Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/GQx65b_MSA8yYVQfBJCtwS16ShI.roa
File: GQx65b_MSA8yYVQfBJCtwS16ShI.roa (raw, json)
Hash identifier: 1L4w2+SW5X1Ew+eLLSRQLouK3/oT5HKHzxkJ/c1jQm0=
Subject key identifier: 19:0C:7A:E5:BF:CC:48:0F:32:61:54:1F:04:90:AD:C1:2D:7A:4A:12
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01848356F502AAAA042A9F524A00E10E6C20
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/GQx65b_MSA8yYVQfBJCtwS16ShI.roa
Signing time: Thu 17 Nov 2022 02:07:04 +0000
ROA not before: Thu 17 Nov 2022 02:07:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 150249
IP address blocks: 2a06:a005:2290::/44 maxlen: 48
2a06:a005:21a0::/44 maxlen: 48
2a06:a005:1190::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:83:56:f5:02:aa:aa:04:2a:9f:52:4a:00:e1:0e:6c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Nov 17 02:07:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=190c7ae5bfcc480f3261541f0490adc12d7a4a12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7b:71:b1:18:d0:ac:83:a5:10:d9:91:33:db:
4d:88:86:81:82:2e:a7:2e:88:06:ae:04:18:74:eb:
91:5c:ff:3f:88:f2:3e:c2:81:be:7a:42:2f:49:b9:
97:55:6f:47:fd:0b:7f:5a:ae:60:aa:29:fb:48:4a:
67:20:ed:20:b1:72:8d:bc:68:69:97:19:94:fd:63:
a3:f0:7c:5c:4c:e5:62:e0:94:58:17:b9:54:30:78:
75:4c:ea:85:4a:ac:f1:f3:7a:d7:89:4d:b4:ad:9d:
a7:3e:d1:4e:14:e7:93:39:fc:01:ba:39:be:07:46:
56:70:69:3f:81:52:a6:04:47:07:84:58:b8:19:d5:
df:13:ad:d4:79:b4:17:e5:46:ac:6a:e0:6f:ac:26:
39:be:52:9e:58:9b:bc:44:80:d2:8e:de:f6:ff:12:
5e:03:8c:61:d7:99:ee:ab:5e:83:1d:7f:c4:cd:3e:
e7:15:bc:d5:f4:36:34:9c:8e:7f:e8:e6:d0:4d:ed:
4e:bd:d5:4c:1a:a1:f1:39:10:e9:24:c7:cd:fc:9d:
aa:e7:a8:9c:63:6b:ac:63:b5:21:45:3b:16:de:de:
cb:01:a2:a5:a6:08:12:ab:6e:5a:46:b8:d5:28:60:
89:14:4c:f2:11:1a:ad:57:d7:59:dc:e3:1f:af:33:
f9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:0C:7A:E5:BF:CC:48:0F:32:61:54:1F:04:90:AD:C1:2D:7A:4A:12
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/GQx65b_MSA8yYVQfBJCtwS16ShI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1190::/44
2a06:a005:21a0::/44
2a06:a005:2290::/44
Signature Algorithm: sha256WithRSAEncryption
2d:03:0d:2a:77:9d:e5:04:13:71:88:bc:1c:be:14:89:bc:00:
31:40:b4:8a:44:21:30:01:73:ab:d4:2f:48:43:dd:68:1a:1a:
74:5a:f7:05:3e:12:42:10:e2:79:4f:ed:56:16:14:92:1c:fc:
b9:d0:87:72:c1:a6:9e:f2:fa:36:2d:3e:cc:01:cf:4a:e1:cb:
28:1e:76:8b:35:61:99:d8:85:52:a0:db:4a:d4:bc:7a:2f:a4:
d5:d3:2f:c7:ba:06:56:da:df:96:cc:39:8a:22:61:f9:85:fd:
10:e0:29:c5:41:b9:ed:4b:72:48:95:9b:0b:e3:df:50:de:7f:
ca:80:9e:c6:6a:fd:1d:31:e0:5b:7f:0b:e5:e3:62:6f:fc:2f:
74:63:a2:e2:b5:81:10:cd:e9:de:16:7d:12:40:fa:36:78:f4:
3e:8a:fb:a1:bb:2e:79:e7:f8:8a:4f:7d:c8:d9:b8:4a:ff:7c:
db:52:09:da:c9:5e:39:b2:0c:e9:49:90:3a:86:b8:6f:9e:7d:
98:55:99:b9:5a:88:85:5a:34:53:40:2e:b6:29:08:dc:85:b5:
d5:8c:c1:5c:11:c3:56:9a:a7:60:c8:b4:c3:5f:30:d9:d4:19:
b6:1b:a3:e0:b1:4b:71:42:a0:c7:31:97:c1:5f:7f:7e:c6:17:
ef:20:5c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:10:56 2025 by rpki-client