Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/YQ-hfo9hjQF4D9XkknGmum8FRW0.roa
File: YQ-hfo9hjQF4D9XkknGmum8FRW0.roa (raw, json)
Hash identifier: rCCHkt/WFVNK6giVsVsjWMrQvKoTILw33g8dv/eVchc=
Subject key identifier: 61:0F:A1:7E:8F:61:8D:01:78:0F:D5:E4:92:71:A6:BA:6F:05:45:6D
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0182E25705D86149E3166886E2074B963545
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/YQ-hfo9hjQF4D9XkknGmum8FRW0.roa
Signing time: Sun 28 Aug 2022 02:45:30 +0000
ROA not before: Sun 28 Aug 2022 02:45:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203236
IP address blocks: 2a06:a005:486::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:e2:57:05:d8:61:49:e3:16:68:86:e2:07:4b:96:35:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Aug 28 02:45:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=610fa17e8f618d01780fd5e49271a6ba6f05456d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e4:c9:80:6b:2c:a8:d9:a6:98:26:39:1d:19:
09:63:4b:80:74:64:5b:91:05:1d:fe:f9:75:ea:47:
ee:59:02:05:cf:f3:ac:71:c7:95:dd:e4:89:d1:b9:
2f:a0:86:ba:b1:e8:23:3c:be:5f:37:2d:27:2d:90:
7f:90:21:09:0a:a9:ac:67:72:88:78:64:47:d0:43:
fa:a4:04:81:06:ad:fc:9f:fc:88:97:34:00:48:95:
ed:c5:33:a3:b7:bc:85:69:aa:3e:77:30:1e:f5:ca:
86:67:30:20:3f:8d:04:ef:57:8e:78:2a:5d:c7:0a:
2e:17:fc:04:3c:24:0a:78:0f:41:5f:74:5c:b7:ea:
b1:90:e9:f7:f1:c3:c2:30:fb:51:2a:df:df:5a:5b:
48:07:b3:b7:c0:3e:90:2d:55:4f:f0:60:72:29:74:
ad:17:9a:1c:50:e6:f7:b3:df:4a:f5:9c:6a:21:7f:
a7:8c:d7:89:2e:f7:40:d2:55:d5:ad:06:ed:be:47:
85:41:47:f2:37:c5:d7:2a:20:ed:59:70:7e:ba:11:
1f:2d:09:99:3a:1e:66:97:32:33:b6:45:2d:e2:2e:
70:b2:d3:40:d0:64:ab:a6:d6:e4:b1:b2:b3:c5:60:
34:bd:06:24:f6:34:ce:ca:99:1e:ec:58:c1:c4:b4:
19:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:0F:A1:7E:8F:61:8D:01:78:0F:D5:E4:92:71:A6:BA:6F:05:45:6D
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/YQ-hfo9hjQF4D9XkknGmum8FRW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:486::/48
Signature Algorithm: sha256WithRSAEncryption
30:1a:d2:14:39:8d:1a:6d:68:fe:98:de:58:b2:2a:39:9e:61:
ca:9a:07:73:3b:a2:72:3f:e1:38:fb:46:e4:9d:a7:30:f0:dc:
09:c5:75:c1:59:47:b1:39:31:1c:20:28:73:97:4a:e0:bb:8e:
52:18:3f:24:7c:28:db:8c:0e:00:14:8b:a9:f9:90:67:cb:a5:
9b:d4:5f:86:69:eb:37:c2:c5:a0:63:8b:91:24:af:88:d9:e5:
ea:b1:63:76:0d:2d:c3:1f:55:5a:15:55:05:fa:a0:34:0a:90:
03:37:83:5b:76:d3:f9:ab:b3:30:73:cc:62:8b:20:7c:54:51:
e1:ea:8c:2c:fd:15:dd:52:03:5a:26:ca:b3:44:e0:72:ee:49:
4e:5a:d4:a1:2c:1c:23:a5:6c:fb:8b:ad:58:a0:cc:a9:cc:cd:
37:30:a8:00:69:15:af:4c:59:af:48:75:ef:1a:e4:16:29:7f:
a6:a7:2f:57:99:f6:da:11:cc:61:6e:2e:36:cc:15:ed:82:11:
e9:4e:98:bc:e8:41:9d:ee:23:85:82:eb:af:91:ac:f5:68:87:
f1:e1:e5:4e:7e:5a:9f:05:13:15:4c:86:0d:94:c0:3d:59:62:
c0:0c:43:82:5b:a8:ab:68:57:44:b2:1c:bb:81:4e:88:42:45:
2d:9e:e8:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:17:29 2025 by rpki-client