Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/c176a7-0a8d-457b-94a7-ffba8dc6d33c/1/pCtRKxSfxVqF5m9mFq3_DukdJBc.roa
File: pCtRKxSfxVqF5m9mFq3_DukdJBc.roa (raw, json)
Hash identifier: 1I8LMPrWAm2oLFYzreNOGdAdVTvz+P3nTZOASccwaqw=
Subject key identifier: A4:2B:51:2B:14:9F:C5:5A:85:E6:6F:66:16:AD:FF:0E:E9:1D:24:17
Certificate issuer: /CN=c91bbcc5a4e5cf9a2d28e728dfbc130f688bb8dd
Certificate serial: 09D2112B
Authority key identifier: C9:1B:BC:C5:A4:E5:CF:9A:2D:28:E7:28:DF:BC:13:0F:68:8B:B8:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yRu8xaTlz5otKOco37wTD2iLuN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/c176a7-0a8d-457b-94a7-ffba8dc6d33c/1/pCtRKxSfxVqF5m9mFq3_DukdJBc.roa
Signing time: Sat 01 Jan 2022 09:55:52 +0000
ROA not before: Sat 01 Jan 2022 09:55:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48518
IP address blocks: 2a04:9ac0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 164761899 (0x9d2112b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c91bbcc5a4e5cf9a2d28e728dfbc130f688bb8dd
Validity
Not Before: Jan 1 09:55:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a42b512b149fc55a85e66f6616adff0ee91d2417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b4:91:36:7f:3c:80:9c:c5:95:01:78:b6:06:
86:8f:d6:50:97:a6:5f:16:c9:39:51:ba:b1:5d:e5:
48:ac:b9:48:97:8a:db:0c:ed:20:d2:08:3c:04:c7:
a1:27:d8:1b:6d:b3:8a:9b:47:bc:7f:ff:41:bf:1c:
5f:bf:7f:20:a2:3c:02:5c:f2:40:17:40:e1:e5:40:
bd:4f:c5:70:58:83:07:dd:80:5a:41:19:7d:16:ab:
7c:7a:b3:4c:c8:9b:e2:d5:79:b0:61:ca:8a:3e:59:
ab:3d:6e:cf:7d:59:87:e3:ac:ea:a8:e6:37:da:9f:
10:72:b9:0a:e6:8c:28:73:46:80:b7:09:bc:b3:49:
cf:d5:63:c8:33:d1:1c:4b:27:a2:6d:b0:28:d4:3f:
60:62:f3:44:11:42:55:a3:1c:88:49:b7:c0:31:a1:
28:99:e4:2b:51:31:dc:3a:e6:c0:b1:69:74:e9:28:
a4:73:0d:72:54:5f:44:cd:9d:66:0e:f3:15:68:31:
33:ba:97:80:42:13:9d:7c:cd:8c:37:6b:89:2f:91:
f5:5e:14:21:b3:b2:37:3b:1b:14:48:6d:76:fb:36:
55:15:64:2d:2c:4b:08:5f:5a:a6:59:73:8c:b5:fb:
34:db:ff:39:26:34:e8:23:29:36:e8:d1:aa:d3:0f:
90:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:2B:51:2B:14:9F:C5:5A:85:E6:6F:66:16:AD:FF:0E:E9:1D:24:17
X509v3 Authority Key Identifier:
keyid:C9:1B:BC:C5:A4:E5:CF:9A:2D:28:E7:28:DF:BC:13:0F:68:8B:B8:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yRu8xaTlz5otKOco37wTD2iLuN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c176a7-0a8d-457b-94a7-ffba8dc6d33c/1/pCtRKxSfxVqF5m9mFq3_DukdJBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c176a7-0a8d-457b-94a7-ffba8dc6d33c/1/yRu8xaTlz5otKOco37wTD2iLuN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:9ac0::/32
Signature Algorithm: sha256WithRSAEncryption
07:d6:0a:d9:ae:bb:98:b2:de:ae:40:4d:39:dd:3a:3a:7c:0e:
a4:e2:bd:75:ad:9e:c7:55:8f:64:60:3a:11:a2:72:7e:fd:31:
83:39:16:a3:90:c1:cb:eb:25:16:34:b9:6d:eb:72:b2:fb:b5:
40:28:f1:2e:7a:50:d2:d7:47:37:e8:2a:ce:67:7b:72:f1:e5:
64:bf:b8:9d:79:9f:fd:50:08:fb:80:f3:19:13:88:56:93:bd:
33:d5:7b:05:82:5c:be:7f:77:77:b9:d7:37:3b:8e:2c:8e:51:
91:e7:16:cc:1c:7f:1a:3a:0a:2e:3d:f6:de:dd:d4:27:a1:8f:
5c:fa:0c:5a:68:a2:5f:ae:c5:c1:b9:a8:65:e3:7d:f5:ec:c8:
e5:2c:da:ed:ae:51:cb:cd:1e:8c:15:8e:2a:99:14:d1:c5:1c:
c4:b0:47:7f:5e:9d:09:98:f8:41:22:19:23:63:15:83:f6:b6:
ab:f1:1f:a1:29:34:2b:05:c2:0a:31:f6:fe:1e:ba:02:b9:5d:
93:3a:7b:66:e4:75:cf:17:61:a4:69:8c:28:7c:55:4a:37:98:
47:fc:33:17:d4:15:44:fd:12:f2:58:3f:fd:86:8c:71:32:4e:
b9:e9:ce:5f:3b:62:89:24:0d:be:9d:45:e7:52:bd:9c:7f:7a:
22:5a:80:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:49:30 2025 by rpki-client