Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/qG6kLyrYQcw30L5qsXlzGy8CHiU.roa
File: qG6kLyrYQcw30L5qsXlzGy8CHiU.roa (raw, json)
Hash identifier: UQgHphn6hPMXB9eZ8TGwskt4GIGtVIKv98/OCW1sreY=
Subject key identifier: A8:6E:A4:2F:2A:D8:41:CC:37:D0:BE:6A:B1:79:73:1B:2F:02:1E:25
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0182402D9217CD9B36A4E45308601B9691DC
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/qG6kLyrYQcw30L5qsXlzGy8CHiU.roa
Signing time: Wed 27 Jul 2022 15:01:44 +0000
ROA not before: Wed 27 Jul 2022 15:01:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203888
IP address blocks: 2a06:a005:45c::/48 maxlen: 48
2a06:a005:45a::/48 maxlen: 48
2a06:a005:13b0::/44 maxlen: 48
2a06:a005:45b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:40:2d:92:17:cd:9b:36:a4:e4:53:08:60:1b:96:91:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jul 27 15:01:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a86ea42f2ad841cc37d0be6ab179731b2f021e25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:bb:d7:82:16:10:df:d7:77:e0:d3:35:ed:35:
cb:1f:fa:55:b7:0d:a4:c3:a1:0e:ad:4f:be:33:bf:
30:2b:af:df:04:96:27:18:9a:9c:bb:3d:b3:76:a6:
9e:47:ff:d8:ed:b8:69:a6:fa:7f:56:56:4e:53:79:
89:ce:32:60:e4:52:b4:99:8a:3c:21:07:15:f7:53:
dc:e2:cb:2c:0e:93:fa:f2:21:02:78:d5:a7:c6:a0:
19:0e:74:2b:b2:58:c2:30:3a:47:3c:3f:f4:34:9c:
58:57:aa:c4:3e:f5:db:7c:39:34:3e:ad:55:20:84:
03:cf:9d:63:0f:fe:ef:bd:5f:3d:09:f5:c3:17:53:
8e:7c:f5:ac:69:15:a3:b6:ec:46:9b:2d:d8:06:fa:
09:bc:51:a0:fe:0d:71:86:3b:0e:91:98:2a:aa:dd:
32:7a:a9:76:77:fc:d9:96:70:58:cb:1c:9c:7f:59:
d4:05:f7:91:cb:34:26:9d:f0:3a:cd:0a:50:c9:e5:
66:95:35:a2:44:f3:83:1a:63:a2:c5:b4:cc:42:91:
c8:75:a9:b7:da:be:16:f1:e9:6f:36:c6:60:fc:96:
4e:2d:51:15:b0:8e:52:ef:27:f5:3b:fc:c3:20:79:
61:3d:48:31:23:45:47:7b:d4:49:ab:01:ff:66:b0:
57:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:6E:A4:2F:2A:D8:41:CC:37:D0:BE:6A:B1:79:73:1B:2F:02:1E:25
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/qG6kLyrYQcw30L5qsXlzGy8CHiU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:45a::-2a06:a005:45c:ffff:ffff:ffff:ffff:ffff
2a06:a005:13b0::/44
Signature Algorithm: sha256WithRSAEncryption
56:1a:06:01:ec:4b:aa:2a:3c:67:b5:8c:c3:8d:c8:41:19:e3:
da:db:24:3a:86:4c:6d:1d:35:eb:c7:20:ab:e9:70:95:6a:dd:
ed:48:d6:ba:4e:26:22:5f:8c:4b:8e:a1:d2:d2:14:aa:df:19:
4d:c9:83:c5:38:f0:ea:2f:93:fc:3b:c0:6f:5e:ca:e4:61:6f:
2d:a6:84:ef:5e:9b:5e:34:66:14:91:ab:73:ab:a0:64:5e:6e:
e2:81:ff:b3:d6:d1:c2:c6:45:4d:47:d8:4d:36:f5:3f:02:70:
1d:18:e4:7a:63:ee:1c:69:99:6c:35:5e:ef:c9:fd:98:94:a2:
fb:b5:97:3e:40:ba:4e:33:0c:72:a5:33:92:d9:8f:f8:80:ac:
3d:48:86:56:7a:71:31:1b:1a:48:bd:3e:44:a1:fe:eb:af:6d:
c9:e2:f9:44:f1:e3:b0:4d:cb:6e:1c:41:5c:9f:a4:43:69:18:
de:90:8a:51:7a:f7:ee:ac:4b:d2:0f:4f:f5:a6:a1:7e:dc:da:
e6:42:57:72:ad:34:3a:0f:51:ab:26:96:1c:4d:78:a3:5d:d3:
7f:74:c7:ac:ec:b0:c6:c9:17:4d:33:ee:4c:61:a1:69:8d:6c:
6d:40:23:ff:0e:00:17:34:a6:e5:da:59:53:e4:46:74:d0:d1:
49:ad:d5:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 22:13:48 2025 by rpki-client