Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/HQNR0rsNhKCpV9JNiIuKdq2gnR8.roa
File: HQNR0rsNhKCpV9JNiIuKdq2gnR8.roa (raw, json)
Hash identifier: UbdmfE9OWKM/sdZt3nZjnKhEeueddTFwCEr1yXjh84M=
Subject key identifier: 1D:03:51:D2:BB:0D:84:A0:A9:57:D2:4D:88:8B:8A:76:AD:A0:9D:1F
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 181FDD1F
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/HQNR0rsNhKCpV9JNiIuKdq2gnR8.roa
Signing time: Fri 15 Apr 2022 04:24:02 +0000
ROA not before: Fri 15 Apr 2022 04:24:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60438
IP address blocks: 2a06:a005:1::/48 maxlen: 48
2a06:a005:2::/48 maxlen: 48
2a06:a005:490::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 404741407 (0x181fdd1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Apr 15 04:24:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1d0351d2bb0d84a0a957d24d888b8a76ada09d1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d8:d4:22:e4:1f:af:92:6c:62:c7:fa:c1:00:
56:ed:1f:94:f9:5b:bd:53:78:f0:0e:14:9b:4e:90:
78:f0:75:6c:fb:1a:97:1f:ac:8f:13:cd:3d:6f:cd:
c1:ca:0a:23:0e:4b:df:ea:ea:50:68:38:d5:7a:e3:
9d:c9:7b:66:5d:68:43:7c:36:5d:43:bc:c8:17:75:
a3:85:6f:2b:da:1c:bb:5a:76:94:7d:be:30:05:71:
1d:f3:31:58:84:25:7b:0c:6b:4f:3c:11:ae:ff:c3:
03:f9:45:2a:6e:00:60:fc:2f:e0:00:99:e1:1d:c0:
bb:f4:31:c3:4b:44:af:dc:7c:a6:48:4f:f7:67:34:
a2:0d:32:a6:99:c8:d0:0f:31:35:fc:c6:03:c7:ab:
c5:49:57:96:45:39:09:9a:89:22:4e:4a:0a:1a:18:
9e:1b:92:34:c8:8d:85:42:13:ba:ab:39:b2:fc:f3:
28:9d:5e:bb:f2:5a:d1:09:f8:97:90:15:f9:7a:7b:
0a:d3:f7:30:01:7b:3f:13:21:39:73:bd:44:ae:d7:
db:14:96:7d:fa:b5:6d:7e:cd:0b:44:d1:87:5d:c6:
ea:29:1f:1d:81:36:68:02:c5:bf:f5:34:33:b4:08:
06:22:47:f5:a1:88:96:3b:9f:c6:62:4e:14:aa:cd:
07:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:03:51:D2:BB:0D:84:A0:A9:57:D2:4D:88:8B:8A:76:AD:A0:9D:1F
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/HQNR0rsNhKCpV9JNiIuKdq2gnR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1::-2a06:a005:2:ffff:ffff:ffff:ffff:ffff
2a06:a005:490::/44
Signature Algorithm: sha256WithRSAEncryption
06:6b:e0:6d:dd:cb:76:03:0b:f6:44:e1:e9:fd:28:2f:30:4f:
3e:3b:9b:fa:16:17:80:9f:07:a9:84:71:a2:c4:56:da:fc:73:
53:af:1a:e7:95:09:19:bf:1a:a2:10:19:83:68:fd:f0:5b:c0:
d1:2a:74:5b:f7:d4:36:10:75:4f:ae:7e:54:87:10:ff:5f:31:
da:8f:f3:2c:f5:d0:52:ef:bd:94:60:20:1c:20:a5:7d:95:7b:
bd:46:f9:a3:65:7f:94:a4:ec:e6:81:10:ef:45:c8:c5:0e:af:
c7:33:78:19:cc:18:a6:fd:66:d9:bf:9e:a7:19:be:d6:6f:25:
64:c2:4c:cd:cd:f4:e3:83:54:83:c4:81:ac:8d:99:83:d9:d8:
61:3a:93:b6:12:f5:af:e6:5b:92:a3:2f:32:56:d8:a4:77:1f:
86:13:e4:98:d0:4b:85:5c:8d:b8:9f:5f:2a:cf:69:02:b0:63:
12:8f:4b:48:74:3f:6d:e0:98:8e:9d:48:e7:06:a2:a8:0b:47:
98:65:d6:7f:61:db:55:b6:97:51:a1:83:a8:cb:1d:bc:d5:85:
29:29:42:1f:80:44:a2:be:e2:d6:c5:13:cb:21:7e:fa:1c:05:
c8:51:0b:68:ac:40:4c:03:e6:65:a2:94:86:ca:3f:6f:e2:52:
e3:62:4f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 06:14:11 2025 by rpki-client