Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/52dddb-495f-41bd-b870-48b42048d7b0/1/mq2U_i-MmzM4TbHHZaWrI03soTs.roa
File: mq2U_i-MmzM4TbHHZaWrI03soTs.roa (raw, json)
Hash identifier: 5fV+/cOMFKkdx1NjYM1BDck3gLFTvf4qmff5Y+zv+/4=
Subject key identifier: 9A:AD:94:FE:2F:8C:9B:33:38:4D:B1:C7:65:A5:AB:23:4D:EC:A1:3B
Certificate issuer: /CN=108d18f820570875b8a2c90fbe0a6b355e0153a6
Certificate serial: 01827860C18E95F470BAAFE8E0592AE0E623
Authority key identifier: 10:8D:18:F8:20:57:08:75:B8:A2:C9:0F:BE:0A:6B:35:5E:01:53:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EI0Y-CBXCHW4oskPvgprNV4BU6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/52dddb-495f-41bd-b870-48b42048d7b0/1/mq2U_i-MmzM4TbHHZaWrI03soTs.roa
Signing time: Sun 07 Aug 2022 12:56:23 +0000
ROA not before: Sun 07 Aug 2022 12:56:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57330
IP address blocks: 2001:67c:2964::/48 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:78:60:c1:8e:95:f4:70:ba:af:e8:e0:59:2a:e0:e6:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=108d18f820570875b8a2c90fbe0a6b355e0153a6
Validity
Not Before: Aug 7 12:56:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9aad94fe2f8c9b33384db1c765a5ab234deca13b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2a:0e:ce:18:e8:ee:2e:c2:ab:1e:60:1d:44:
2c:05:fd:fd:98:f9:b4:4b:40:af:04:27:d6:c7:c9:
02:ef:34:11:78:66:8a:17:c7:57:1c:6c:df:df:ef:
6c:f9:b8:b5:65:94:14:1e:7c:fb:5a:4c:df:92:9f:
de:10:96:a6:f9:53:70:b0:a4:74:d5:97:e4:e6:d5:
d2:cb:43:67:1d:c6:00:07:83:ff:a8:0a:cf:09:c5:
b0:71:6e:45:bd:8e:33:79:5d:13:dd:cd:3d:8a:c9:
56:88:39:79:42:d0:27:aa:9d:3d:dc:a7:2f:7d:59:
f4:e9:c4:73:e9:8a:fa:74:94:d4:1d:b2:50:cd:2c:
75:dc:4c:99:f4:b6:c9:b4:11:73:82:9a:21:88:7d:
82:d9:c1:bd:8c:4a:d9:90:d4:8c:45:75:13:2d:02:
87:62:02:56:34:d8:18:09:14:99:c0:b0:32:64:9a:
eb:11:39:cc:d5:a5:64:c0:3c:9a:69:28:3a:1d:79:
0e:03:8d:cd:65:9f:a8:40:5d:8d:a8:66:66:bc:e9:
31:7b:b5:02:45:ca:6c:b9:7f:3a:74:56:d5:4f:1e:
75:a3:5c:01:2c:2a:6f:82:ed:5d:45:89:79:97:e4:
3c:a7:d0:6a:2d:a9:ec:ef:ef:90:56:2a:10:2a:b5:
67:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:AD:94:FE:2F:8C:9B:33:38:4D:B1:C7:65:A5:AB:23:4D:EC:A1:3B
X509v3 Authority Key Identifier:
keyid:10:8D:18:F8:20:57:08:75:B8:A2:C9:0F:BE:0A:6B:35:5E:01:53:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EI0Y-CBXCHW4oskPvgprNV4BU6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/52dddb-495f-41bd-b870-48b42048d7b0/1/mq2U_i-MmzM4TbHHZaWrI03soTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/52dddb-495f-41bd-b870-48b42048d7b0/1/EI0Y-CBXCHW4oskPvgprNV4BU6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2964::/48
Signature Algorithm: sha256WithRSAEncryption
c3:1b:3f:36:88:5c:26:d0:ad:2c:8c:a4:82:b5:b4:4c:5f:a7:
ae:58:b5:b6:ba:97:3d:d4:22:af:dd:dd:3b:3d:86:21:15:40:
ca:66:6d:57:98:b8:53:19:fe:e3:47:47:98:ec:5c:6f:f1:2d:
54:ca:4f:02:eb:8b:d2:b0:e5:f7:28:2b:b3:02:de:bb:93:b6:
75:c1:d3:cd:15:34:90:0d:c0:4a:c5:99:24:80:61:21:e0:df:
e9:30:84:c7:2c:88:d6:62:98:dd:75:d3:19:79:1a:1e:2d:cf:
8b:3e:5d:92:d4:98:ee:90:f4:58:32:df:ec:bc:d5:ef:9e:97:
09:2a:5d:14:0a:e8:2f:09:b0:ae:82:e8:6d:dc:bd:3b:63:28:
e6:fb:09:80:c6:45:d8:78:ce:b9:4a:be:72:96:03:af:c8:e0:
5e:87:0e:06:98:09:6b:9e:26:e3:46:4d:d1:39:49:fa:a0:61:
64:e3:ca:44:45:dc:e5:88:e4:ed:66:b4:be:7e:f2:af:69:d0:
e4:06:35:ce:a4:48:e3:2b:16:d2:08:3c:1c:d4:20:74:ed:73:
bf:49:a7:ff:ff:ba:7b:76:ff:8e:05:f1:89:d2:0b:b8:4d:86:
e4:eb:c3:14:a8:1d:e7:fd:01:6a:bb:5c:73:c4:34:92:01:4e:
a9:75:8d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 17:32:19 2025 by rpki-client