Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/qQOAdrQwIMVBTp1bcRn_eAFyJIc.roa
File: qQOAdrQwIMVBTp1bcRn_eAFyJIc.roa (raw, json)
Hash identifier: GMBBZsAxtLaqitM1fna0bIo41XKAsi6EIvuXiLiPXw0=
Subject key identifier: A9:03:80:76:B4:30:20:C5:41:4E:9D:5B:71:19:FF:78:01:72:24:87
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0184F490855DF6740F49A70FB31D6F63961F
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/qQOAdrQwIMVBTp1bcRn_eAFyJIc.roa
Signing time: Fri 09 Dec 2022 01:47:02 +0000
ROA not before: Fri 09 Dec 2022 01:47:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 396998
IP address blocks: 2a0a:6040:fa00::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f4:90:85:5d:f6:74:0f:49:a7:0f:b3:1d:6f:63:96:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Dec 9 01:47:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a9038076b43020c5414e9d5b7119ff7801722487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0b:b1:fc:2c:73:0b:3c:37:e6:b3:f1:cf:0f:
3b:1a:3c:ad:55:75:59:ac:ac:a2:24:11:49:83:f3:
03:97:31:1e:8f:96:c8:9e:50:88:b5:10:5c:d5:6a:
38:69:35:11:9d:8d:f4:5d:17:26:c9:c0:61:87:27:
43:c8:0c:41:ab:2e:a1:2c:52:bc:35:a0:cc:26:ac:
bc:01:b6:25:ab:d7:32:7f:eb:68:80:30:f7:d6:49:
d6:41:2f:0e:9c:00:dc:98:c5:4d:2c:85:bc:2a:10:
bb:9c:58:ea:6a:c7:db:19:0f:f2:67:05:3c:df:6d:
26:ab:75:c2:30:71:39:04:f0:00:ac:ca:14:10:81:
43:20:5b:a8:70:e0:14:df:62:3b:89:07:2f:47:87:
66:4a:8e:e5:e7:e4:9a:84:8b:7b:bb:a1:32:be:f9:
35:ff:fc:04:df:8b:63:e5:88:32:b5:db:2c:0b:6e:
1b:87:41:3a:33:ee:e2:b3:e5:0c:37:1a:12:73:64:
d9:36:36:56:ef:e9:24:cc:b1:d7:e8:85:c7:8e:8c:
a1:1b:64:e2:b4:d0:98:4f:0f:98:3b:f2:4c:67:78:
ce:15:dc:61:ac:ec:7c:e6:1e:72:67:62:35:f0:86:
23:85:24:b2:47:93:7b:36:94:ec:7c:65:19:2c:a7:
e9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:03:80:76:B4:30:20:C5:41:4E:9D:5B:71:19:FF:78:01:72:24:87
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/qQOAdrQwIMVBTp1bcRn_eAFyJIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:fa00::/40
Signature Algorithm: sha256WithRSAEncryption
a3:59:ba:17:8b:78:c1:de:86:04:ad:f2:c1:4c:4b:69:3a:81:
6f:c5:f9:83:2e:f7:56:ce:27:fc:0a:99:4b:ad:61:41:17:84:
9a:c0:8f:1b:a5:ed:b0:79:0f:34:12:4f:b2:f6:8d:5b:8c:92:
a1:b0:9e:47:9d:50:2f:5e:8c:cc:aa:6f:7f:2e:e2:d2:c0:0c:
57:6f:c5:5e:0c:58:d5:d5:48:f2:0e:bf:f4:d4:66:0a:fd:9c:
c2:13:92:ad:f0:0d:a5:37:3f:a2:99:ba:fa:87:cf:3e:73:83:
5b:f0:52:cc:22:c6:07:ec:5c:6e:3c:bc:3d:a9:a8:81:93:45:
59:c4:2b:ac:d2:f9:b2:0c:5a:c4:c4:af:2c:81:b2:8a:5c:d0:
02:68:50:05:b6:4c:0e:27:54:5a:61:56:f8:7c:e5:2c:a6:42:
e6:48:65:bf:3e:a5:3b:36:9c:a2:4d:2a:ac:e8:c7:73:11:33:
0e:ad:26:e0:10:aa:54:49:9a:54:b0:04:37:ae:c5:12:cf:bb:
ca:fa:bd:c9:05:ab:49:b2:e7:75:a2:2f:5b:64:06:b0:e6:dc:
c1:62:e3:44:8d:71:6e:42:59:1c:c2:ad:10:53:84:fd:16:41:
d1:b1:ea:6b:51:c9:5d:aa:64:4d:78:49:f2:31:46:1a:11:b8:
94:f0:c8:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 09:59:34 2025 by rpki-client