Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Q1ntzt-NLRaxiMWuyFyJ9ZDcqAg.roa
File: Q1ntzt-NLRaxiMWuyFyJ9ZDcqAg.roa (raw, json)
Hash identifier: XKhOWeMQ5x4BSyLtcJrKyRvp/sDlI+mc2ph+2iPpDOc=
Subject key identifier: 43:59:ED:CE:DF:8D:2D:16:B1:88:C5:AE:C8:5C:89:F5:90:DC:A8:08
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 16B00EFB
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Q1ntzt-NLRaxiMWuyFyJ9ZDcqAg.roa
Signing time: Fri 11 Mar 2022 04:35:59 +0000
ROA not before: Fri 11 Mar 2022 04:35:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207941
IP address blocks: 2a06:a005:b0::/44 maxlen: 48
2a06:a005:c0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 380636923 (0x16b00efb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Mar 11 04:35:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4359edcedf8d2d16b188c5aec85c89f590dca808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:61:04:8b:a6:c5:ec:47:81:f6:aa:bb:e3:b5:
0b:b2:7f:ad:03:a0:af:9e:3b:07:d7:95:6d:57:3a:
42:29:8c:b4:ee:b9:81:67:94:8b:33:ba:aa:01:a9:
db:f2:a0:2d:f4:d3:64:e0:ae:eb:1e:e6:2a:45:1a:
97:4d:bb:f8:98:63:88:93:89:e7:e9:b3:04:6a:65:
94:04:33:be:c4:ed:24:59:3e:e3:64:5f:0b:82:b8:
ce:c5:a1:c8:ea:d8:f7:2c:31:ae:db:fe:56:1d:3a:
91:cf:61:f3:73:6e:ce:6d:a2:07:6b:43:6b:58:11:
37:11:d2:50:d5:7e:a0:fd:9a:bc:c0:5a:77:47:52:
d6:33:e8:c2:25:a2:c7:8e:d7:ef:e8:e6:dc:c9:dd:
a5:03:19:b9:60:7d:5e:67:2a:da:92:72:18:ac:3f:
0b:63:00:4f:54:22:62:9f:15:5d:77:cd:06:58:36:
8f:81:01:cd:05:36:b3:ad:c1:cc:b5:ca:21:cf:0d:
f6:dc:2b:0e:f0:e6:1a:59:6f:1c:84:8f:16:f0:02:
84:58:7d:8d:d3:1a:c0:1c:22:8e:ad:45:95:24:b6:
ca:90:34:72:88:96:01:b8:54:b1:2d:47:53:ad:86:
9c:ee:e4:1f:16:4a:e6:48:21:33:ed:dc:b1:9a:f2:
95:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:59:ED:CE:DF:8D:2D:16:B1:88:C5:AE:C8:5C:89:F5:90:DC:A8:08
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Q1ntzt-NLRaxiMWuyFyJ9ZDcqAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:b0::-2a06:a005:cf:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
36:ef:a8:fc:f6:cc:c8:3f:9e:aa:55:6a:c8:c6:3b:28:4b:73:
43:c4:c4:1f:59:74:28:b3:28:d9:84:22:e3:7c:f5:e2:80:33:
60:0e:41:10:fe:e8:fd:00:26:55:e7:72:d5:54:2c:63:8f:65:
d1:30:20:2d:29:7c:e3:4f:d5:72:b3:d1:2b:91:56:7b:24:17:
37:86:f8:34:6a:8c:54:ff:18:96:ab:eb:0a:4f:12:1c:1d:f5:
f3:37:06:44:45:10:7b:7f:43:12:f6:8a:9b:0c:c2:98:1c:06:
cb:61:7b:91:e9:e2:e8:d9:ce:b4:9f:51:ae:d1:1f:a8:31:99:
ec:5c:2f:4b:66:51:7a:5d:75:a0:e0:f1:61:61:6f:f2:64:b3:
1b:d7:2a:17:32:86:49:4b:d3:8c:21:18:61:45:2d:ab:ad:5a:
37:eb:01:f6:70:de:bf:c7:e8:f1:55:72:a5:71:10:23:66:85:
71:14:5f:e3:96:57:5f:93:ac:e8:1e:f2:aa:24:0f:29:b7:e1:
5c:61:eb:bd:e6:4c:f5:07:6f:b8:9e:c6:3e:dc:94:a3:45:73:
00:2d:64:cf:5c:a3:a9:3d:79:d8:e7:f8:2e:83:b4:ef:d1:db:
12:96:6e:3d:17:7f:05:ac:7f:19:ce:9a:b2:a7:14:b6:fd:f0:
23:89:b7:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 12:59:14 2025 by rpki-client