Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/qxAylDXPIQOsuNHCqa27elK9_1o.roa
File: qxAylDXPIQOsuNHCqa27elK9_1o.roa (raw, json)
Hash identifier: VXRnkWstpwAwv93e1QD5geYr7oMlDbrEoNM2FPccftI=
Subject key identifier: AB:10:32:94:35:CF:21:03:AC:B8:D1:C2:A9:AD:BB:7A:52:BD:FF:5A
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0182697E21DEF37E6ECD8748178FE2145183
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/qxAylDXPIQOsuNHCqa27elK9_1o.roa
Signing time: Thu 04 Aug 2022 15:34:10 +0000
ROA not before: Thu 04 Aug 2022 15:34:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203979
IP address blocks: 2a06:a005:454::/48 maxlen: 48
2a06:a005:45a::/48 maxlen: 48
2a06:a005:455::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:69:7e:21:de:f3:7e:6e:cd:87:48:17:8f:e2:14:51:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Aug 4 15:34:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ab10329435cf2103acb8d1c2a9adbb7a52bdff5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e6:b5:4b:49:02:18:8b:35:00:a9:d7:00:63:
32:8a:ec:2c:56:36:28:fd:e6:49:c2:b3:84:b0:f4:
2f:0c:c9:d3:69:9a:b8:23:eb:cb:8a:b9:83:c5:34:
9b:38:38:fe:77:35:10:29:23:53:ca:4d:db:f0:89:
9c:5c:46:e3:20:d9:62:3d:3c:4f:09:d2:4c:fd:55:
8a:4a:5d:5c:04:d1:67:d2:63:9a:6d:6e:0b:70:00:
40:83:d0:0a:f7:5b:4c:b5:55:c9:29:88:4e:c2:a3:
fb:16:64:53:af:c6:a5:29:8f:e6:b9:cd:ce:8d:4f:
97:80:10:14:f9:e5:14:e5:99:7a:fe:57:80:a3:a1:
9d:36:ca:e1:2c:47:47:55:a0:d8:7f:de:a3:36:a4:
7c:e7:d1:10:0f:bc:34:c3:9d:91:df:b2:a7:b6:5a:
b9:a2:15:83:58:47:78:26:e2:22:50:e9:ea:7b:9f:
7c:f4:87:cb:04:4d:72:1b:47:e5:4e:ff:71:21:dd:
09:ae:99:78:09:98:43:ba:66:45:a0:bf:29:6b:25:
17:f5:9e:d2:35:20:66:ff:17:68:07:18:b3:c1:a0:
a3:55:28:b2:28:0b:93:9f:bb:72:b4:5c:e9:0c:08:
ce:5d:62:d3:83:99:04:a6:3b:c2:48:54:79:42:f4:
57:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:10:32:94:35:CF:21:03:AC:B8:D1:C2:A9:AD:BB:7A:52:BD:FF:5A
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/qxAylDXPIQOsuNHCqa27elK9_1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:454::/47
2a06:a005:45a::/48
Signature Algorithm: sha256WithRSAEncryption
76:fa:f6:b2:ca:fc:1e:85:c2:ab:c3:77:07:c9:6f:96:f1:7a:
1a:d9:a7:00:10:a8:6b:05:68:1b:30:25:1b:d3:53:d2:22:d0:
a6:da:39:62:a6:df:76:46:f7:0b:9c:86:f9:f3:c1:e1:fa:db:
61:30:7b:84:5f:cb:21:4d:31:bb:0b:4f:9a:30:5a:5c:5f:37:
50:37:ff:0e:d9:39:ec:94:ac:09:5a:46:c7:45:f8:09:9a:b4:
d4:be:5b:be:a5:0b:0d:dc:87:c1:ea:05:a6:03:09:db:b9:4b:
b5:10:46:7b:c0:b4:4d:ad:ad:cf:4d:81:09:ab:c6:a8:e6:b5:
fb:32:09:ae:e9:4e:97:35:8a:ea:ff:4a:6a:53:b9:99:3a:a2:
3e:8b:8a:84:f7:77:b0:ba:56:a5:ae:96:eb:39:b9:21:4c:71:
0c:31:a6:76:e6:24:21:d6:73:78:6a:02:03:87:5d:2a:3c:71:
2f:05:7b:23:94:fa:0e:b9:4e:4d:a6:1c:cf:2b:60:75:aa:73:
c2:50:78:89:cf:76:c4:56:bf:07:65:a3:db:b1:05:3a:d2:36:
cd:d6:46:21:b0:b3:3a:f5:cd:c3:4f:ab:53:a6:78:5e:94:f8:
d3:4f:a1:33:04:72:9d:3e:72:08:66:b2:3e:70:48:7d:58:90:
ff:12:7c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 09:58:18 2025 by rpki-client