Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/1-3AnFvNAcZ9_rodjSrwofG_Mz7o.roa
File: 1-3AnFvNAcZ9_rodjSrwofG_Mz7o.roa (raw, json)
Hash identifier: sa75dzUJzYyPo6wDYvxfPn7NfRe7CD6CgN8gI4K5Rys=
Subject key identifier: FB:70:27:16:F3:40:71:9F:7F:AE:87:63:4A:BC:28:7C:6F:CC:CF:BA
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0181CFF9EA295D221B6A07E97F23E48D1118
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/1-3AnFvNAcZ9_rodjSrwofG_Mz7o.roa
Signing time: Tue 05 Jul 2022 20:07:51 +0000
ROA not before: Tue 05 Jul 2022 20:07:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210761
IP address blocks: 2a06:a005:2d1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:cf:f9:ea:29:5d:22:1b:6a:07:e9:7f:23:e4:8d:11:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jul 5 20:07:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fb702716f340719f7fae87634abc287c6fcccfba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6a:a0:5f:dc:41:b8:4b:0b:f3:2b:bb:54:88:
81:e6:bb:6b:b3:3f:4c:a7:d2:0e:dd:5c:71:76:f2:
89:2a:10:1a:40:f0:c2:b2:bb:e5:c4:93:c8:ee:e2:
b6:17:b5:1a:fc:34:01:26:c0:f6:fa:5f:a1:be:e2:
ba:13:51:5c:9c:a1:10:56:cd:ad:75:75:76:72:68:
cb:1b:a3:d6:71:f1:b0:27:bc:a5:de:08:0b:88:58:
11:e5:36:4c:2d:e9:3a:11:4d:9b:76:2b:e0:6e:67:
06:7c:ee:f9:a9:3a:d4:c5:27:09:bd:85:ff:70:97:
38:6d:d0:7c:e8:b3:19:8d:92:28:94:6d:7b:7c:18:
7c:7c:da:25:cf:de:60:f8:0f:14:78:0b:6c:b0:c3:
5f:0b:61:55:32:cf:e3:3e:77:b5:b4:1b:d2:e4:8f:
6e:01:85:4a:da:c4:e7:d5:23:03:6a:39:95:54:ab:
bb:d2:e9:c3:e7:15:3f:25:fa:07:4a:8f:60:87:f2:
1a:3b:78:15:82:fd:3b:d2:ca:ff:24:84:19:b9:54:
d9:58:eb:8d:b3:3e:15:be:49:c4:d1:ec:06:73:77:
f7:39:e4:dc:c1:9f:ad:e8:ba:32:7f:85:c6:04:52:
00:93:f6:f4:57:07:f9:c6:a0:be:e8:cb:bd:f6:c7:
00:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:70:27:16:F3:40:71:9F:7F:AE:87:63:4A:BC:28:7C:6F:CC:CF:BA
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/1-3AnFvNAcZ9_rodjSrwofG_Mz7o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2d1::/48
Signature Algorithm: sha256WithRSAEncryption
91:a6:35:60:d6:e9:83:22:a0:40:2a:5e:3f:7b:77:d9:70:98:
0a:5c:eb:03:a9:8c:5a:cc:3d:b2:ca:f5:d9:99:79:ec:7a:98:
9d:a6:75:1c:1b:90:67:4f:b1:cf:a7:3e:28:1e:7c:87:5a:c0:
7d:4d:97:10:ed:6d:94:40:37:06:ee:0b:b7:9a:bc:ea:d5:41:
f2:47:a4:d4:1a:1d:95:32:e8:10:93:95:c6:9d:41:44:d3:a1:
8e:c3:ea:75:c7:85:84:e6:8f:2a:d3:32:51:a5:37:7c:a7:ae:
7f:25:98:f3:ae:c3:4c:a0:bf:75:c6:77:ad:5e:10:f3:63:9c:
80:09:c8:8d:08:9a:e6:f3:80:8b:50:59:a2:1a:0f:2a:bc:52:
e7:1f:88:30:c3:ea:79:dd:77:e8:d9:1b:a7:a9:74:4c:a6:0b:
b6:e6:4e:6b:2b:46:27:97:eb:09:7f:7a:41:47:bb:d5:af:67:
e2:73:3a:fb:09:14:54:6b:0c:b8:94:83:89:de:a4:15:ce:56:
f5:39:cd:4b:5d:2f:55:59:13:ec:e8:ed:4a:3f:2b:86:f0:27:
21:6d:83:dc:71:7e:a6:1b:22:ed:ca:b2:7b:3c:70:4b:5d:fa:
65:e8:00:f5:d6:bd:54:6e:77:87:fa:7e:24:d0:b5:52:91:8a:
7b:1c:3d:de
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgISAYHP+eopXSIbagfpfyPkjREYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIwNzA1MjAwNzUxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYjcwMjcxNmYzNDA3MTlmN2ZhZTg3NjM0YWJjMjg3YzZmY2NjZmJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2qgX9xBuEsL8yu7VIiB5rtrsz9M
p9IO3VxxdvKJKhAaQPDCsrvlxJPI7uK2F7Ua/DQBJsD2+l+hvuK6E1FcnKEQVs2t
dXV2cmjLG6PWcfGwJ7yl3ggLiFgR5TZMLek6EU2bdivgbmcGfO75qTrUxScJvYX/
cJc4bdB86LMZjZIolG17fBh8fNolz95g+A8UeAtssMNfC2FVMs/jPne1tBvS5I9u
AYVK2sTn1SMDajmVVKu70unD5xU/JfoHSo9gh/IaO3gVgv070sr/JIQZuVTZWOuN
sz4VvknE0ewGc3f3OeTcwZ+t6Loyf4XGBFIAk/b0Vwf5xqC+6Mu99scApwIDAQAB
o4ICDTCCAgkwHQYDVR0OBBYEFPtwJxbzQHGff66HY0q8KHxvzM+6MB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvMS0zQW5Gdk5BY1o5X3JvZGpTcndvZkdfTXo3by5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNGEvNDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUz
Ny8xL1ZKRkZRZjBibGVmQXI4aDEtLTk0ZVU5Vk9Hcy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoGoAUC
0TANBgkqhkiG9w0BAQsFAAOCAQEAkaY1YNbpgyKgQCpeP3t32XCYClzrA6mMWsw9
ssr12Zl57HqYnaZ1HBuQZ0+xz6c+KB58h1rAfU2XEO1tlEA3Bu4Lt5q86tVB8kek
1BodlTLoEJOVxp1BRNOhjsPqdceFhOaPKtMyUaU3fKeufyWY867DTKC/dcZ3rV4Q
82OcgAnIjQia5vOAi1BZohoPKrxS5x+IMMPqed136Nkbp6l0TKYLtuZOaytGJ5fr
CX96QUe71a9n4nM6+wkUVGsMuJSDid6kFc5W9TnNS10vVVkT7OjtSj8rhvAnIW2D
3HF+phsi7cqyezxwS136ZegA9da9VG53h/p+JNC1UpGKexw93g==
-----END CERTIFICATE-----
Generated at Mon Apr 21 20:43:39 2025 by rpki-client