8b:55:57:1a:fc:11:6c:81:
f7:48:fc:e0:25:eb:31:c1:d0:55:1d:14:e3:9d:29:
2b:0a:65:7c:7f:f1:c7:db:7c:2d:08:ff:1d:89:4a:
ee:6d:76:69:4a:83:25:76:1d:2b:cd:cb:f6:ad:5f:
38:8e:c7:16:ac:d3:4a:d4:05:24:80:96:9e:58:e9:
f5:d8:d9:4e:81:69:89:65:68:42:57:fb:b8:57:b0:
c4:4d:f0:48:4b:05:7f:4d:02:d2:3d:6d:c4:be:5a:
e7:5f:84:6d:63:f3:d2:4f:09:a8:16:25:de:2b:b5:
24:75:bf:f8:d2:48:fb:b5:7f:3d:33:3e:ba:12:39:
d9:bf:19:34:06:6d:ff:13:67:c5:1c:46:d6:1b:ec:
d4:9f:38:f8:28:7d:d4:b0:64:86:e8:85:d0:d6:68:
c0:4e:37:38:09:d9:96:1d:0e:39:2f:33:f9:67:c8:
55:99:4d:f9:82:bd:8f:9f:ff:4a:99:6b:05:f6:ed:
09:44:bc:f5:87:10:2e:ea:1b:f7:06:89:46:dc:7f:
32:c8:34:a1:63:14:ee:08:8c:56:11:00:f9:8d:2a:
4f:5c:94:dd:0b:45:e7:30:f5:d1:3c:e5:cb:a2:09:
19:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:3A:75:1F:64:4A:98:D6:35:41:E0:36:40:A7:39:14:4C:9C:2F:EF
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/9zp1H2RKmNY1QeA2QKc5FEycL-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:a10::/48
Signature Algorithm: sha256WithRSAEncryption
a0:1c:89:33:c0:71:cb:dd:30:df:83:18:c3:48:8c:bd:b8:4b:
bc:4f:7d:a6:c8:0f:9b:71:3d:3a:b6:b0:f1:81:24:80:ff:2d:
2f:83:54:a4:8d:e2:29:51:97:15:9f:1e:8b:9c:ef:00:dd:57:
77:e7:8f:7f:65:83:c6:fa:41:f5:2b:a7:ed:cb:2e:24:f6:90:
fd:5c:0a:6c:bc:6f:c0:e5:97:63:58:d9:03:0c:aa:7a:15:02:
04:45:20:eb:cb:48:e8:3c:9a:99:76:fb:11:b4:41:70:20:05:
09:76:df:27:31:99:bc:4e:e1:16:c3:a6:cd:9c:73:75:74:f2:
a0:f4:f9:3b:39:21:4b:69:04:49:57:7e:0f:b3:d2:2a:05:28:
89:cd:ee:25:ee:19:92:01:52:ea:a6:33:ae:30:be:c4:c3:72:
fe:cb:14:f5:2b:46:60:d4:ce:d3:32:a3:d9:a9:c7:21:1f:5f:
9c:39:81:43:a8:d4:a7:bb:f8:ca:02:b9:2f:76:6a:fc:f5:29:
8a:1a:9b:33:fc:e5:3b:0f:6e:3f:58:c4:96:32:fc:3a:68:fa:
c6:bb:ca:3c:18:7e:ac:cf:05:6d:25:49:34:5a:58:8c:64:76:
cd:6e:36:73:54:31:86:76:4d:32:0f:64:6c:74:1d:f4:f3:4d:
43:f9:7b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 01:54:10 2025 by rpki-client