Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ARw0Ev_NrCcLUmcjI8QmRP0fxxA.roa
File: ARw0Ev_NrCcLUmcjI8QmRP0fxxA.roa (raw, json)
Hash identifier: lkcK3TIuL1dW6LQv5RiD9Js4/I/k3Q3OdDEnA3dKn7Y=
Subject key identifier: 01:1C:34:12:FF:CD:AC:27:0B:52:67:23:23:C4:26:44:FD:1F:C7:10
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 018496F3EA0E5608A14D59D364050033D596
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ARw0Ev_NrCcLUmcjI8QmRP0fxxA.roa
Signing time: Sun 20 Nov 2022 21:31:18 +0000
ROA not before: Sun 20 Nov 2022 21:31:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212049
IP address blocks: 2a06:a005:1083::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:96:f3:ea:0e:56:08:a1:4d:59:d3:64:05:00:33:d5:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Nov 20 21:31:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=011c3412ffcdac270b52672323c42644fd1fc710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:f3:87:3c:95:d5:82:ca:91:4a:83:16:d3:92:
78:fe:77:06:8d:5b:cb:33:7b:f0:86:a6:ab:88:5e:
09:44:62:cf:81:99:ca:14:60:00:83:10:d1:2e:fd:
0b:b2:1c:9e:d3:b4:2e:d2:8b:7f:bb:3c:7e:e0:54:
c6:63:09:8e:16:c5:41:4a:0b:de:09:05:7e:b9:9f:
65:2c:db:4e:49:9e:2a:c6:61:74:05:eb:cd:f1:a7:
3b:6f:0f:3e:75:a5:33:2c:b9:1d:1b:2c:a1:32:ec:
cc:67:b5:a6:4d:b1:2e:de:d5:e2:1f:6d:10:c8:12:
67:97:a1:d2:31:09:bb:86:df:96:b1:ae:8b:cc:95:
55:31:27:91:ea:95:3b:b7:45:8c:a9:b2:ac:35:c3:
42:62:1d:6a:8f:89:e6:fb:3f:76:85:8a:0e:7d:72:
c8:4a:8f:c9:b0:bb:42:3f:19:8a:70:59:0f:98:76:
8e:39:ef:da:18:e5:54:30:20:c5:46:bd:63:a5:cd:
bf:d6:a4:98:66:66:77:ee:df:07:d0:89:e8:b1:4d:
8c:40:a8:17:1f:61:64:c6:af:de:bd:f0:0f:13:af:
29:02:b1:40:3f:88:ed:a5:c7:79:1b:4c:05:9a:cf:
25:3e:94:c0:66:b6:18:60:eb:44:e5:8e:fa:b3:e9:
84:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:1C:34:12:FF:CD:AC:27:0B:52:67:23:23:C4:26:44:FD:1F:C7:10
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ARw0Ev_NrCcLUmcjI8QmRP0fxxA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1083::/48
Signature Algorithm: sha256WithRSAEncryption
48:83:2b:4d:1f:26:e4:d3:81:3e:ec:bf:97:97:d1:16:c7:b4:
da:65:a2:47:d6:4a:a8:f1:ad:29:2d:33:fb:b8:c5:dd:90:83:
7e:27:fb:a7:4e:8e:28:f0:bf:80:b1:36:b0:e5:00:5f:c0:2c:
a6:bd:83:92:2c:36:42:b2:ea:99:00:27:34:a3:3a:fa:31:8f:
fd:77:44:17:55:a9:25:11:cc:77:30:68:5e:d8:71:b7:a1:e1:
2a:cf:d7:d9:f0:eb:86:d7:81:fe:ee:9d:db:d5:f5:53:7f:64:
8b:21:af:84:96:01:de:76:3d:41:2e:e9:69:54:a6:4a:79:62:
bd:44:00:33:ea:d3:f5:03:32:38:7b:02:73:0f:89:a5:d1:f7:
47:96:c0:8d:4d:02:ba:47:90:02:55:3c:db:9b:c2:e4:09:eb:
82:d2:6b:43:87:1e:0a:cb:03:f9:82:25:fa:52:39:64:0c:2b:
67:3f:54:62:ee:60:a9:e3:1e:44:6a:b2:38:11:de:ed:a4:69:
1e:37:0c:71:86:f5:63:0a:5e:98:cc:b6:d2:12:d3:ac:31:1f:
dd:2d:fd:92:b3:7f:81:49:06:30:c6:43:db:6f:60:c1:95:a5:
1a:60:6d:f8:b9:cc:69:6b:44:53:04:b0:58:59:57:bd:8e:e9:
14:ee:b0:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:49:23 2025 by rpki-client