Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/QW_e5DqTi_xtbBHd8YnCfBvdkuc.roa
File: QW_e5DqTi_xtbBHd8YnCfBvdkuc.roa (raw, json)
Hash identifier: 9PloomNrO2gfx0BFX6LnMhMPcc8rumYGIeEnpP1FK04=
Subject key identifier: 41:6F:DE:E4:3A:93:8B:FC:6D:6C:11:DD:F1:89:C2:7C:1B:DD:92:E7
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0182188414D543739549099C0ADB16CBAA88
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/QW_e5DqTi_xtbBHd8YnCfBvdkuc.roa
Signing time: Tue 19 Jul 2022 22:11:25 +0000
ROA not before: Tue 19 Jul 2022 22:11:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211604
IP address blocks: 2a06:a005:434::/48 maxlen: 48
2a06:a005:5e1::/48 maxlen: 48
2a06:a005:857::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:18:84:14:d5:43:73:95:49:09:9c:0a:db:16:cb:aa:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jul 19 22:11:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=416fdee43a938bfc6d6c11ddf189c27c1bdd92e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f1:6f:a5:69:8f:1b:a2:76:e3:84:ec:58:ff:
35:de:1e:3d:e2:c9:64:52:5d:eb:62:4e:6e:8f:06:
1a:e7:e4:a7:91:7a:e8:d3:be:cb:db:18:cb:62:56:
6c:ea:8d:c1:5a:fc:c5:29:fa:c1:0a:50:ac:ba:fb:
a3:c2:9d:1f:eb:ab:ee:eb:73:b2:bb:d0:c6:24:62:
00:70:d0:b7:66:61:f9:2c:c1:43:4b:7f:7d:ec:d8:
5d:30:f2:80:49:94:92:02:53:10:cd:ed:6b:74:29:
6b:3a:af:2e:89:fc:e6:53:ec:ea:9e:e4:0f:bb:93:
75:83:a1:85:ca:b9:96:b3:b1:83:9a:33:0a:a8:27:
98:a9:27:30:e1:cc:d3:33:9b:36:2f:39:ab:62:4d:
96:e4:63:f4:fd:94:6c:bb:2e:c8:e4:05:76:c6:38:
98:93:9f:2a:53:22:3a:eb:2d:56:ab:71:7e:98:8c:
c8:4a:f3:0d:9a:14:e9:f7:89:59:5b:4e:66:bd:3d:
a3:47:c3:22:be:13:4e:95:bf:14:e4:e9:d8:91:53:
12:66:eb:7b:84:93:56:a0:8d:39:8b:47:24:cf:6c:
63:f5:f8:a8:ee:da:93:2d:d0:db:af:8b:8f:31:be:
3f:f6:00:97:0f:09:27:ba:6e:e1:90:6b:17:b4:d6:
f6:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:6F:DE:E4:3A:93:8B:FC:6D:6C:11:DD:F1:89:C2:7C:1B:DD:92:E7
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/QW_e5DqTi_xtbBHd8YnCfBvdkuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:434::/48
2a06:a005:5e1::/48
2a06:a005:857::/48
Signature Algorithm: sha256WithRSAEncryption
7c:c8:ff:ef:d8:44:d9:9d:ca:35:28:bb:89:0b:4a:96:20:b9:
36:7b:fe:ad:b3:de:60:84:06:e6:9e:2a:99:b0:38:d3:ce:4a:
cd:1f:e0:a6:db:7c:63:b6:6c:50:8c:52:d3:3f:cc:a8:0f:70:
7a:7b:03:8a:35:ac:e9:02:5e:e7:7e:23:0f:f3:7a:52:c1:99:
9a:ed:af:4f:7f:5d:7f:ee:bc:3a:02:eb:83:e4:e0:29:75:33:
54:71:c2:4c:d6:da:7a:93:43:a9:12:58:6d:1e:93:77:ad:24:
cc:b0:41:d0:8a:01:a0:93:0f:a0:7f:83:5e:32:f0:d3:71:d5:
c0:07:2c:d9:2d:38:f3:e4:57:47:a5:e0:14:7f:49:74:97:96:
b9:64:07:22:63:41:ae:ef:e8:73:41:de:63:f0:ea:02:a1:ef:
b6:6c:40:4b:51:92:c5:d3:14:3f:8b:64:90:63:8c:bb:d4:2a:
88:ec:fc:2d:a7:c4:5f:04:e2:37:f4:99:14:01:1d:b8:4e:98:
e3:e6:6d:1f:f3:c6:33:aa:26:b4:7b:8d:d9:26:c1:ce:80:20:
8a:7d:b1:e5:a5:f7:88:f0:39:b5:f6:36:b9:50:dd:77:67:14:
b3:bd:41:dd:47:7c:df:32:ff:ad:f4:ee:c0:0e:c5:2f:9d:cf:
ce:5a:d1:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:09:27 2025 by rpki-client