Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/JqOCwqUck71EJxpJujdSXB78r_k.roa
File: JqOCwqUck71EJxpJujdSXB78r_k.roa (raw, json)
Hash identifier: x6yuZHYuZ0Xf5Sk6UbpuSZPGD/Wpe3aaLbDmNejcY3o=
Subject key identifier: 26:A3:82:C2:A5:1C:93:BD:44:27:1A:49:BA:37:52:5C:1E:FC:AF:F9
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0184DACC8F44CB056AFE8D0B293B3FB62F76
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/JqOCwqUck71EJxpJujdSXB78r_k.roa
Signing time: Sun 04 Dec 2022 01:42:29 +0000
ROA not before: Sun 04 Dec 2022 01:42:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200954
IP address blocks: 2a0a:6040:e300::/40 maxlen: 48
2a06:a005:2100::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:da:cc:8f:44:cb:05:6a:fe:8d:0b:29:3b:3f:b6:2f:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Dec 4 01:42:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=26a382c2a51c93bd44271a49ba37525c1efcaff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:71:71:d5:b3:bf:0c:d9:46:39:6c:23:97:7c:
78:96:0e:62:5d:a0:68:f2:97:3f:40:7c:d1:2a:a5:
96:47:46:00:02:f7:bd:cc:08:d8:19:d3:41:d1:35:
6a:2b:48:21:10:a3:5c:33:57:fc:30:b2:c0:e6:a9:
74:36:1f:0c:be:59:a0:88:68:21:58:e8:1a:e4:95:
b3:89:86:62:31:b8:eb:de:3b:7b:4a:a9:91:72:26:
35:51:8e:d5:8c:64:fb:0f:ff:03:05:81:ae:fb:71:
b8:20:b2:86:05:e1:2b:c3:7b:32:76:1b:a3:4e:e3:
49:18:99:68:0a:f1:f3:4a:89:b6:fa:c8:d6:fb:eb:
23:7b:3a:6f:17:59:0e:da:74:17:19:83:42:3e:50:
ba:c4:d4:7b:ea:0a:00:1e:24:55:a2:2f:35:37:ad:
d7:35:9a:30:71:86:8f:73:6e:2a:a6:71:80:35:99:
50:f0:8a:e2:94:b2:8f:f7:8f:22:09:d1:01:31:70:
c3:a8:83:9f:f8:4e:e2:cd:6a:48:62:f0:d5:e3:75:
dd:2c:19:a2:f6:43:2e:d8:b6:fd:e1:57:75:27:35:
e9:06:17:38:b8:5e:ab:d2:75:3e:67:51:91:cb:d3:
d5:b1:49:a3:9a:a7:fe:af:03:11:23:d6:16:dd:11:
24:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:A3:82:C2:A5:1C:93:BD:44:27:1A:49:BA:37:52:5C:1E:FC:AF:F9
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/JqOCwqUck71EJxpJujdSXB78r_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2100::/44
2a0a:6040:e300::/40
Signature Algorithm: sha256WithRSAEncryption
2d:2d:fa:a7:41:a6:d3:e6:a0:61:ba:d3:ca:c5:12:1d:0c:2c:
27:03:04:00:06:95:05:d2:bf:21:76:34:c4:0e:01:88:2d:4e:
72:bd:ea:05:82:e6:08:9f:20:85:e4:f5:d4:3f:8e:a2:ce:37:
ec:b1:bc:4c:25:96:55:6c:ce:c8:90:a3:b3:7b:30:c0:5e:2f:
41:96:6c:d1:77:7e:6f:91:ed:20:e0:3c:55:18:da:d9:10:82:
8b:59:60:a4:7c:5d:c2:5b:c8:7d:bb:74:61:ae:3d:2f:79:27:
0e:08:4a:3a:0c:7e:70:de:ab:f2:43:e6:2a:a2:f8:c2:06:53:
11:63:e3:57:a7:11:3a:70:0f:4a:d7:2c:8d:a5:94:07:b2:ee:
13:28:33:98:ca:9c:84:2d:df:ea:c9:22:b8:be:16:48:78:40:
65:1f:37:fa:0c:e2:3e:77:df:cb:22:ca:48:ca:b3:cf:82:0d:
67:9f:3a:5a:b7:78:80:28:dd:3a:72:3b:57:f5:93:af:53:f2:
60:92:7e:63:46:24:5f:fb:dd:3f:ab:a7:cb:16:38:11:42:67:
04:a1:d1:8d:62:4d:bc:62:12:d4:e6:9a:00:e0:08:16:f9:a8:
37:e1:c3:24:3b:a2:96:93:77:2c:b3:4b:0d:30:82:a7:09:51:
c1:80:bc:89
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgISAYTazI9EywVq/o0LKTs/ti92MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIxMjA0MDE0MjI5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNmEzODJjMmE1MWM5M2JkNDQyNzFhNDliYTM3NTI1YzFlZmNhZmY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgnFx1bO/DNlGOWwjl3x4lg5iXaBo
8pc/QHzRKqWWR0YAAve9zAjYGdNB0TVqK0ghEKNcM1f8MLLA5ql0Nh8MvlmgiGgh
WOga5JWziYZiMbjr3jt7SqmRciY1UY7VjGT7D/8DBYGu+3G4ILKGBeErw3sydhuj
TuNJGJloCvHzSom2+sjW++sjezpvF1kO2nQXGYNCPlC6xNR76goAHiRVoi81N63X
NZowcYaPc24qpnGANZlQ8IrilLKP948iCdEBMXDDqIOf+E7izWpIYvDV43XdLBmi
9kMu2Lb94Vd1JzXpBhc4uF6r0nU+Z1GRy9PVsUmjmqf+rwMRI9YW3REkkQIDAQAB
o4ICFDCCAhAwHQYDVR0OBBYEFCajgsKlHJO9RCcaSbo3Ulwe/K/5MB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvSnFPQ3dxVWNrNzFFSnhwSnVqZFNYQjc4cl9rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAAjARAwcEKgagBSEA
AwYAKgpgQOMwDQYJKoZIhvcNAQELBQADggEBAC0t+qdBptPmoGG608rFEh0MLCcD
BAAGlQXSvyF2NMQOAYgtTnK96gWC5gifIIXk9dQ/jqLON+yxvEwlllVszsiQo7N7
MMBeL0GWbNF3fm+R7SDgPFUY2tkQgotZYKR8XcJbyH27dGGuPS95Jw4ISjoMfnDe
q/JD5iqi+MIGUxFj41enETpwD0rXLI2llAey7hMoM5jKnIQt3+rJIri+Fkh4QGUf
N/oM4j5338siykjKs8+CDWefOlq3eIAo3TpyO1f1k69T8mCSfmNGJF/73T+rp8sW
OBFCZwSh0Y1iTbxiEtTmmgDgCBb5qDfhwyQ7opaTdyyzSw0wgqcJUcGAvIk=
-----END CERTIFICATE-----
Generated at Fri Apr 18 10:09:36 2025 by rpki-client