Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/9ba66c-bee7-44c9-82e5-d95a5155dd02/1/n-lrFRPeAVzngpSgMVLvuKlUkkA.roa
File: n-lrFRPeAVzngpSgMVLvuKlUkkA.roa (raw, json)
Hash identifier: EF4B2kPeJtuo+nZoMfiyCtgNoMWZ00ctT65WVHmGknM=
Subject key identifier: 9F:E9:6B:15:13:DE:01:5C:E7:82:94:A0:31:52:EF:B8:A9:54:92:40
Certificate issuer: /CN=11466326406436e31478b7bca2dda16c96d5a964
Certificate serial: 018572C38BE8D1E4827FB925CB7AC538BA0B
Authority key identifier: 11:46:63:26:40:64:36:E3:14:78:B7:BC:A2:DD:A1:6C:96:D5:A9:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EUZjJkBkNuMUeLe8ot2hbJbVqWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/9ba66c-bee7-44c9-82e5-d95a5155dd02/1/n-lrFRPeAVzngpSgMVLvuKlUkkA.roa
Signing time: Mon 02 Jan 2023 13:54:55 +0000
ROA not before: Mon 02 Jan 2023 13:54:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207267
IP address blocks: 2a0f:9247::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:c3:8b:e8:d1:e4:82:7f:b9:25:cb:7a:c5:38:ba:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11466326406436e31478b7bca2dda16c96d5a964
Validity
Not Before: Jan 2 13:54:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9fe96b1513de015ce78294a03152efb8a9549240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:30:60:f6:7b:e9:72:01:ba:90:a6:7e:32:a8:
03:4e:e2:8f:2f:37:a9:5a:18:53:3b:d7:a4:0a:7a:
ec:ad:bb:8d:12:b7:a9:18:77:a0:c2:68:c2:a6:ca:
01:33:10:0c:17:d8:96:9d:91:99:ea:0f:e5:2b:58:
dc:11:fa:52:c7:69:b0:b7:88:bc:26:c1:4d:90:50:
92:15:a9:70:ec:75:f0:e5:23:b3:25:0b:e0:00:dd:
cb:dd:80:9f:77:5c:b3:c2:dd:35:71:06:2e:79:8c:
0a:51:b5:a7:90:81:bd:8a:a0:58:e2:05:02:e6:60:
e2:ed:a6:db:0c:50:c1:d4:25:c7:ba:77:8e:1c:a6:
8e:bd:7e:a7:f9:7c:fd:b7:16:30:82:ce:ff:fa:d2:
a5:a4:5f:96:c1:f2:03:f8:ec:13:77:31:a3:f1:83:
54:aa:a7:8d:35:f5:36:c9:26:c9:ac:9f:70:18:77:
cc:5e:d3:61:e0:8b:30:96:04:e8:fa:97:a7:ce:4e:
16:42:00:4f:4b:2f:b7:fd:bb:0d:9c:3f:2d:e1:6a:
a9:8c:56:e2:5b:d8:57:8f:09:c1:04:7d:c6:8a:3d:
10:74:9e:4e:49:d4:46:d1:53:bd:97:ee:3e:bf:e7:
3c:b5:76:64:f0:eb:75:2c:f9:c8:d0:6d:25:3c:f6:
ea:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E9:6B:15:13:DE:01:5C:E7:82:94:A0:31:52:EF:B8:A9:54:92:40
X509v3 Authority Key Identifier:
keyid:11:46:63:26:40:64:36:E3:14:78:B7:BC:A2:DD:A1:6C:96:D5:A9:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EUZjJkBkNuMUeLe8ot2hbJbVqWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/9ba66c-bee7-44c9-82e5-d95a5155dd02/1/n-lrFRPeAVzngpSgMVLvuKlUkkA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/9ba66c-bee7-44c9-82e5-d95a5155dd02/1/EUZjJkBkNuMUeLe8ot2hbJbVqWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9247::/44
Signature Algorithm: sha256WithRSAEncryption
20:f4:38:96:a0:21:37:eb:a5:0c:b7:93:40:27:cd:0e:97:1e:
51:86:03:d0:b7:e4:d4:9e:6e:6e:44:59:ff:fb:a2:c7:1d:d2:
8d:d9:5a:46:61:43:f0:88:06:dc:b7:b9:5c:82:95:73:1b:20:
56:61:79:28:bb:ce:8e:f1:a9:56:a3:d4:e0:e9:00:d1:da:98:
e2:32:61:cc:74:1f:26:93:da:2f:8f:fe:f5:97:30:0e:3c:06:
2a:fb:f1:63:ef:cf:f4:f6:5e:86:24:c9:7a:e4:91:6c:e0:18:
d0:a4:ba:b9:bf:fe:ae:55:c6:8b:a6:ec:b7:2b:26:be:69:79:
e4:51:3a:da:da:a1:ab:c2:10:eb:a8:0c:ac:f4:6c:74:24:77:
09:2f:14:e7:1f:46:e5:08:ea:47:87:eb:74:fa:54:3b:21:64:
42:fd:b2:a7:c0:01:8d:12:3d:90:5d:69:88:5d:cc:18:ab:ae:
9b:d5:af:45:9d:f9:18:66:31:c6:cd:9c:96:53:78:ee:ca:03:
11:7b:27:6f:07:94:b9:3d:bf:9b:f5:16:22:9f:8a:c1:cf:a7:
ff:c2:d8:06:b3:99:dd:dc:83:a9:6b:52:39:64:eb:bc:5d:db:
54:59:9a:28:70:1a:64:82:a5:b8:f8:6a:71:1c:08:62:b4:aa:
af:ae:d6:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:59:35 2025 by rpki-client