Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/s2C9MCTQ6hmtYNvDEvk9AtpDH54.roa
File: s2C9MCTQ6hmtYNvDEvk9AtpDH54.roa (raw, json)
Hash identifier: M9auivOt6H8lUCRe+H9qUIZNT0zOO9hxj5ugYTvX3lg=
Subject key identifier: B3:60:BD:30:24:D0:EA:19:AD:60:DB:C3:12:F9:3D:02:DA:43:1F:9E
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0183001F6EFA02DE02135EE3AB38DA998EB9
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/s2C9MCTQ6hmtYNvDEvk9AtpDH54.roa
Signing time: Fri 02 Sep 2022 21:33:23 +0000
ROA not before: Fri 02 Sep 2022 21:33:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203145
IP address blocks: 2a06:a005:a0f::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:00:1f:6e:fa:02:de:02:13:5e:e3:ab:38:da:99:8e:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Sep 2 21:33:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b360bd3024d0ea19ad60dbc312f93d02da431f9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:dc:80:f0:4e:af:eb:b0:e9:7c:51:bb:31:8b:
6a:da:e4:28:40:b4:48:3c:c3:07:f2:eb:ce:00:38:
cf:bc:b5:60:46:ec:ca:2e:ca:7d:65:34:09:cf:42:
e2:ca:57:4e:35:9e:8c:48:56:73:8e:0c:69:d7:18:
22:e0:70:4b:bf:42:a0:55:57:42:7b:aa:7f:95:bd:
74:31:17:22:86:fb:9c:26:df:3e:f3:28:ea:fd:cb:
24:57:84:b3:cf:b7:69:58:fb:95:5f:e9:da:3c:cf:
7f:b8:7e:47:06:b2:ce:6c:d6:99:10:ab:9d:de:ad:
b0:d9:cb:e7:a9:61:7c:61:a3:77:a5:48:9a:ed:d6:
db:e1:21:7d:ce:81:c9:ef:bf:ac:51:db:27:a3:d5:
7a:41:55:3e:0b:96:ac:1f:7f:e8:08:90:91:97:d6:
e3:ef:d4:66:92:64:bf:6e:a2:0f:bc:14:1e:62:12:
61:7c:1c:f5:b4:2f:16:31:30:04:7e:08:b1:f9:8f:
5d:f9:94:21:98:75:73:00:0f:dc:d2:cf:98:44:93:
97:ab:7e:7a:5b:e3:ed:2f:f2:ea:4d:28:a7:f4:0d:
59:bd:47:57:a8:09:2b:53:a8:25:a5:30:74:2e:37:
19:23:2d:78:5d:da:ec:62:be:f1:a7:d8:c5:79:da:
b3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:60:BD:30:24:D0:EA:19:AD:60:DB:C3:12:F9:3D:02:DA:43:1F:9E
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/s2C9MCTQ6hmtYNvDEvk9AtpDH54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:a0f::/48
Signature Algorithm: sha256WithRSAEncryption
7d:bc:82:bd:a9:65:b1:8d:09:34:d3:3c:e2:80:c1:8a:0f:76:
e8:1e:b9:b7:17:80:83:6f:e5:f6:82:7f:42:b1:c3:1e:9d:bb:
04:1f:4b:ca:ec:06:4e:15:a1:53:1f:f6:84:4f:d6:81:a4:bd:
f6:c6:b5:fb:70:39:e6:8b:65:d4:51:d0:07:c2:91:f2:87:09:
f2:68:a4:c2:3e:ae:ef:b6:59:be:09:53:70:e8:26:78:b5:03:
ec:e2:bd:9c:7f:ca:85:de:2e:87:be:d9:9b:1c:7d:a0:e1:ae:
8e:10:62:aa:8b:b4:3a:e5:7b:72:6a:98:82:83:2c:61:0a:ab:
b4:da:14:ae:8e:1b:21:ae:6a:06:e7:22:4f:fa:77:cf:64:e1:
1b:f3:ed:22:fb:5d:40:98:39:d4:ca:07:bf:81:3c:a5:6e:63:
6f:f6:9b:d8:9c:0b:5d:f3:ca:17:71:61:11:4f:c5:b5:64:a7:
90:52:39:a4:1f:d8:be:18:e6:c2:13:76:e6:a1:21:57:b5:96:
c7:20:30:f1:73:45:32:02:d8:07:10:bf:f6:1b:75:c9:57:e9:
68:93:ab:af:18:3b:cb:49:ce:46:b5:14:17:91:d4:73:89:48:
0a:e3:58:d1:c0:51:33:0f:16:f4:7f:f0:c0:db:10:83:34:9e:
33:aa:44:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:46:24 2025 by rpki-client