Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/QUgi9dgIBF69eaSpVqCaIc53osc.roa
File: QUgi9dgIBF69eaSpVqCaIc53osc.roa (raw, json)
Hash identifier: v8YX0D28Y1uduBRbRx4Z1WTI3GMnLXo/s4ibWPE3ESo=
Subject key identifier: 41:48:22:F5:D8:08:04:5E:BD:79:A4:A9:56:A0:9A:21:CE:77:A2:C7
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0182635E13612FF2B1A75EA59D0D0892EF42
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/QUgi9dgIBF69eaSpVqCaIc53osc.roa
Signing time: Wed 03 Aug 2022 11:01:25 +0000
ROA not before: Wed 03 Aug 2022 11:01:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203888
IP address blocks: 2a06:a005:d22::/48 maxlen: 48
2a06:a005:1620::/44 maxlen: 48
2a06:a005:1610::/44 maxlen: 48
2a06:a005:1630::/44 maxlen: 48
2a06:a005:1550::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:63:5e:13:61:2f:f2:b1:a7:5e:a5:9d:0d:08:92:ef:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Aug 3 11:01:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=414822f5d808045ebd79a4a956a09a21ce77a2c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:78:25:2a:1d:78:b6:b1:6e:14:30:05:be:ca:
46:d6:40:7c:7f:aa:b1:ea:93:1f:ec:f2:94:fb:62:
31:c3:f2:e5:b5:9d:dc:7e:9d:8f:b7:5f:05:15:35:
93:9e:14:27:64:30:bf:21:e4:9f:93:00:70:28:00:
7b:59:a5:df:05:7e:3f:91:20:82:7c:3b:96:bb:48:
22:26:d9:39:65:70:67:6d:d2:83:6c:63:59:16:e5:
ef:81:c2:c9:46:70:38:b8:32:60:5b:4a:2e:4c:ae:
a8:05:5d:af:ea:6d:0f:98:a7:5e:70:49:17:da:ba:
ae:b2:e9:f6:59:ab:eb:41:d3:9d:e6:8a:45:06:2b:
35:33:7c:60:9f:9d:c6:9f:2e:48:94:72:40:56:11:
74:b0:d8:b1:c9:83:b1:04:4e:22:8e:dd:94:59:93:
b0:c2:a7:13:38:57:ca:56:c8:d9:6d:07:7c:03:1d:
33:0b:6a:80:55:55:0e:e9:b9:ab:47:78:cf:1e:da:
73:78:77:65:18:ef:af:b0:cd:62:bd:34:e6:a2:9b:
80:5b:7b:62:c4:93:90:c8:72:1c:b7:d3:5a:60:2f:
10:8f:fb:da:9b:f9:fb:d8:5a:d9:22:4a:29:74:df:
fb:b3:1a:fe:10:fb:33:40:c5:44:29:be:16:e8:37:
9c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:48:22:F5:D8:08:04:5E:BD:79:A4:A9:56:A0:9A:21:CE:77:A2:C7
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/QUgi9dgIBF69eaSpVqCaIc53osc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:d22::/48
2a06:a005:1550::/44
2a06:a005:1610::-2a06:a005:163f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
60:da:7d:0a:66:c4:85:f7:86:5a:23:f7:c5:64:6b:3b:e3:65:
13:2a:d4:28:aa:08:42:58:58:8a:16:e6:74:07:06:14:66:d0:
c9:11:7f:8a:8e:52:89:94:a0:de:46:12:fc:27:bf:3d:e1:b2:
aa:4b:2e:8d:33:02:c4:9d:46:6e:db:a4:06:b9:61:2e:c6:f1:
fb:17:df:4b:5a:cd:fc:1d:bf:2c:c5:99:af:2f:94:ed:56:f1:
84:16:b2:42:f3:a9:50:72:bd:27:fe:74:e3:b7:21:56:ea:e0:
21:33:bb:7d:a0:94:9d:ae:79:63:22:5a:87:cf:93:00:d4:3b:
bf:3a:35:8e:4f:39:9b:b0:35:50:22:e8:44:f1:13:dd:b3:34:
ea:04:86:de:85:ac:2c:bb:95:d1:55:ff:2c:0d:dd:30:17:34:
63:b1:81:0f:29:7b:36:28:fe:ba:31:ef:07:32:39:66:77:06:
0d:5c:a6:1d:a7:93:64:da:28:36:0d:31:64:62:e6:74:9b:59:
cd:c5:6f:8e:9b:cc:21:7d:69:e1:07:da:a0:70:02:f4:83:79:
73:fc:e6:17:69:81:83:9b:97:bd:d3:b1:62:6f:8b:0e:70:c1:
ea:42:9c:fb:a6:5e:ff:f8:fa:87:96:e0:8e:35:84:90:fa:53:
98:46:a5:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 09:59:40 2025 by rpki-client