Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/X1qm_QbUeGJ6Ta7Xvsou6ZtyO_c.roa
File: X1qm_QbUeGJ6Ta7Xvsou6ZtyO_c.roa (raw, json)
Hash identifier: J02l5pyWPxloAELuy2fVwltN3/DSXlMyYadoyotmp3Q=
Subject key identifier: 5F:5A:A6:FD:06:D4:78:62:7A:4D:AE:D7:BE:CA:2E:E9:9B:72:3B:F7
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 19D505CF
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/X1qm_QbUeGJ6Ta7Xvsou6ZtyO_c.roa
Signing time: Sun 15 May 2022 10:16:40 +0000
ROA not before: Sun 15 May 2022 10:16:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211144
IP address blocks: 2a06:a005:431::/48 maxlen: 48
2a06:a005:440::/44 maxlen: 48
2a06:a005:890::/44 maxlen: 48
2a06:a005:18::/48 maxlen: 48
2a06:a005:430::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 433391055 (0x19d505cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: May 15 10:16:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5f5aa6fd06d478627a4daed7beca2ee99b723bf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2c:26:01:8c:6c:33:6b:e3:b5:eb:e2:44:16:
2c:84:ac:2f:15:97:8a:60:30:97:ef:bd:52:c5:c0:
87:e3:a8:40:ad:b4:fa:67:d3:9a:53:19:05:84:fc:
93:03:16:86:13:5d:07:77:0f:b4:ef:b3:d0:ad:10:
9c:c1:15:8a:ac:38:57:3e:ba:af:1c:9b:9c:11:dd:
31:0e:13:be:06:88:f1:37:bb:b3:89:b4:dc:e8:d8:
05:7e:3c:fe:ab:db:5e:f7:ba:4d:cf:cf:f8:f7:73:
c2:1b:a1:bf:63:64:25:04:8e:95:f4:ae:da:13:16:
62:52:a1:aa:a4:d1:3c:75:cd:f4:dd:13:e4:d9:cb:
5b:80:1b:2c:be:13:fd:dc:ff:4e:68:5b:9d:77:cd:
3e:eb:aa:1d:de:6e:d3:3c:df:a5:92:65:34:f3:f5:
75:26:a8:4b:c7:67:65:78:d3:f0:f8:ac:17:2f:75:
2e:ef:40:fe:83:60:a2:bb:07:96:d3:ce:b1:36:8c:
ce:1b:d5:bf:1a:c1:14:c8:76:a1:af:fc:48:a4:67:
9c:c6:50:2d:1a:ce:ab:9b:e0:95:c5:87:46:07:7a:
c8:3b:2c:34:1e:3b:72:1a:de:33:0d:6d:7c:a9:a9:
47:c2:07:01:c5:74:a3:0a:97:0d:65:2e:25:1d:02:
97:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:5A:A6:FD:06:D4:78:62:7A:4D:AE:D7:BE:CA:2E:E9:9B:72:3B:F7
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/X1qm_QbUeGJ6Ta7Xvsou6ZtyO_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:18::/48
2a06:a005:430::/47
2a06:a005:440::/44
2a06:a005:890::/44
Signature Algorithm: sha256WithRSAEncryption
00:ec:d8:00:d3:41:d5:e2:0e:21:4a:39:0e:82:4a:c0:4c:87:
cf:dc:f8:dd:23:f9:75:a6:27:81:91:23:74:b0:f1:34:9c:2b:
eb:ce:90:ba:0d:03:47:5a:58:0b:43:a0:8b:bd:4b:4e:20:f9:
69:30:24:83:8e:e2:6c:d6:81:fe:bd:b5:d0:8a:3f:ef:27:fc:
39:82:c6:2a:05:47:e1:b4:c4:3a:4f:0e:f7:27:97:84:36:2c:
d7:10:91:7f:14:b8:a2:dc:b3:b2:10:a4:50:bc:8f:aa:c5:e2:
ad:c3:40:f8:7a:8a:5e:42:c9:f7:54:3c:fd:e8:8a:be:49:9d:
95:98:58:ea:a7:24:82:51:4f:e8:02:49:30:91:ac:52:fe:1f:
04:ca:ea:ce:10:46:fd:22:7c:fc:a3:08:c5:80:c0:2e:32:e8:
ca:e7:bc:1f:c7:a3:b0:eb:13:d5:2d:f0:a4:aa:f3:69:c4:f9:
87:4d:0c:1b:31:c9:d9:02:04:74:a1:48:0a:f3:9b:ca:20:c7:
c2:1d:57:92:8b:12:0f:e2:f4:28:c4:18:af:1e:b4:99:c7:d7:
b3:a1:1d:ca:8c:2b:cc:f0:be:f2:bb:4c:a7:12:23:66:30:2a:
9c:2e:3d:75:8b:a1:c9:00:e0:1e:92:4b:eb:41:26:44:89:42:
7e:37:dc:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:09:38 2025 by rpki-client