Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/0om4Iva8G6fLBLVzM8nRMmivoDM.roa
File: 0om4Iva8G6fLBLVzM8nRMmivoDM.roa (raw, json)
Hash identifier: ucKy5PIbwSlIliUY6Y/BgOY0sAL8FQUaaUAHicp458Y=
Subject key identifier: D2:89:B8:22:F6:BC:1B:A7:CB:04:B5:73:33:C9:D1:32:68:AF:A0:33
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01821E07CC61CE23E7FA93FA653AA91BA0C4
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/0om4Iva8G6fLBLVzM8nRMmivoDM.roa
Signing time: Wed 20 Jul 2022 23:53:23 +0000
ROA not before: Wed 20 Jul 2022 23:53:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211604
IP address blocks: 2a06:a005:434::/48 maxlen: 48
2a06:a005:5e1::/48 maxlen: 48
2a06:a005:857::/48 maxlen: 48
2a06:a005:450::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:1e:07:cc:61:ce:23:e7:fa:93:fa:65:3a:a9:1b:a0:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jul 20 23:53:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d289b822f6bc1ba7cb04b57333c9d13268afa033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cc:38:e1:c9:74:dc:fe:5a:61:f1:24:64:08:
07:43:0a:40:19:db:f8:b4:28:d4:c7:d8:74:fe:11:
98:9b:ae:25:6f:b3:1e:90:e1:9f:b5:44:cf:96:ce:
06:44:b8:bf:3e:6d:1d:42:e8:bf:7a:30:c3:92:a6:
9e:d6:61:bb:49:31:47:21:0a:54:3d:4c:1f:4d:3d:
f1:73:c2:5b:65:f9:78:0e:f2:b1:c0:62:3f:f5:fc:
e5:30:3b:56:fb:7f:b6:e4:4e:3f:b4:97:d8:02:7f:
34:94:09:3b:04:76:1e:f2:40:67:37:88:91:3e:a9:
ba:30:be:86:1b:f8:f5:d1:59:ec:5f:74:1b:1a:97:
78:86:57:d7:8f:3d:eb:3b:9e:33:61:8f:7f:96:20:
87:47:4a:91:51:41:5e:a0:9d:b9:ba:1e:4f:b8:f4:
00:cc:72:0c:8f:e0:df:cc:7f:b6:7f:14:4e:56:9b:
89:64:58:d0:4f:8c:37:cd:cb:ff:cd:10:07:87:b3:
09:49:4d:33:a2:ae:7a:e3:95:0f:d7:f9:e3:3b:67:
b3:e4:c0:70:38:23:d8:7d:e9:b4:8a:6a:d9:2b:07:
85:cb:ae:8b:9a:c1:e9:d6:95:61:29:30:86:f9:c4:
89:26:44:16:6d:7a:fa:e6:ec:2f:ba:e7:8c:a0:96:
33:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:89:B8:22:F6:BC:1B:A7:CB:04:B5:73:33:C9:D1:32:68:AF:A0:33
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/0om4Iva8G6fLBLVzM8nRMmivoDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:434::/48
2a06:a005:450::/48
2a06:a005:5e1::/48
2a06:a005:857::/48
Signature Algorithm: sha256WithRSAEncryption
3d:87:d1:1c:b5:11:7a:b4:2f:3e:bd:cb:c7:74:6e:db:2b:e5:
36:f5:64:10:d7:ad:fd:ec:47:01:87:d2:71:9a:62:90:d5:f6:
96:b2:82:94:a6:bd:9e:eb:46:43:4f:80:a6:ea:97:e3:f1:8d:
e0:e0:3f:3b:3d:d8:ce:6d:8e:f1:11:c6:3b:71:31:8f:d3:ee:
fb:72:f8:40:eb:db:71:99:67:d9:4a:3b:7b:33:6a:27:3f:d3:
45:8b:5a:80:dc:e0:61:02:3b:64:46:8a:d3:a3:f8:94:e5:7e:
c7:bc:37:04:d8:e1:5a:20:84:a5:92:d4:23:9f:c5:22:1e:dd:
43:52:49:c5:01:8a:0e:da:26:d0:ab:df:af:cc:56:ea:b2:db:
d4:c1:80:8b:cf:6b:b1:f9:9c:00:07:4c:5a:66:d0:66:e7:af:
d0:1a:22:7d:32:4d:1b:a8:9f:d2:2c:d8:89:4c:75:34:01:93:
3d:21:ab:40:33:37:77:ef:65:07:4c:4f:06:bc:12:2e:b5:25:
50:9d:e1:b4:6f:82:3c:c9:73:fd:09:92:02:16:e0:d4:f7:17:
fd:9e:8c:22:cd:b6:2a:e9:ce:39:21:77:ee:ca:7a:10:1f:07:
ec:09:a3:97:30:bd:e0:02:0b:62:01:d4:c7:40:de:75:fe:79:
6c:af:ed:1c
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYIeB8xhziPn+pP6ZTqpG6DEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIwNzIwMjM1MzIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMjg5YjgyMmY2YmMxYmE3Y2IwNGI1NzMzM2M5ZDEzMjY4YWZhMDMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusw44cl03P5aYfEkZAgHQwpAGdv4
tCjUx9h0/hGYm64lb7MekOGftUTPls4GRLi/Pm0dQui/ejDDkqae1mG7STFHIQpU
PUwfTT3xc8JbZfl4DvKxwGI/9fzlMDtW+3+25E4/tJfYAn80lAk7BHYe8kBnN4iR
Pqm6ML6GG/j10VnsX3QbGpd4hlfXjz3rO54zYY9/liCHR0qRUUFeoJ25uh5PuPQA
zHIMj+DfzH+2fxROVpuJZFjQT4w3zcv/zRAHh7MJSU0zoq5645UP1/njO2ez5MBw
OCPYfem0imrZKweFy66LmsHp1pVhKTCG+cSJJkQWbXr65uwvuueMoJYztQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFNKJuCL2vBunywS1czPJ0TJor6AzMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvMG9tNEl2YThHNmZMQkxWek04blJNbWl2b0RNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAAjAkAwcAKgagBQQ0
AwcAKgagBQRQAwcAKgagBQXhAwcAKgagBQhXMA0GCSqGSIb3DQEBCwUAA4IBAQA9
h9EctRF6tC8+vcvHdG7bK+U29WQQ16397EcBh9JxmmKQ1faWsoKUpr2e60ZDT4Cm
6pfj8Y3g4D87PdjObY7xEcY7cTGP0+77cvhA69txmWfZSjt7M2onP9NFi1qA3OBh
AjtkRorTo/iU5X7HvDcE2OFaIISlktQjn8UiHt1DUknFAYoO2ibQq9+vzFbqstvU
wYCLz2ux+ZwAB0xaZtBm56/QGiJ9Mk0bqJ/SLNiJTHU0AZM9IatAMzd372UHTE8G
vBIutSVQneG0b4I8yXP9CZICFuDU9xf9nowizbYq6c45IXfuynoQHwfsCaOXML3g
AgtiAdTHQN51/nlsr+0c
-----END CERTIFICATE-----
Generated at Mon Apr 21 07:20:59 2025 by rpki-client