Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Q5KqP8WvGp58OTgyYKIutSzLoxI.roa
File: Q5KqP8WvGp58OTgyYKIutSzLoxI.roa (raw, json)
Hash identifier: +0CPcuDk545h0R/ia++27N6JJv22JryMlpZ3gEsun4k=
Subject key identifier: 43:92:AA:3F:C5:AF:1A:9E:7C:39:38:32:60:A2:2E:B5:2C:CB:A3:12
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0182C6086A9802B551E3E079BEADC6781F29
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Q5KqP8WvGp58OTgyYKIutSzLoxI.roa
Signing time: Mon 22 Aug 2022 14:50:16 +0000
ROA not before: Mon 22 Aug 2022 14:50:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204160
IP address blocks: 2a06:a005:1930::/44 maxlen: 48
2a06:a005:18b0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c6:08:6a:98:02:b5:51:e3:e0:79:be:ad:c6:78:1f:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Aug 22 14:50:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4392aa3fc5af1a9e7c39383260a22eb52ccba312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2f:bb:cc:9e:d8:22:e2:9f:78:fa:91:ee:4d:
22:d4:77:89:6a:f2:d2:a8:55:a2:20:bb:7a:9f:8b:
1c:14:ad:49:94:f2:18:7a:5c:1d:aa:db:34:08:24:
b1:96:80:1d:d1:dc:ea:a4:46:15:fd:1e:c7:2e:9e:
35:e5:37:86:2c:c6:52:ca:fc:fc:e7:c4:02:86:5d:
aa:d6:e2:dd:07:06:a3:0f:1a:f6:57:e3:37:86:c4:
d9:65:87:37:16:1c:4c:42:46:d4:8e:8f:be:3b:21:
e6:71:cb:4b:a6:06:90:cd:60:41:5e:8f:7a:6c:c7:
46:37:5c:7b:a1:4e:93:14:1e:53:48:cc:88:41:8a:
b4:c4:90:87:54:e6:ea:05:84:aa:56:b1:a7:20:51:
55:70:e6:a1:71:44:9e:34:0b:46:c2:09:7a:a9:4f:
46:59:eb:9f:8c:66:eb:d0:3b:a1:9b:59:a9:01:96:
8d:b9:12:67:20:0f:cf:eb:91:65:2a:1d:94:0e:e1:
a5:82:bd:40:60:99:0f:70:53:11:26:ee:66:8d:88:
21:03:3f:2b:e3:1a:19:91:57:45:e4:e6:df:ab:c4:
70:e5:db:8c:e2:52:85:fc:ae:40:86:d0:21:d8:ce:
27:20:bb:a1:05:e4:bc:e4:51:4e:a3:0a:30:c9:a9:
50:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:92:AA:3F:C5:AF:1A:9E:7C:39:38:32:60:A2:2E:B5:2C:CB:A3:12
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Q5KqP8WvGp58OTgyYKIutSzLoxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:18b0::/44
2a06:a005:1930::/44
Signature Algorithm: sha256WithRSAEncryption
6c:c2:7a:c4:1a:c2:89:6f:d8:d9:f6:cd:65:05:2f:6c:ca:f2:
cd:81:04:af:37:53:68:44:d7:72:62:a3:4c:74:58:b7:9f:15:
55:15:c0:70:43:14:ba:48:2e:5c:6d:9f:73:96:fc:e9:76:ce:
21:90:3d:fe:ce:a5:d6:0b:5f:db:01:fb:8f:1e:51:57:8b:fe:
a4:01:2b:5d:71:d8:91:44:0a:e6:ca:61:9e:46:7a:6f:33:ea:
6a:6a:e7:55:a1:aa:95:dc:7b:40:d6:af:ab:28:42:a8:29:55:
a1:a8:32:56:ba:1b:8d:5a:78:5b:8a:86:a8:04:ee:79:92:5f:
d3:91:2c:50:8b:96:71:c9:7b:45:0d:2b:19:f5:8f:5c:fd:fd:
6d:cf:32:c4:73:72:52:0f:a8:ee:8b:64:04:5c:ae:f0:33:fb:
53:9f:90:84:3f:b2:20:d3:34:de:66:8b:e7:e7:55:38:68:3e:
29:bf:8c:77:6e:4c:fb:94:33:55:74:1d:3e:a5:f0:29:0a:22:
39:25:1a:cf:f3:ce:c4:04:cc:ed:dd:84:4f:c4:11:d6:64:1c:
66:fe:6e:71:bb:fc:1a:a2:30:e5:5a:25:6b:32:64:27:cc:3a:
ec:fd:99:70:35:f5:de:59:be:b2:6a:e5:8e:dd:f8:96:31:a3:
95:2d:91:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 00:48:52 2025 by rpki-client