Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0951d7-3f67-4bd4-904d-c94feaa6cb79/1/Q-ygJ-GVPP-G5_uRSCzesSuFeXQ.roa
File: Q-ygJ-GVPP-G5_uRSCzesSuFeXQ.roa (raw, json)
Hash identifier: 1UNLOoFi87cGQvqT9S+bYlxwdhKmgBU77HyrD2Bu4+w=
Subject key identifier: 43:EC:A0:27:E1:95:3C:FF:86:E7:FB:91:48:2C:DE:B1:2B:85:79:74
Certificate issuer: /CN=a5295237ab44bce35ddfc2627fd49a8c44612441
Certificate serial: 27F3AD86
Authority key identifier: A5:29:52:37:AB:44:BC:E3:5D:DF:C2:62:7F:D4:9A:8C:44:61:24:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pSlSN6tEvONd38Jif9SajERhJEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/0951d7-3f67-4bd4-904d-c94feaa6cb79/1/Q-ygJ-GVPP-G5_uRSCzesSuFeXQ.roa
Signing time: Sat 01 Jan 2022 13:00:29 +0000
ROA not before: Sat 01 Jan 2022 13:00:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207808
IP address blocks: 2a00:7180:8008::/46 maxlen: 46
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 670281094 (0x27f3ad86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5295237ab44bce35ddfc2627fd49a8c44612441
Validity
Not Before: Jan 1 13:00:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=43eca027e1953cff86e7fb91482cdeb12b857974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e5:18:c2:30:57:33:12:10:50:45:13:28:b0:
40:b3:d7:e7:0b:02:4e:b9:28:5c:ea:7c:4e:3f:3d:
3b:97:59:c7:0c:b1:f2:81:e7:8f:62:b2:87:54:65:
33:82:12:87:16:f1:ed:d8:ec:0b:fb:59:6e:28:4e:
8f:b9:a5:df:4c:2f:88:e4:d7:3d:64:aa:0e:c3:22:
78:45:41:15:2b:b7:7b:b8:1b:e8:99:66:e0:14:67:
34:62:84:61:10:21:dc:2c:14:25:3e:c9:f9:d0:a8:
59:d0:78:fc:e4:62:9f:10:56:cc:57:50:74:7c:3b:
02:7e:9d:6c:95:9a:bb:33:9a:a7:f4:aa:3b:9e:44:
49:fb:f7:96:57:c5:0b:5e:9d:df:bb:d2:90:9d:74:
0f:ef:40:a5:d2:56:f3:07:1b:98:69:06:75:4e:f6:
b5:ae:40:ed:72:8b:a4:f1:fc:79:9c:70:ff:7f:22:
bd:05:7b:8f:e1:22:a8:94:10:04:45:16:ed:75:c2:
9b:b3:06:1a:15:aa:c4:7a:87:fb:fa:1c:c4:36:d1:
3d:ea:a0:d6:aa:4e:78:d2:43:cb:d8:cd:09:26:a3:
da:3b:04:9a:33:82:5e:47:ca:e1:97:9a:f8:99:6e:
b1:5e:3f:fa:43:d4:a3:01:2d:53:7a:f2:27:9a:85:
a7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:EC:A0:27:E1:95:3C:FF:86:E7:FB:91:48:2C:DE:B1:2B:85:79:74
X509v3 Authority Key Identifier:
keyid:A5:29:52:37:AB:44:BC:E3:5D:DF:C2:62:7F:D4:9A:8C:44:61:24:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pSlSN6tEvONd38Jif9SajERhJEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0951d7-3f67-4bd4-904d-c94feaa6cb79/1/Q-ygJ-GVPP-G5_uRSCzesSuFeXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0951d7-3f67-4bd4-904d-c94feaa6cb79/1/pSlSN6tEvONd38Jif9SajERhJEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:7180:8008::/46
Signature Algorithm: sha256WithRSAEncryption
16:04:14:09:62:b4:5f:7a:ef:4f:23:e2:50:74:a3:3e:ba:23:
85:29:7c:8f:f5:16:3f:24:79:6a:07:2e:ec:de:1b:02:05:f0:
27:2d:d2:fd:15:63:34:49:02:3e:c0:dd:71:c3:b6:61:b7:2b:
ec:f1:74:49:47:eb:40:af:a1:51:76:33:a6:78:d3:e3:fb:9a:
16:fc:e7:d6:6c:c8:b7:b3:af:01:33:55:f7:1d:dc:26:2a:49:
24:62:62:b2:f0:cf:82:c6:7d:93:b8:76:29:e4:d9:2d:e3:1f:
36:c8:fe:9b:05:dc:17:d5:4a:a4:ca:3e:42:00:71:6a:48:6d:
a3:e0:13:52:cb:a8:bb:ce:c6:33:5f:83:db:5a:e9:1b:b0:98:
77:44:80:2e:98:7b:6b:22:6c:e1:61:9b:a7:4c:cd:d3:a3:10:
93:05:64:5b:e5:48:02:16:ea:ed:33:f1:7d:61:7f:2a:33:de:
3f:52:7e:ed:ff:2b:78:9e:30:f3:ae:77:50:08:fe:e7:4b:4d:
58:69:e1:3e:d2:45:35:b2:a5:39:87:29:70:8d:83:bb:d2:74:
5d:55:f2:24:fa:b7:9d:65:25:14:54:0a:99:e2:4c:d1:5b:7c:
12:2c:c9:04:8d:cd:7e:0d:0c:78:38:17:81:ba:56:b7:a6:a1:
89:d0:16:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:52:47 2025 by rpki-client