Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/lqF9atNybsEj3mjPYHgoP8V9BqM.roa
File: lqF9atNybsEj3mjPYHgoP8V9BqM.roa (raw, json)
Hash identifier: kAfDOhrgtgRdzYnF0nnYR9bnqIBLooO/qG1dvjjizv4=
Subject key identifier: 96:A1:7D:6A:D3:72:6E:C1:23:DE:68:CF:60:78:28:3F:C5:7D:06:A3
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 1B48AC8D
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/lqF9atNybsEj3mjPYHgoP8V9BqM.roa
Signing time: Thu 23 Jun 2022 18:38:36 +0000
ROA not before: Thu 23 Jun 2022 18:38:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60379
IP address blocks: 2a06:a005:ef0::/44 maxlen: 48
2a06:a005:f10::/44 maxlen: 48
2a06:a005:f00::/44 maxlen: 48
2a06:a005:ee0::/44 maxlen: 48
2a06:a005:f20::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 457747597 (0x1b48ac8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jun 23 18:38:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=96a17d6ad3726ec123de68cf6078283fc57d06a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:90:3c:f6:73:c3:00:53:97:04:8c:7e:82:c7:
00:11:3e:81:9f:b6:00:28:59:bf:4b:88:76:51:22:
e2:54:da:cf:dc:0d:c3:43:ac:91:2e:5f:72:51:5f:
2a:15:03:7a:ee:ef:49:d9:a5:98:9a:b2:a9:bd:ca:
dd:9d:13:8d:99:4f:9e:44:d7:3c:fe:18:35:47:64:
9b:e7:82:e3:4e:d7:ed:8c:d1:33:3e:80:81:96:7a:
b8:53:39:17:a1:f8:30:bf:c4:c0:81:bd:77:fb:4b:
3b:b9:cc:3c:e2:f7:70:9e:18:b4:cf:92:1c:d8:05:
23:64:23:a6:23:b4:c5:c1:b3:ff:05:c2:64:96:b6:
ad:3f:03:9e:04:1b:00:99:32:bc:b5:90:5c:45:5e:
da:7e:c3:2a:24:4b:b3:9b:48:64:fd:f5:58:05:68:
98:fb:70:8f:87:a8:38:d9:65:c3:54:17:4d:11:63:
f5:98:4a:1e:d9:24:4b:25:41:3c:9d:c2:8e:db:b5:
c4:59:2a:e0:90:99:f2:e7:45:98:9f:20:3b:b3:bb:
61:8d:54:31:48:a3:bc:bc:b6:7a:3e:38:f2:6c:2f:
0d:09:d3:42:9c:b2:6a:e5:fc:6a:95:b1:e0:a7:d8:
28:1d:05:a1:e0:e6:73:f9:b1:ad:d9:06:3b:08:fc:
fd:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:A1:7D:6A:D3:72:6E:C1:23:DE:68:CF:60:78:28:3F:C5:7D:06:A3
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/lqF9atNybsEj3mjPYHgoP8V9BqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:ee0::-2a06:a005:f2f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
54:db:fc:05:a2:67:6e:8d:f7:0a:0b:fd:e3:16:34:fd:bd:1c:
63:44:c7:5e:50:b1:8f:f3:8f:5b:3b:6e:a0:a4:4d:3f:8a:bd:
66:a7:89:ff:59:f0:45:5f:37:ad:d6:9b:d8:54:1c:9b:8c:45:
fc:15:90:76:6b:70:81:c7:37:f7:e3:3b:d9:86:cd:43:51:c8:
21:94:e7:5b:2e:c4:12:42:24:04:d7:35:8d:bf:5a:25:2f:1a:
9d:d1:99:c3:35:8c:4a:f2:de:6b:09:02:2b:ce:86:e9:f8:0a:
e3:6e:5e:05:c6:eb:8d:39:6e:e5:9c:e9:d2:a0:8b:ba:51:c5:
1b:7d:56:de:b9:c1:38:41:83:9c:67:72:03:37:3a:0a:95:79:
a0:9c:39:df:d4:53:38:d3:55:f0:7a:80:7a:af:50:4c:ec:fb:
dc:f0:c7:9a:a3:97:9d:34:b9:2d:5a:a5:67:e5:95:f3:15:ac:
1a:d2:8f:36:9b:9f:6c:43:85:1a:29:5b:f5:f6:1b:20:64:9c:
4f:78:89:3a:58:f5:7a:b0:72:16:61:ff:dc:c7:57:9c:cd:10:
4d:d7:c7:9a:65:65:4a:91:1c:16:2b:8a:ae:ff:7d:7d:f3:ad:
b0:9d:89:81:e2:ef:94:04:8f:83:d4:9f:46:b7:96:dc:f6:ca:
96:28:83:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:21:01 2025 by rpki-client