Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/0WIaPiqG1U4uepslHBeim8Csxmo.roa
File: 0WIaPiqG1U4uepslHBeim8Csxmo.roa (raw, json)
Hash identifier: /skGKjhBUcNb/a0+xprzEcIr4y+CNuG6odYbCi0if9o=
Subject key identifier: D1:62:1A:3E:2A:86:D5:4E:2E:7A:9B:25:1C:17:A2:9B:C0:AC:C6:6A
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 1AA646F8
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/0WIaPiqG1U4uepslHBeim8Csxmo.roa
Signing time: Mon 06 Jun 2022 20:23:20 +0000
ROA not before: Mon 06 Jun 2022 20:23:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56696
IP address blocks: 2a06:a005:5e5::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 447104760 (0x1aa646f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jun 6 20:23:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d1621a3e2a86d54e2e7a9b251c17a29bc0acc66a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:60:72:93:a0:27:37:f0:67:c9:d0:5f:56:4a:
c7:0f:0c:7d:bc:da:29:3d:64:90:b9:45:52:e0:f4:
ad:ea:e1:cf:26:11:67:33:1e:12:42:df:9a:29:fb:
40:8c:b7:93:46:5f:f0:14:1d:18:63:ce:cf:eb:89:
f1:9a:92:fe:56:92:92:7c:0d:9c:17:b7:76:d2:2c:
23:2a:12:08:75:1e:a4:db:80:39:f4:68:0b:fb:97:
03:e1:49:ec:af:ea:5b:f4:f3:79:89:7b:2d:bb:9f:
17:09:ee:d6:81:f2:32:58:fd:de:b7:bc:99:d8:3e:
1d:45:53:f9:36:c3:c2:6b:13:f9:54:36:11:ea:2d:
64:f6:e0:df:09:71:ed:36:4d:b7:32:a5:27:e7:6b:
6d:c3:d1:10:54:17:40:c5:2b:d9:c9:2b:9a:9e:52:
4d:8b:0b:d6:c8:cf:df:70:65:63:d4:48:20:fd:7d:
1b:a4:6c:c7:7a:91:dc:bc:05:83:69:b4:a5:7d:a4:
c3:31:ee:c8:23:10:86:6a:14:d4:ee:98:9b:d4:6a:
d0:ae:37:cd:49:69:3d:0c:22:8d:4c:1d:57:2c:e4:
b3:71:a8:07:18:7b:55:41:d1:f8:01:3b:3e:4b:72:
51:46:74:ed:2a:c3:ef:77:82:56:0e:02:e1:88:32:
d1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:62:1A:3E:2A:86:D5:4E:2E:7A:9B:25:1C:17:A2:9B:C0:AC:C6:6A
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/0WIaPiqG1U4uepslHBeim8Csxmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5e5::/48
Signature Algorithm: sha256WithRSAEncryption
7e:c7:a4:f0:76:5f:2b:fe:7b:fc:3c:68:35:59:45:f4:73:9c:
73:5e:d5:c1:ba:dd:65:c2:17:f8:95:4d:5f:48:ce:6d:3a:34:
4e:ab:1b:c6:cf:3d:9d:d7:3f:38:ab:1d:52:bc:bf:b7:13:5b:
a9:1b:58:ac:e4:9d:58:79:cf:28:aa:83:8e:b4:d2:2e:ea:6a:
8d:69:e1:bc:a6:3a:a9:1b:2d:b1:c1:ea:ad:f8:3f:95:e6:ca:
c6:50:cf:ef:9b:fb:c7:6b:c8:f1:7c:e9:f1:84:a1:fe:c7:3a:
29:82:7a:b6:ec:7b:a5:1e:7a:d6:22:11:09:42:f6:e0:9d:ac:
71:c1:e4:84:ae:0b:9a:4c:27:6a:46:25:10:6d:73:63:18:99:
bc:71:fc:34:f8:e2:f4:7c:0b:ee:f3:c7:40:18:80:fe:32:89:
74:4a:ea:95:db:1b:f6:36:25:fb:79:05:ee:78:64:43:22:8b:
6a:8d:b1:e6:31:4e:88:f6:78:56:7b:88:42:23:3c:d9:f6:b5:
88:be:db:bf:d6:b5:d5:b4:d2:26:c9:c7:73:bc:ed:25:3d:0a:
b0:b1:fe:de:55:7c:81:14:ca:4a:25:64:c5:6d:6f:0f:14:c0:
f3:b6:8f:d3:e0:5d:96:33:28:22:ff:63:40:4a:9c:df:a7:0b:
f2:a1:52:a8
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEGqZG+DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NDkxNDU0MWZkMWI5NWU3YzBhZmM4NzVmYmVmNzg3OTRmNTUzODZiMB4XDTIyMDYw
NjIwMjMyMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDE2MjFhM2UyYTg2
ZDU0ZTJlN2E5YjI1MWMxN2EyOWJjMGFjYzY2YTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKlgcpOgJzfwZ8nQX1ZKxw8MfbzaKT1kkLlFUuD0rerhzyYR
ZzMeEkLfmin7QIy3k0Zf8BQdGGPOz+uJ8ZqS/laSknwNnBe3dtIsIyoSCHUepNuA
OfRoC/uXA+FJ7K/qW/TzeYl7LbufFwnu1oHyMlj93re8mdg+HUVT+TbDwmsT+VQ2
EeotZPbg3wlx7TZNtzKlJ+drbcPREFQXQMUr2ckrmp5STYsL1sjP33BlY9RIIP19
G6Rsx3qR3LwFg2m0pX2kwzHuyCMQhmoU1O6Ym9Rq0K43zUlpPQwijUwdVyzks3Go
Bxh7VUHR+AE7PktyUUZ07SrD73eCVg4C4Ygy0S0CAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBTRYho+KobVTi56myUcF6KbwKzGajAfBgNVHSMEGDAWgBRUkUVB/RuV58Cv
yHX773h5T1U4azAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ZKRkZRZjBibGVmQXI4aDEtLTk0ZVU5Vk9Hcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGEvNDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8x
LzBXSWFQaXFHMVU0dWVwc2xIQmVpbThDc3htby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEv
NDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8xL1ZKRkZRZjBibGVm
QXI4aDEtLTk0ZVU5Vk9Hcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoGoAUF5TANBgkqhkiG9w0BAQsF
AAOCAQEAfsek8HZfK/57/DxoNVlF9HOcc17VwbrdZcIX+JVNX0jObTo0Tqsbxs89
ndc/OKsdUry/txNbqRtYrOSdWHnPKKqDjrTSLupqjWnhvKY6qRstscHqrfg/lebK
xlDP75v7x2vI8Xzp8YSh/sc6KYJ6tux7pR561iIRCUL24J2sccHkhK4LmkwnakYl
EG1zYxiZvHH8NPji9HwL7vPHQBiA/jKJdErqldsb9jYl+3kF7nhkQyKLao2x5jFO
iPZ4VnuIQiM82fa1iL7bv9a11bTSJsnHc7ztJT0KsLH+3lV8gRTKSiVkxW1vDxTA
87aP0+BdljMoIv9jQEqc36cL8qFSqA==
-----END CERTIFICATE-----
Generated at Fri Apr 18 10:10:55 2025 by rpki-client