Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/nVaPr65_LwU9PeMP0AT_Oyu_2MU.roa
File: nVaPr65_LwU9PeMP0AT_Oyu_2MU.roa (raw, json)
Hash identifier: 34JIisQVSq8YrU6YeSixwrmf3+CtFdfEAUhXtmyNEtE=
Subject key identifier: 9D:56:8F:AF:AE:7F:2F:05:3D:3D:E3:0F:D0:04:FF:3B:2B:BF:D8:C5
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 018318C013921E1D0723E549006F424F34A9
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/nVaPr65_LwU9PeMP0AT_Oyu_2MU.roa
Signing time: Wed 07 Sep 2022 16:19:44 +0000
ROA not before: Wed 07 Sep 2022 16:19:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202990
IP address blocks: 2a06:1287:8000::/39 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:18:c0:13:92:1e:1d:07:23:e5:49:00:6f:42:4f:34:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Sep 7 16:19:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9d568fafae7f2f053d3de30fd004ff3b2bbfd8c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:81:41:59:e9:9c:1e:64:9b:49:d9:13:ba:3f:
55:84:76:97:52:8e:8a:ee:c1:1a:b9:1c:0a:f1:e4:
0f:58:30:91:92:df:97:bb:7b:22:b6:e3:fd:21:d0:
ab:6d:19:dd:0e:cc:7e:c0:f0:83:ed:02:e3:19:7b:
95:fd:22:20:90:ca:3e:bb:d2:59:66:d5:f6:49:7f:
6e:9a:75:35:96:f1:99:31:0e:c6:aa:01:b7:ab:8d:
83:d0:36:50:53:be:5c:ef:84:6b:d1:b6:8b:7c:16:
92:9f:50:c1:af:fc:2b:c3:a4:15:5d:b6:db:20:fd:
68:3d:35:f5:ea:99:4d:42:e6:47:be:f9:6a:d5:0c:
68:e2:ea:64:24:59:bb:f3:1a:3e:2b:52:de:59:f3:
77:e2:7c:8a:d7:e5:ea:d3:f3:f6:2c:df:8c:8c:0a:
90:36:92:5f:7f:5b:32:a3:9f:3e:9a:70:44:2c:1b:
ba:cc:bf:4e:99:87:8e:b6:0a:e7:45:67:7f:e9:0e:
fb:00:8f:25:99:a6:46:ff:7a:45:f8:d8:be:ee:51:
a8:98:c6:4c:00:3a:7c:1c:95:41:56:74:8c:f2:b0:
a7:be:bf:c1:24:25:1b:34:74:54:1b:c3:3a:1e:11:
4a:83:bf:b4:fc:6e:62:18:ac:3c:ac:f5:2d:4b:57:
bc:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:56:8F:AF:AE:7F:2F:05:3D:3D:E3:0F:D0:04:FF:3B:2B:BF:D8:C5
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/nVaPr65_LwU9PeMP0AT_Oyu_2MU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1287:8000::/39
Signature Algorithm: sha256WithRSAEncryption
4a:11:92:84:2e:84:81:e5:72:77:28:75:84:0f:0b:03:2a:57:
ab:50:16:a9:df:56:46:4b:89:bc:e6:1a:24:ce:47:71:c1:5a:
02:0c:d1:4d:17:1d:42:4f:0f:01:7c:12:2b:8e:a3:79:1f:31:
28:51:84:4f:cc:30:b0:0b:bf:28:03:bb:6d:2f:89:75:62:21:
a5:95:35:24:e5:5f:fe:4a:dc:8f:fc:9a:26:34:26:ed:3d:73:
3e:be:b5:a2:65:7a:04:4c:05:fd:6f:5f:22:0f:bd:c7:7f:84:
22:cb:e6:33:fb:13:c2:1b:6d:f4:c6:f9:06:34:04:38:49:1a:
cd:02:27:75:1a:cb:f1:d6:21:eb:0f:10:e0:aa:6e:f5:c5:23:
89:ee:2e:f9:53:98:98:a8:8e:ef:a2:18:65:6e:f6:49:a8:76:
39:07:54:43:57:26:24:6f:ba:01:16:9d:77:b7:c2:6d:71:f4:
d5:99:7e:9f:b2:a6:f0:3a:c9:18:de:69:a0:9f:23:08:3f:24:
70:3f:8f:d4:aa:01:df:a2:a0:5a:8a:67:69:69:63:fa:82:05:
26:08:89:ff:cc:15:80:4a:3c:4c:f2:bc:f5:aa:2b:f4:7c:e5:
73:10:d0:d8:4b:e6:55:05:22:00:14:42:ba:24:23:b8:f9:ca:
d1:5a:39:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 15:51:09 2025 by rpki-client