Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/nq9PJEIvuXGaT26dhpu4QJZy4pg.roa
File: nq9PJEIvuXGaT26dhpu4QJZy4pg.roa (raw, json)
Hash identifier: 4MUrn0BvvnLsNDV6bGABr7w04cgdSnnyZoXj726nUDA=
Subject key identifier: 9E:AF:4F:24:42:2F:B9:71:9A:4F:6E:9D:86:9B:B8:40:96:72:E2:98
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 18AFC1B5
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/nq9PJEIvuXGaT26dhpu4QJZy4pg.roa
Signing time: Mon 25 Apr 2022 07:36:31 +0000
ROA not before: Mon 25 Apr 2022 07:36:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210305
IP address blocks: 2a06:a005:5b5::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 414171573 (0x18afc1b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Apr 25 07:36:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9eaf4f24422fb9719a4f6e9d869bb8409672e298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b4:11:80:0f:96:e6:c4:b8:01:e5:77:01:78:
db:8e:45:93:9b:42:e7:7f:f1:cf:57:46:e0:8e:41:
0c:ec:25:0d:d4:07:0d:48:54:85:dd:4c:53:57:c2:
0d:05:3f:8a:d4:e1:4f:a8:e5:2f:01:4b:4d:e8:8b:
43:7e:cc:dd:07:61:59:c3:e2:a4:1f:35:1e:e7:83:
b5:6b:83:79:4e:30:be:4a:0b:a7:cc:ef:13:d4:19:
8e:0b:9e:dc:55:5a:79:7d:f5:3f:c5:25:b7:9d:34:
a6:d2:d4:fe:c1:33:de:12:bf:84:f4:76:7f:ff:44:
d8:4c:ea:f7:88:86:a9:3c:bc:a4:a0:41:d4:23:12:
33:c9:47:b4:e2:99:91:1f:c9:6c:2e:72:07:f7:82:
8d:69:40:e1:bf:48:5e:82:95:00:5f:4f:af:f6:8e:
45:3a:3b:21:48:a9:ca:bc:ae:14:8c:41:2c:38:65:
8d:80:5a:f8:79:ec:fa:fb:9a:3f:c4:69:da:7e:51:
83:e8:ba:d9:89:bf:1f:9a:15:ea:85:7e:82:e3:89:
df:16:02:a0:71:ef:8f:76:d2:38:d6:46:a7:71:6e:
17:d6:63:21:54:76:25:e9:96:26:0b:89:9c:2f:e2:
78:88:6e:a8:01:9c:da:94:35:5e:01:ab:fb:1f:32:
9a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:AF:4F:24:42:2F:B9:71:9A:4F:6E:9D:86:9B:B8:40:96:72:E2:98
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/nq9PJEIvuXGaT26dhpu4QJZy4pg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5b5::/48
Signature Algorithm: sha256WithRSAEncryption
67:fb:ee:b4:25:c1:42:1e:08:69:4b:04:13:5b:e3:6a:56:40:
8e:d4:eb:61:ef:2f:3b:67:ca:8b:f6:a5:4a:6a:b4:36:1b:5f:
06:c1:2d:35:3f:e6:c1:e1:f6:6a:70:f6:e5:f1:11:a5:10:7d:
f1:6f:63:f5:d9:32:37:97:87:bb:ce:45:d3:7f:24:8e:96:f7:
f8:f7:f1:61:17:8b:e0:99:af:d3:58:f1:b7:11:ad:1f:80:59:
fe:32:67:38:ee:4e:b1:f3:d7:b6:38:d3:d4:72:1b:61:f5:06:
e3:ec:d5:50:d0:37:1f:d2:37:0f:e2:3c:bc:ed:86:93:9b:b5:
d9:74:88:71:12:fa:12:da:19:a7:4c:93:5f:df:e7:01:cf:d4:
f2:cb:0a:93:e4:2f:b0:e9:fa:ce:49:c7:3d:bd:2f:64:ce:e4:
bd:24:1b:8e:eb:dc:d6:d9:7e:e3:55:10:c9:72:0a:56:ec:ab:
ba:db:27:2a:e0:48:88:dc:f4:58:16:6d:80:7b:97:02:da:b3:
e5:34:84:28:26:3a:6d:e9:0b:4f:23:a0:dc:10:86:7e:b4:2b:
9b:38:64:96:ff:7b:b5:3f:4d:89:8c:f5:94:88:e7:8b:80:d9:
37:0b:4f:d9:e0:47:22:b4:4b:e6:00:a3:0f:f3:a8:11:eb:f7:
fb:96:d1:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 09:59:39 2025 by rpki-client