Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/0DK8VrGrJleZ2xzTDdV9ecT1LXE.roa
File: 0DK8VrGrJleZ2xzTDdV9ecT1LXE.roa (raw, json)
Hash identifier: 0buinxdb0cF1EmaWLNW/GV3wkFi8N+wcnBjkiczWFQ0=
Subject key identifier: D0:32:BC:56:B1:AB:26:57:99:DB:1C:D3:0D:D5:7D:79:C4:F5:2D:71
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0184E64939B5615F38719443FC0800F5CAA7
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/0DK8VrGrJleZ2xzTDdV9ecT1LXE.roa
Signing time: Tue 06 Dec 2022 07:14:29 +0000
ROA not before: Tue 06 Dec 2022 07:14:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206271
IP address blocks: 2a0a:6040:fa00::/40 maxlen: 48
2a0a:6040:ef00::/40 maxlen: 48
2a07:54c2:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e6:49:39:b5:61:5f:38:71:94:43:fc:08:00:f5:ca:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Dec 6 07:14:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d032bc56b1ab265799db1cd30dd57d79c4f52d71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:69:0d:3d:8d:16:6d:f7:70:ff:28:10:ae:03:
9d:d1:eb:64:50:5b:28:0d:80:39:5f:82:43:d9:ea:
30:51:b8:a1:72:3d:76:78:66:50:aa:d5:74:46:b4:
b0:cc:a9:f7:72:03:bf:1d:35:65:74:cc:b4:bd:5f:
bc:53:4b:55:c6:f5:2f:bb:81:0d:30:5b:89:c8:79:
fe:5d:24:61:32:ea:a9:56:4c:e0:32:06:33:43:00:
94:a5:de:78:dd:e2:9b:17:1b:5f:f4:d4:93:e9:3a:
a6:3d:eb:86:c1:5e:92:bc:18:3c:d4:38:2d:75:d6:
11:22:e7:93:ec:e8:d4:47:e2:a4:7f:1c:f3:39:52:
4f:54:03:72:ae:71:48:71:b7:d9:1f:00:35:e6:07:
f4:0f:28:05:26:1e:5b:70:89:67:0d:4a:36:92:e6:
c1:0a:90:66:e6:01:60:bf:a9:ce:8e:e6:4c:da:2e:
19:43:8b:e7:eb:96:14:4a:d6:a3:b5:98:c1:40:02:
05:73:25:c5:3d:f8:8f:c3:5d:3b:ff:9c:4e:7a:d7:
ee:8c:fd:ee:31:fb:bf:9b:2c:8b:7c:3e:00:4c:27:
c1:ac:30:0f:0f:59:d6:ef:7a:89:56:8c:77:ca:1a:
af:8b:46:e2:c9:52:8d:f9:4b:cb:4d:ca:d2:e0:ce:
40:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:32:BC:56:B1:AB:26:57:99:DB:1C:D3:0D:D5:7D:79:C4:F5:2D:71
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/0DK8VrGrJleZ2xzTDdV9ecT1LXE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:54c2:b00b::/48
2a0a:6040:ef00::/40
2a0a:6040:fa00::/40
Signature Algorithm: sha256WithRSAEncryption
68:c2:1f:2f:a3:ba:9c:40:c9:e7:45:9e:31:bc:88:c0:a0:0a:
ba:74:09:aa:a5:a0:9a:c3:7e:46:81:41:44:71:1b:38:94:55:
8c:84:1c:c9:88:3e:08:46:01:ed:02:ae:a2:3f:cb:08:32:90:
38:45:04:d7:75:09:87:6b:dc:c2:b9:4a:fb:0e:ae:f1:08:a4:
70:e2:74:33:62:4e:5c:a1:43:da:68:13:03:4a:da:b9:d3:30:
20:6d:da:29:0d:9c:a2:3a:85:cf:c7:e3:b1:0c:65:fe:66:e2:
ce:e2:bd:3c:96:c0:29:51:aa:d2:29:46:53:a9:24:cd:46:e8:
c5:2b:be:cc:e8:d4:8e:5e:00:43:14:86:89:5b:e8:c5:4e:b8:
e5:28:c9:48:36:b6:97:a8:64:b1:fe:ac:2f:70:56:c7:98:d4:
f1:72:d2:b6:11:e2:10:fd:ba:cf:6d:17:b8:56:84:db:5c:1a:
a5:e5:e2:52:1f:e9:0a:8f:79:11:48:ce:42:c7:44:c3:ac:7c:
a9:f6:c8:f4:cd:fd:69:70:d3:16:f6:de:b7:12:19:a5:79:b7:
af:63:48:c8:b5:9c:52:db:6c:14:2c:46:c7:96:ba:ab:57:82:
83:e8:dc:6b:b5:66:83:69:9e:d4:d5:cb:cf:b2:f5:de:0c:22:
7a:bb:c5:f4
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgISAYTmSTm1YV84cZRD/AgA9cqnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIxMjA2MDcxNDI5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMDMyYmM1NmIxYWIyNjU3OTlkYjFjZDMwZGQ1N2Q3OWM0ZjUyZDcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3GkNPY0Wbfdw/ygQrgOd0etkUFso
DYA5X4JD2eowUbihcj12eGZQqtV0RrSwzKn3cgO/HTVldMy0vV+8U0tVxvUvu4EN
MFuJyHn+XSRhMuqpVkzgMgYzQwCUpd543eKbFxtf9NST6TqmPeuGwV6SvBg81Dgt
ddYRIueT7OjUR+KkfxzzOVJPVANyrnFIcbfZHwA15gf0DygFJh5bcIlnDUo2kubB
CpBm5gFgv6nOjuZM2i4ZQ4vn65YUStajtZjBQAIFcyXFPfiPw107/5xOetfujP3u
Mfu/myyLfD4ATCfBrDAPD1nW73qJVox3yhqvi0biyVKN+UvLTcrS4M5AkwIDAQAB
o4ICHDCCAhgwHQYDVR0OBBYEFNAyvFaxqyZXmdsc0w3VfXnE9S1xMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvMERLOFZyR3JKbGVaMnh6VERkVjllY1QxTFhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDIGCCsGAQUFBwEHAQH/BCMwITAfBAIAAjAZAwcAKgdUwrAL
AwYAKgpgQO8DBgAqCmBA+jANBgkqhkiG9w0BAQsFAAOCAQEAaMIfL6O6nEDJ50We
MbyIwKAKunQJqqWgmsN+RoFBRHEbOJRVjIQcyYg+CEYB7QKuoj/LCDKQOEUE13UJ
h2vcwrlK+w6u8QikcOJ0M2JOXKFD2mgTA0raudMwIG3aKQ2cojqFz8fjsQxl/mbi
zuK9PJbAKVGq0ilGU6kkzUboxSu+zOjUjl4AQxSGiVvoxU645SjJSDa2l6hksf6s
L3BWx5jU8XLSthHiEP26z20XuFaE21wapeXiUh/pCo95EUjOQsdEw6x8qfbI9M39
aXDTFvbetxIZpXm3r2NIyLWcUttsFCxGx5a6q1eCg+jca7Vmg2me1NXLz7L13gwi
ervF9A==
-----END CERTIFICATE-----
Generated at Fri Apr 18 10:19:01 2025 by rpki-client