Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/sqnm3GOn4i7VdfWaey2J3twI4Mk.roa
File: sqnm3GOn4i7VdfWaey2J3twI4Mk.roa (raw, json)
Hash identifier: rMayNRsT2KRJDnlVc7wpsyilLbO2212vJ0KEFR4vqO8=
Subject key identifier: B2:A9:E6:DC:63:A7:E2:2E:D5:75:F5:9A:7B:2D:89:DE:DC:08:E0:C9
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0183047A8BA88F9CD23D02F11976D0C5EDF8
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/sqnm3GOn4i7VdfWaey2J3twI4Mk.roa
Signing time: Sat 03 Sep 2022 17:51:23 +0000
ROA not before: Sat 03 Sep 2022 17:51:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 134478
IP address blocks: 2a06:a005:5aa::/48 maxlen: 48
2a06:a005:d00::/44 maxlen: 48
2a06:a005:950::/44 maxlen: 48
2a06:a005:580::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:04:7a:8b:a8:8f:9c:d2:3d:02:f1:19:76:d0:c5:ed:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Sep 3 17:51:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b2a9e6dc63a7e22ed575f59a7b2d89dedc08e0c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:71:55:ad:de:4c:01:3f:04:0f:46:72:38:3e:
a2:96:f5:80:09:ea:36:37:40:97:0b:f2:e5:2f:dd:
6b:95:b4:c4:da:f6:b6:31:2a:8f:08:65:a8:ae:7f:
0b:81:ec:bf:e1:94:6f:be:c3:a7:61:66:1a:b8:4b:
4f:7a:ce:41:c3:dd:a1:c3:0e:4b:a6:8c:eb:ed:df:
55:1d:40:a4:0a:40:93:4c:50:4b:3c:17:b1:a2:e5:
ba:a8:84:fa:04:e6:97:3f:2d:15:e5:0b:87:3d:a1:
4a:a9:2f:4a:3a:34:1f:c5:f4:ee:dd:59:36:94:23:
6f:73:6d:57:ed:89:1f:1c:4a:86:4d:e9:67:48:a0:
8d:c2:42:1b:f0:1d:b9:40:37:97:98:66:0f:b7:42:
e3:e0:ed:a5:ad:d3:2f:a0:a1:b2:64:53:15:2c:ad:
7a:d6:74:39:db:a5:fc:e9:59:ce:b5:0b:b5:7f:23:
08:0b:b2:40:f3:20:88:0e:61:bc:19:e0:a9:d2:62:
7a:09:02:50:5c:b2:f7:8b:4f:cb:fa:dc:31:ad:4a:
0a:ad:32:fa:76:dc:f8:61:7a:32:d0:44:39:40:bc:
86:df:02:1c:27:ce:23:fa:13:e7:1b:63:2a:93:ec:
77:38:0d:3c:ec:36:eb:16:7b:5b:cc:3d:6a:96:38:
a3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:A9:E6:DC:63:A7:E2:2E:D5:75:F5:9A:7B:2D:89:DE:DC:08:E0:C9
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/sqnm3GOn4i7VdfWaey2J3twI4Mk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:580::/44
2a06:a005:5aa::/48
2a06:a005:950::/44
2a06:a005:d00::/44
Signature Algorithm: sha256WithRSAEncryption
2d:77:11:13:52:24:24:99:75:99:92:64:96:60:fc:f3:de:04:
6d:39:05:3c:66:2d:4d:7f:19:ce:5a:13:f4:0d:cf:75:20:85:
52:c4:bd:be:b4:31:46:e4:dc:f3:ac:77:86:a9:03:a2:a4:96:
02:83:1d:1d:f5:7a:d5:90:4e:ea:1a:83:6c:03:65:44:73:e5:
b7:c8:2f:75:3c:a2:b5:eb:3b:29:69:bc:31:d4:ea:50:80:0d:
f5:8a:b0:de:30:40:d7:ad:fb:30:f2:6f:d0:54:2d:6b:f6:6c:
2f:fb:cf:ed:db:39:29:f6:91:82:8e:7c:2e:65:3b:bd:a6:2d:
f5:17:63:48:9e:a7:b3:51:45:41:9b:a6:e6:a5:15:0a:d0:68:
a5:e0:27:df:08:35:52:0c:59:50:e9:96:eb:9e:d0:93:0e:90:
2c:ec:c3:cd:ba:d2:2a:56:d7:98:f3:5f:8f:66:dd:5d:74:e9:
27:3a:f9:0a:c0:29:86:59:4b:17:c0:47:57:25:c5:d1:0d:bd:
d7:c3:7a:3a:9d:c2:4b:88:0e:12:70:7b:42:08:17:05:ec:3d:
f7:ad:d9:30:51:1c:6c:02:87:d0:63:ef:e7:fb:50:71:9e:2f:
b1:6f:d1:35:b1:d2:db:4a:d8:1f:66:27:42:b6:22:d9:61:3b:
f9:27:f1:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:42:38 2025 by rpki-client