Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Q3Jm2U7dNr8sMGsqXIkWQFb_nkM.roa
File: Q3Jm2U7dNr8sMGsqXIkWQFb_nkM.roa (raw, json)
Hash identifier: DuoD91CGHz3QxVSylu25Fo8T2UtWhkhbV3GV4Fh/opE=
Subject key identifier: 43:72:66:D9:4E:DD:36:BF:2C:30:6B:2A:5C:89:16:40:56:FF:9E:43
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0184EC96E2D27BE0E04FFFDB77B9212D38DA
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Q3Jm2U7dNr8sMGsqXIkWQFb_nkM.roa
Signing time: Wed 07 Dec 2022 12:37:02 +0000
ROA not before: Wed 07 Dec 2022 12:37:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200912
IP address blocks: 2a0a:6040:e400::/40 maxlen: 48
2a06:a005:2500::/44 maxlen: 48
2a06:a005:2510::/44 maxlen: 48
2a06:a005:25b0::/44 maxlen: 48
2a06:a005:2520::/44 maxlen: 48
2a06:a005:25c0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ec:96:e2:d2:7b:e0:e0:4f:ff:db:77:b9:21:2d:38:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Dec 7 12:37:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=437266d94edd36bf2c306b2a5c89164056ff9e43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:68:8a:6c:37:fe:0b:45:e5:d9:50:74:11:5d:
4e:a4:72:83:79:c2:18:83:14:44:48:f5:6d:05:b1:
9b:42:fe:bb:e4:eb:96:46:0b:0e:5e:a6:c3:35:e1:
eb:1f:b5:42:8d:39:a9:f9:58:f2:f7:f1:5e:e6:8f:
f6:ac:54:af:9b:7e:29:ac:8b:78:5a:3a:72:1e:1e:
d0:90:b7:83:91:a1:57:eb:5c:5c:97:27:aa:7b:4d:
39:9a:ec:73:9b:ec:b7:fd:8a:54:1d:50:04:2e:cd:
c8:ef:18:45:c9:a7:de:b2:fe:fb:ef:47:d4:82:78:
be:62:cc:06:ea:be:d6:6d:80:50:c4:9f:68:0d:e3:
ae:00:47:e1:cb:9e:f8:81:31:e2:55:e5:20:fe:1f:
4a:c3:7d:c3:bf:ec:e3:9f:1a:f9:15:2c:48:43:04:
65:76:58:26:aa:84:5d:6d:2b:e1:68:cc:b6:32:18:
a0:b9:ff:c8:d2:23:a3:c8:a0:53:51:ef:6d:59:a3:
53:29:bf:29:55:2b:ab:32:67:30:e0:63:4a:6e:71:
82:96:79:b6:9e:8d:13:c8:1b:3a:92:1c:22:52:7f:
61:94:44:67:a2:73:bb:04:f3:e4:31:c1:28:06:0c:
47:5d:f0:35:82:d0:68:7e:4a:ba:b2:72:8b:de:f2:
1c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:72:66:D9:4E:DD:36:BF:2C:30:6B:2A:5C:89:16:40:56:FF:9E:43
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Q3Jm2U7dNr8sMGsqXIkWQFb_nkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2500::-2a06:a005:252f:ffff:ffff:ffff:ffff:ffff
2a06:a005:25b0::-2a06:a005:25cf:ffff:ffff:ffff:ffff:ffff
2a0a:6040:e400::/40
Signature Algorithm: sha256WithRSAEncryption
35:10:a7:28:61:57:1b:23:57:2d:79:69:ad:2a:4d:19:f4:85:
10:20:bf:98:0e:58:94:ba:73:95:7d:f1:29:e9:63:5e:a9:0e:
08:47:af:f7:46:b2:9f:cb:13:6d:3b:53:43:b5:fc:d2:29:05:
13:4d:25:55:99:60:53:dc:86:82:d4:32:cf:a2:9c:3e:96:07:
d6:0c:84:03:66:26:28:ba:2e:ad:be:06:b0:7d:7d:c4:90:46:
74:07:9d:37:5f:bd:8b:f5:b7:45:2e:0f:79:04:a5:97:48:cb:
0d:4a:5e:5e:29:4e:b3:b0:8d:90:52:5e:e4:2c:d3:a9:8c:fe:
ef:3e:b7:37:b1:de:b7:56:80:a0:d3:53:08:1f:e7:ca:9e:be:
da:22:75:0f:68:c3:b9:e9:9a:08:80:a3:da:5e:e1:b7:be:ec:
b7:39:6e:ac:16:a0:04:ad:0f:f0:43:41:31:e5:9f:77:c8:2c:
07:1f:77:ab:2f:45:11:1e:77:13:7d:58:0b:89:ab:14:7a:c8:
1d:90:a7:93:28:73:bc:d3:6a:9f:31:25:3e:da:c1:22:d7:c8:
a7:f4:7b:42:c7:51:5d:d3:37:ac:03:27:eb:ab:a0:15:43:69:
b9:10:67:de:c5:97:38:d5:f7:8e:88:ec:ac:18:f3:41:0b:23:
ad:b3:68:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:09:26 2025 by rpki-client