Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/mN9n5JP5rEm0-pCzMxqsgjpeS7s.roa
File: mN9n5JP5rEm0-pCzMxqsgjpeS7s.roa (raw, json)
Hash identifier: Dwl/3AF8PmhZHIQU1pFz5S6TdvuSrOe9jIPTIZAfS7c=
Subject key identifier: 98:DF:67:E4:93:F9:AC:49:B4:FA:90:B3:33:1A:AC:82:3A:5E:4B:BB
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0184A973EFDCDB4EC2FFAA265EBEF1DAF402
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/mN9n5JP5rEm0-pCzMxqsgjpeS7s.roa
Signing time: Thu 24 Nov 2022 11:44:18 +0000
ROA not before: Thu 24 Nov 2022 11:44:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51856
IP address blocks: 2a06:a005:1310::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a9:73:ef:dc:db:4e:c2:ff:aa:26:5e:be:f1:da:f4:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Nov 24 11:44:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=98df67e493f9ac49b4fa90b3331aac823a5e4bbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:7b:a6:ce:50:01:6a:1d:52:1a:f9:a7:d7:33:
a5:42:3e:9c:ca:4b:7f:80:ce:9a:e5:e6:0b:86:8d:
10:f4:71:8f:de:ac:87:7e:4c:7f:ea:12:0d:13:57:
ea:a4:91:be:ed:71:76:eb:c5:0b:fc:f5:2e:24:d4:
f1:e3:15:98:45:49:86:a6:33:b0:e6:ff:3d:3c:ce:
df:14:d4:39:3d:5c:b4:18:bf:84:7f:a9:03:a0:a3:
4f:9a:0b:2b:f1:a5:d9:6e:e1:34:57:ed:c4:ff:82:
3d:28:6e:69:71:55:a0:e0:e4:7e:bf:17:c2:ab:ae:
ae:76:81:c8:be:3b:c0:50:2f:bc:8e:86:34:a2:31:
81:15:40:2d:c7:81:34:04:34:2a:82:f6:bc:8f:0d:
49:6f:5b:c8:16:ba:f4:9c:84:a7:78:ab:3d:86:b9:
14:66:0e:b0:a1:17:74:ee:f1:51:60:ee:23:f8:09:
94:ed:e7:e9:17:40:1e:20:53:21:d2:ba:6f:eb:1b:
59:3f:64:e1:46:48:dc:b5:d9:ad:34:9c:6a:59:a3:
b6:86:58:0d:a9:96:91:b0:1f:08:41:96:b3:f1:4f:
fe:0f:60:41:8a:22:2d:66:44:4c:3c:0c:05:6f:da:
09:4b:2b:6c:66:62:9e:4b:7c:cc:26:7d:b7:c1:17:
ac:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:DF:67:E4:93:F9:AC:49:B4:FA:90:B3:33:1A:AC:82:3A:5E:4B:BB
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/mN9n5JP5rEm0-pCzMxqsgjpeS7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1310::/44
Signature Algorithm: sha256WithRSAEncryption
98:7c:78:dc:e9:8a:cf:bb:fa:bf:cb:47:c0:0f:52:0e:a8:5c:
c2:69:95:d6:93:6c:77:7d:a6:37:77:2f:b5:b4:08:9f:2e:72:
cf:08:98:c7:28:d1:f5:11:63:d4:9b:50:50:80:9b:71:90:88:
58:f3:dd:d7:f4:1f:e5:36:4a:08:88:f2:9c:82:cb:94:9d:fc:
8f:a3:76:2f:0e:11:dd:f5:49:af:54:52:db:43:e3:91:db:a3:
ed:d6:e8:9c:d4:6b:4e:cf:66:73:68:1c:7a:02:6b:d3:50:9c:
d2:8a:c4:f2:09:12:22:1a:60:9f:c6:08:57:3f:ac:f8:47:f3:
fe:8f:c3:18:0d:c7:cc:36:af:65:8e:b3:77:fe:90:a2:92:de:
5b:09:86:b1:15:ba:69:f4:da:64:57:0e:b5:b7:01:1b:2e:95:
79:0f:a4:6c:7e:6a:6a:4a:a2:49:bb:e5:ed:8e:14:cf:c3:5c:
b4:e4:06:8d:e3:a8:72:c9:37:77:94:9a:9a:50:6d:41:b5:9a:
70:e7:60:fa:44:da:6c:b6:9a:7c:14:bc:41:d1:84:a4:f4:77:
91:7c:ce:46:11:b9:7f:fe:e6:4d:4b:1d:39:2d:6d:f8:c7:37:
53:ba:9c:6e:80:64:8e:24:81:28:f7:46:ef:f7:51:11:cd:82:
73:96:91:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 18:57:38 2025 by rpki-client