Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/_Knw2Ay5wDe789XAIxsUStSoxhE.roa
File: _Knw2Ay5wDe789XAIxsUStSoxhE.roa (raw, json)
Hash identifier: r5mEnj71RNcRMfpAT8hm54NEjzgcBMizuHw4kYjz5x4=
Subject key identifier: FC:A9:F0:D8:0C:B9:C0:37:BB:F3:D5:C0:23:1B:14:4A:D4:A8:C6:11
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0183D5FC2F2C2AF2BE4F97E94BA53F8DA275
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/_Knw2Ay5wDe789XAIxsUStSoxhE.roa
Signing time: Fri 14 Oct 2022 10:13:37 +0000
ROA not before: Fri 14 Oct 2022 10:13:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213105
IP address blocks: 2a06:a005:18e0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d5:fc:2f:2c:2a:f2:be:4f:97:e9:4b:a5:3f:8d:a2:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Oct 14 10:13:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fca9f0d80cb9c037bbf3d5c0231b144ad4a8c611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:8f:d9:08:ab:c1:fe:ad:e4:c7:51:0c:19:8b:
8e:f6:20:09:46:07:f3:ec:7d:c6:cd:74:88:ba:2a:
45:8b:2d:5d:47:13:6d:f4:9c:7c:b1:f4:57:61:32:
b8:58:0b:23:1b:1d:3c:3f:1d:88:ba:bd:bb:a7:8a:
3b:f9:00:8a:e3:bc:26:62:53:b2:f8:a7:7e:4c:5f:
7f:d2:ba:94:5c:12:5f:bf:fa:34:84:b2:42:83:54:
be:5e:b5:b8:3a:45:93:46:ee:13:6e:74:f9:4d:85:
09:9c:f4:7b:9a:7f:6d:75:ce:8b:a2:1a:8b:1d:72:
dd:05:d0:31:08:b9:a9:0a:a8:a3:a2:63:2a:2d:f0:
b2:1c:68:19:97:94:29:09:bd:da:5b:59:d5:c6:26:
b4:f5:09:88:72:77:4c:15:d9:52:27:45:c2:7d:aa:
9d:e3:64:f8:49:05:49:03:8a:48:3a:49:2b:af:50:
be:a5:4a:1b:f1:de:d2:22:95:05:bd:10:e7:d3:9b:
9f:e2:8c:f9:75:72:2c:23:72:46:71:fd:64:9e:51:
f6:6d:04:d0:5f:c1:a2:36:d4:82:fb:4b:ce:36:0f:
80:14:95:6c:28:c7:0a:7b:79:92:e9:6c:ca:f8:ec:
30:88:dc:23:2d:30:c4:e7:26:82:5f:be:1a:02:45:
56:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:A9:F0:D8:0C:B9:C0:37:BB:F3:D5:C0:23:1B:14:4A:D4:A8:C6:11
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/_Knw2Ay5wDe789XAIxsUStSoxhE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:18e0::/44
Signature Algorithm: sha256WithRSAEncryption
23:b1:62:65:16:66:63:2d:9f:cd:a7:b9:c1:66:0e:e0:f6:15:
53:35:30:b8:53:da:0b:5b:a3:6e:2b:a7:b9:bf:1b:ac:45:cf:
ea:d6:c3:99:17:dd:1d:1f:7c:66:e8:39:fd:90:e4:bc:5b:df:
cc:35:0e:98:55:75:16:38:fe:90:b5:87:e9:46:5b:79:78:ff:
f2:9b:c3:4c:c7:06:53:1a:de:3d:f1:54:00:fa:63:51:bd:e1:
54:2c:dd:d4:a5:12:82:53:ed:51:84:b3:f2:02:bb:ce:2d:ac:
96:02:b8:69:36:02:23:31:33:35:1f:71:c6:86:77:77:7c:48:
60:e0:fa:b5:2a:d5:19:b5:d1:04:60:84:7a:88:32:78:df:97:
73:ab:2d:51:a3:0b:10:68:c9:1d:27:1b:28:3e:32:29:88:ae:
12:6b:7a:88:11:cf:96:86:29:c8:d6:dd:d5:70:c4:c3:27:f1:
8d:53:4f:35:a8:6f:f0:c7:88:73:9d:ca:74:a3:02:26:3e:32:
82:ff:b7:84:54:e1:7b:e0:ac:19:76:f7:ef:77:55:98:c1:aa:
a5:82:ca:0b:7c:3d:fd:56:05:bb:10:cf:4c:ed:b5:92:6e:37:
cc:91:a7:e5:31:e8:73:ee:29:95:76:e1:5d:3d:3d:a1:a2:25:
00:3e:ca:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:21:15 2025 by rpki-client