Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Q9oe9RTS4Chzyz59PjD4Ur-2YAI.roa
File: Q9oe9RTS4Chzyz59PjD4Ur-2YAI.roa (raw, json)
Hash identifier: +J4iZiK+zTWNgDNME7Aj+KXoLN4wcPAjOOQHL1zhqDo=
Subject key identifier: 43:DA:1E:F5:14:D2:E0:28:73:CB:3E:7D:3E:30:F8:52:BF:B6:60:02
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0184136C3238489CC597E0FBF02977EA33B9
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Q9oe9RTS4Chzyz59PjD4Ur-2YAI.roa
Signing time: Wed 26 Oct 2022 08:32:48 +0000
ROA not before: Wed 26 Oct 2022 08:32:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212983
IP address blocks: 2a06:a005:a04::/48 maxlen: 48
2a06:a005:480::/48 maxlen: 48
2a06:a005:43e::/48 maxlen: 48
2a06:a005:483::/48 maxlen: 48
2a06:a005:13::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:13:6c:32:38:48:9c:c5:97:e0:fb:f0:29:77:ea:33:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Oct 26 08:32:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=43da1ef514d2e02873cb3e7d3e30f852bfb66002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:2e:13:21:91:0e:f1:08:0f:e0:5c:3f:11:71:
db:f9:e9:6b:29:4e:2d:36:28:6f:68:f7:db:26:a3:
c5:ce:60:80:10:0a:6c:4d:e1:17:15:b7:f6:a9:c0:
9c:8a:25:b0:78:71:0a:e3:e4:88:9f:30:4a:5b:62:
3f:36:08:0b:11:22:59:9c:0d:40:d0:21:dc:ee:eb:
4a:e9:41:e8:c2:a6:6c:24:35:d2:a6:7c:ae:bb:92:
0a:47:55:78:24:c8:91:e5:67:5a:c4:dc:5f:c3:13:
10:bb:f2:5e:b4:d2:38:e6:ff:50:38:2f:3c:31:33:
fb:78:fb:d7:51:d9:2a:78:26:52:53:15:5f:8f:20:
9d:d5:76:3e:c7:d9:71:3f:ae:9a:1f:51:15:df:7e:
dc:4a:0d:c1:dd:51:5b:bd:88:45:77:d9:53:3a:04:
bf:03:dd:35:ff:2d:cb:32:fb:bc:17:7d:55:e9:14:
05:4f:bc:11:a4:06:ba:27:61:1f:37:f4:04:3f:d6:
db:6d:94:8d:15:2f:57:d1:a8:f1:63:92:64:bf:be:
71:a3:c5:91:12:45:05:dc:36:0e:d1:6f:27:fe:77:
af:87:a6:60:da:1e:9b:ac:a1:56:6b:8d:7b:9f:64:
00:e0:6c:b4:ad:04:e2:76:0c:9b:18:cf:5e:e0:22:
e9:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:DA:1E:F5:14:D2:E0:28:73:CB:3E:7D:3E:30:F8:52:BF:B6:60:02
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Q9oe9RTS4Chzyz59PjD4Ur-2YAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:13::/48
2a06:a005:43e::/48
2a06:a005:480::/48
2a06:a005:483::/48
2a06:a005:a04::/48
Signature Algorithm: sha256WithRSAEncryption
5a:17:d1:a3:cf:f2:9b:77:76:63:68:e5:ed:2d:5f:49:00:0e:
f5:77:c5:f0:f1:a5:8f:02:f5:26:f7:3d:a5:60:7e:68:40:a5:
80:63:03:2d:1e:0d:0d:47:4b:2f:55:76:f5:98:18:6c:21:e4:
6e:f4:ed:f9:18:36:63:0c:08:df:6b:96:fc:62:8d:53:06:52:
87:c4:fa:19:86:b5:08:e3:4d:45:f4:9d:dc:75:c9:26:ab:98:
80:94:d5:60:f1:8a:15:b0:f3:27:44:4a:76:8a:16:5e:37:a3:
3f:59:30:64:06:e0:0d:60:65:6f:de:0a:af:6d:cf:18:e1:07:
86:c9:c9:fa:0d:ce:4b:61:1d:4f:55:69:20:fd:49:6e:d4:58:
3b:f8:97:48:22:58:02:49:b1:42:6c:ad:ab:da:dd:76:57:47:
06:7f:40:ac:e3:bf:7a:6f:92:8b:06:ac:a6:0a:d7:32:2f:73:
da:95:1d:b7:26:aa:10:be:18:aa:db:e7:85:6c:b6:c1:e4:66:
34:34:34:13:27:69:b2:1e:12:cd:04:71:fb:e8:57:08:e6:af:
87:d8:44:9a:87:2f:f5:52:b8:e9:8b:48:9d:84:30:88:72:c1:
39:2b:a0:fc:95:66:72:92:32:fb:2b:bd:16:41:dc:09:aa:6a:
37:5f:e1:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:09:39 2025 by rpki-client