Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/PQYGPGnk12IyXrNlMbYdLVxbt3w.roa
File: PQYGPGnk12IyXrNlMbYdLVxbt3w.roa (raw, json)
Hash identifier: 3+hLoFeiE4Ksf4+D8LSuFzSgmyHmBBvzC7p+nSBjsoo=
Subject key identifier: 3D:06:06:3C:69:E4:D7:62:32:5E:B3:65:31:B6:1D:2D:5C:5B:B7:7C
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 018261C961404EEC8D64F72E92684FB19B7C
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/PQYGPGnk12IyXrNlMbYdLVxbt3w.roa
Signing time: Wed 03 Aug 2022 03:39:23 +0000
ROA not before: Wed 03 Aug 2022 03:39:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203888
IP address blocks: 2a06:a005:d22::/48 maxlen: 48
2a06:a005:1620::/44 maxlen: 48
2a06:a005:1610::/44 maxlen: 48
2a06:a005:1630::/44 maxlen: 48
2a06:a005:1550::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:61:c9:61:40:4e:ec:8d:64:f7:2e:92:68:4f:b1:9b:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Aug 3 03:39:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3d06063c69e4d762325eb36531b61d2d5c5bb77c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:78:a0:3c:a1:b5:ff:9c:3e:53:cb:be:e8:71:
f2:79:63:9f:50:eb:87:ea:d2:13:ce:c7:fc:60:79:
a1:d4:4f:e2:55:08:f4:3b:fd:33:5b:92:c0:96:ec:
44:0b:0f:c1:84:b2:98:60:0a:87:81:73:1a:96:5d:
1d:df:c4:ab:bc:d5:c6:b0:c6:ef:9d:93:4f:4e:a4:
54:a3:d8:6f:7c:49:b4:89:f5:90:64:85:78:08:3e:
05:ba:00:7c:fd:9f:5f:d4:0b:12:8d:6c:f7:69:08:
fd:de:92:26:9e:bf:36:52:aa:99:19:05:66:bd:26:
8e:7b:87:22:df:1d:d0:0c:b2:90:27:5d:a3:24:f1:
9c:b9:e5:3a:ac:4e:6a:94:2a:39:6e:b6:1b:72:d6:
bf:03:5e:88:32:26:a6:f9:24:2a:e4:43:a4:c9:36:
07:4a:35:00:9b:9a:ff:32:bf:19:61:7b:7d:d3:d2:
c7:f4:e0:d8:38:fc:27:5e:18:f2:2b:0c:7f:88:28:
5e:eb:4e:90:2e:47:47:ad:a0:c6:49:79:34:fc:00:
03:7e:4f:f7:2b:05:92:87:82:03:9e:2e:3c:e4:5b:
03:41:32:34:f3:c5:99:fb:01:43:e9:ca:01:8d:81:
05:6b:d2:d4:e2:25:03:e7:ce:f9:5c:14:c4:90:16:
80:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:06:06:3C:69:E4:D7:62:32:5E:B3:65:31:B6:1D:2D:5C:5B:B7:7C
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/PQYGPGnk12IyXrNlMbYdLVxbt3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:d22::/48
2a06:a005:1550::/44
2a06:a005:1610::-2a06:a005:163f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
0a:05:f3:32:bd:0a:a7:93:e0:0a:51:0f:3b:2d:6c:ee:2e:7a:
3d:67:d0:20:b5:20:63:f2:c0:75:57:3b:bd:8f:1e:d6:8c:34:
1e:d3:66:20:2b:d4:c1:ed:61:71:25:63:a2:38:ae:83:6a:9f:
89:2c:17:ab:f9:ca:9c:3b:ec:c1:26:f6:31:a9:e1:06:6f:69:
86:35:cd:26:21:ce:cb:6b:11:e4:14:1a:20:ae:55:3b:66:c9:
6f:e2:64:8c:c9:d6:18:85:b9:36:79:e0:21:6d:f9:ef:59:55:
b4:8f:ca:e0:74:19:4f:95:9b:22:a8:38:55:f8:7b:65:7c:d2:
d1:bf:f2:53:ba:df:d9:6c:7f:3f:18:66:09:b6:73:59:f6:51:
ca:f9:d4:6b:b6:88:ae:25:79:14:2a:c7:a9:60:81:44:15:c4:
81:9b:b1:8f:19:5d:ca:2a:4f:b6:fb:a1:67:0a:70:e0:78:93:
10:6e:4f:67:96:50:ff:e2:12:20:c4:48:b8:93:fd:59:69:b0:
96:f0:b2:10:36:4f:41:5d:2d:82:b4:8b:a1:05:3d:b1:b1:ef:
42:d4:54:de:a7:82:13:29:32:09:7e:88:71:07:79:1b:fb:7e:
cb:f7:cf:93:51:2a:e6:12:79:9c:85:28:dc:b1:93:cf:8a:da:
d3:d3:dd:d8
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAYJhyWFATuyNZPcukmhPsZt8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIwODAzMDMzOTIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZDA2MDYzYzY5ZTRkNzYyMzI1ZWIzNjUzMWI2MWQyZDVjNWJiNzdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23igPKG1/5w+U8u+6HHyeWOfUOuH
6tITzsf8YHmh1E/iVQj0O/0zW5LAluxECw/BhLKYYAqHgXMall0d38SrvNXGsMbv
nZNPTqRUo9hvfEm0ifWQZIV4CD4FugB8/Z9f1AsSjWz3aQj93pImnr82UqqZGQVm
vSaOe4ci3x3QDLKQJ12jJPGcueU6rE5qlCo5brYbcta/A16IMiam+SQq5EOkyTYH
SjUAm5r/Mr8ZYXt909LH9ODYOPwnXhjyKwx/iChe606QLkdHraDGSXk0/AADfk/3
KwWSh4IDni485FsDQTI088WZ+wFD6coBjYEFa9LU4iUD5875XBTEkBaALQIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFD0GBjxp5NdiMl6zZTG2HS1cW7d8MB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvUFFZR1BHbmsxMkl5WHJObE1iWWRMVnhidDN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAAjAmAwcAKgagBQ0i
AwcEKgagBRVQMBIDBwQqBqAFFhADBwYqBqAFFgAwDQYJKoZIhvcNAQELBQADggEB
AAoF8zK9CqeT4ApRDzstbO4uej1n0CC1IGPywHVXO72PHtaMNB7TZiAr1MHtYXEl
Y6I4roNqn4ksF6v5ypw77MEm9jGp4QZvaYY1zSYhzstrEeQUGiCuVTtmyW/iZIzJ
1hiFuTZ54CFt+e9ZVbSPyuB0GU+VmyKoOFX4e2V80tG/8lO639lsfz8YZgm2c1n2
Ucr51Gu2iK4leRQqx6lggUQVxIGbsY8ZXcoqT7b7oWcKcOB4kxBuT2eWUP/iEiDE
SLiT/VlpsJbwshA2T0FdLYK0i6EFPbGx70LUVN6nghMpMgl+iHEHeRv7fsv3z5NR
KuYSeZyFKNyxk8+K2tPT3dg=
-----END CERTIFICATE-----
Generated at Fri Apr 18 10:23:49 2025 by rpki-client