Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/qjecg-PekU1nXqOdbUrpnMZxaRs.roa
File: qjecg-PekU1nXqOdbUrpnMZxaRs.roa (raw, json)
Hash identifier: 6izHgEg5Jp+cUW+yECOn2cdk0dyZ4uwRsv3ec1wRSAE=
Subject key identifier: AA:37:9C:83:E3:DE:91:4D:67:5E:A3:9D:6D:4A:E9:9C:C6:71:69:1B
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 1A522A0B
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/qjecg-PekU1nXqOdbUrpnMZxaRs.roa
Signing time: Mon 30 May 2022 22:27:56 +0000
ROA not before: Mon 30 May 2022 22:27:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213386
IP address blocks: 2a06:a005:2d7::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 441592331 (0x1a522a0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: May 30 22:27:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aa379c83e3de914d675ea39d6d4ae99cc671691b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:cb:2f:5e:ed:7d:8b:28:53:73:09:24:d4:f2:
18:8f:49:e8:c6:99:86:d2:39:5f:6a:8a:2d:9c:e9:
62:d7:86:bb:d0:2c:15:00:e4:88:9f:13:7a:0c:52:
6d:96:12:31:4e:80:44:0b:6b:57:1a:b3:8a:41:f5:
d8:37:1a:67:8b:20:ff:aa:27:36:98:5e:84:e6:46:
a0:ac:91:a0:cf:d6:d4:9d:35:c1:5b:7d:06:82:2e:
d9:63:65:6a:21:ed:4b:18:59:c9:8c:94:7d:7e:5a:
fb:57:02:8a:9b:9b:8d:ff:62:21:be:51:27:a3:8d:
67:a0:5f:26:f4:75:d2:26:31:59:a6:3c:c5:df:c2:
e8:0e:0d:ab:6b:51:69:38:3a:55:ce:0f:fb:b4:b8:
76:c4:f4:ba:73:bd:f0:fb:25:8f:94:95:a8:9e:78:
e2:37:8f:40:b3:32:12:b7:c4:a6:c9:e2:d7:1f:e4:
24:58:df:f5:90:f5:eb:9b:42:8f:e3:cb:63:f0:64:
b7:aa:d4:5f:57:ec:54:1c:d0:6b:d3:38:a7:a6:ea:
fa:06:81:6b:b9:8d:52:fa:2a:92:87:b6:1f:82:ad:
03:e5:36:44:34:71:c2:0c:24:91:3a:07:5a:f9:89:
81:6d:0a:8a:0c:a5:0c:00:47:79:81:14:12:b9:bb:
54:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:37:9C:83:E3:DE:91:4D:67:5E:A3:9D:6D:4A:E9:9C:C6:71:69:1B
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/qjecg-PekU1nXqOdbUrpnMZxaRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2d7::/48
Signature Algorithm: sha256WithRSAEncryption
48:2d:d9:2a:fd:cb:83:e9:a5:30:d7:14:49:3c:21:6a:99:62:
8b:ca:cf:b5:d9:51:9f:c5:40:47:14:df:d0:b6:ff:1b:46:c1:
48:a4:d1:9d:90:a3:ab:ca:f2:97:c6:c7:aa:75:2a:c9:bd:59:
51:4b:4a:cb:74:e0:8f:93:bc:45:15:a0:4c:8d:55:6a:96:fb:
bb:d9:2e:ac:55:08:67:4e:6d:67:fa:8a:62:f7:29:8b:9d:cb:
b3:26:0c:33:ab:04:5d:dc:a7:d1:3e:96:a6:ab:a6:6c:09:c8:
1f:aa:d8:06:a0:c9:93:1f:d2:38:0a:07:be:34:f9:95:b1:b4:
79:34:1e:5e:1b:79:23:23:67:ac:83:f6:6a:00:5c:36:7b:13:
26:26:f1:c0:a7:a6:38:09:a7:5f:8d:2c:3a:01:18:4a:34:25:
97:6c:0b:64:4b:1d:59:61:fe:8a:ee:96:76:aa:70:91:0a:a5:
8b:ed:ae:3a:0f:54:c7:9b:97:61:20:e4:6e:10:90:94:a5:32:
c0:65:c6:cb:a7:17:19:f3:c7:25:b5:b9:0f:06:b1:2c:9d:16:
e7:34:c7:c8:ac:5a:55:71:aa:13:e9:11:3b:54:c3:7c:bb:30:
54:09:a2:34:8a:b9:ad:73:8d:b8:23:56:32:16:4f:9d:c3:d2:
d0:39:92:c0
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEGlIqCzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NDkxNDU0MWZkMWI5NWU3YzBhZmM4NzVmYmVmNzg3OTRmNTUzODZiMB4XDTIyMDUz
MDIyMjc1NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYWEzNzljODNlM2Rl
OTE0ZDY3NWVhMzlkNmQ0YWU5OWNjNjcxNjkxYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANDLL17tfYsoU3MJJNTyGI9J6MaZhtI5X2qKLZzpYteGu9As
FQDkiJ8TegxSbZYSMU6ARAtrVxqzikH12DcaZ4sg/6onNphehOZGoKyRoM/W1J01
wVt9BoIu2WNlaiHtSxhZyYyUfX5a+1cCipubjf9iIb5RJ6ONZ6BfJvR10iYxWaY8
xd/C6A4Nq2tRaTg6Vc4P+7S4dsT0unO98Pslj5SVqJ544jePQLMyErfEpsni1x/k
JFjf9ZD165tCj+PLY/Bkt6rUX1fsVBzQa9M4p6bq+gaBa7mNUvoqkoe2H4KtA+U2
RDRxwgwkkToHWvmJgW0KigylDABHeYEUErm7VA0CAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBSqN5yD496RTWdeo51tSumcxnFpGzAfBgNVHSMEGDAWgBRUkUVB/RuV58Cv
yHX773h5T1U4azAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ZKRkZRZjBibGVmQXI4aDEtLTk0ZVU5Vk9Hcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGEvNDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8x
L3FqZWNnLVBla1UxblhxT2RiVXJwbk1aeGFScy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEv
NDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8xL1ZKRkZRZjBibGVm
QXI4aDEtLTk0ZVU5Vk9Hcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoGoAUC1zANBgkqhkiG9w0BAQsF
AAOCAQEASC3ZKv3Lg+mlMNcUSTwhaplii8rPtdlRn8VARxTf0Lb/G0bBSKTRnZCj
q8ryl8bHqnUqyb1ZUUtKy3Tgj5O8RRWgTI1Vapb7u9kurFUIZ05tZ/qKYvcpi53L
syYMM6sEXdyn0T6WpqumbAnIH6rYBqDJkx/SOAoHvjT5lbG0eTQeXht5IyNnrIP2
agBcNnsTJibxwKemOAmnX40sOgEYSjQll2wLZEsdWWH+iu6WdqpwkQqli+2uOg9U
x5uXYSDkbhCQlKUywGXGy6cXGfPHJbW5DwaxLJ0W5zTHyKxaVXGqE+kRO1TDfLsw
VAmiNIq5rXONuCNWMhZPncPS0DmSwA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:13 2024 by rpki-client on console-fra.rpki-client.org