Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/1-H07wNaFy0xl86TtGP3adj93IZA.roa
File: 1-H07wNaFy0xl86TtGP3adj93IZA.roa (raw, json)
Hash identifier: WrYkZFyOrfl6NQ+ye3mxOzgxXgwod7oS3PcfehVvb6s=
Subject key identifier: F8:7D:3B:C0:D6:85:CB:4C:65:F3:A4:ED:18:FD:DA:76:3F:77:21:90
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0181EEBD2A60B7C949B0ACDF2F091EEEA8CE
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/1-H07wNaFy0xl86TtGP3adj93IZA.roa
Signing time: Mon 11 Jul 2022 19:29:43 +0000
ROA not before: Mon 11 Jul 2022 19:29:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206271
IP address blocks: 2a06:a005:437::/48 maxlen: 48
2a06:a005:a15::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:ee:bd:2a:60:b7:c9:49:b0:ac:df:2f:09:1e:ee:a8:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jul 11 19:29:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f87d3bc0d685cb4c65f3a4ed18fdda763f772190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:92:eb:b4:4d:a1:33:c0:38:a3:b1:f3:fa:72:
ed:2a:07:c3:c9:c0:f0:dd:60:65:56:fd:84:32:f9:
13:65:a5:41:a1:60:e3:6e:b1:ea:d8:9a:7c:0b:75:
a8:c5:46:3c:96:72:ba:9e:16:c1:ac:93:dc:2d:37:
c2:35:30:6f:07:9a:a8:7d:f2:ef:a9:69:79:70:81:
bf:0f:5d:e6:00:f3:38:47:89:84:62:19:2d:ae:de:
94:5b:fd:34:b8:86:2a:66:bf:f8:68:43:86:36:8a:
72:b1:50:5e:e9:7e:80:cd:d3:c5:aa:b5:88:92:80:
f6:c2:0c:e2:8e:44:c3:62:40:09:c0:c6:40:c1:eb:
dd:ae:86:bf:ac:45:e4:f3:34:f7:f8:ce:e3:fa:07:
58:a6:bb:aa:8e:25:94:5f:09:30:de:c5:e7:5d:70:
0b:00:27:f8:1d:50:59:80:2d:3a:b9:64:d3:81:98:
c8:1f:2e:90:1b:f8:11:6a:52:2e:6d:3a:06:d2:1c:
9e:1a:34:dd:df:8f:ea:3c:3a:2f:72:43:80:19:ae:
a4:fc:f0:5e:44:6c:84:4f:5b:b3:02:9e:f3:4c:66:
37:dc:55:cc:e0:cd:a0:c3:79:61:fd:c0:26:83:ec:
b5:ad:b2:86:7d:c7:71:f1:f2:f5:65:3b:1d:19:6f:
10:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:7D:3B:C0:D6:85:CB:4C:65:F3:A4:ED:18:FD:DA:76:3F:77:21:90
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/1-H07wNaFy0xl86TtGP3adj93IZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:437::/48
2a06:a005:a15::/48
Signature Algorithm: sha256WithRSAEncryption
5a:53:3c:23:4c:0a:cb:db:79:00:8a:61:7b:96:78:8e:84:6f:
76:29:c8:c6:1d:9d:56:d5:74:e7:8b:23:33:bf:f9:c4:2e:aa:
a0:76:67:e2:e9:19:2a:13:f7:f9:8f:d1:24:3a:1b:8e:4a:42:
75:fa:df:93:d0:92:40:5c:55:5f:40:b4:eb:3e:22:56:7d:62:
36:75:7a:a3:46:f9:a7:c8:fb:8a:af:7e:1c:4f:56:31:fa:d1:
e2:32:9b:06:0e:e2:f5:f4:69:7e:90:ea:3d:7a:09:77:8b:ea:
f8:cb:a5:3f:1b:de:66:0a:44:40:61:3b:b6:b6:08:e1:47:72:
36:87:04:b5:ab:ec:3c:03:13:cc:47:9f:12:21:71:fd:ad:fe:
f1:d5:f8:06:fb:91:ec:dc:79:32:5a:2a:d1:ab:28:64:d3:c2:
3b:8d:0d:0a:dc:d7:cb:0b:ae:d8:60:d2:03:3b:e1:d1:35:cd:
d7:17:ff:25:57:65:e9:6b:1d:ca:d2:bd:8e:1a:c7:51:12:46:
ba:7c:70:bf:ed:42:a5:9f:88:7d:2a:4a:5d:73:4c:5a:71:aa:
d8:c1:a7:e3:3f:39:0a:c4:b0:fa:bb:8b:31:17:32:20:f0:7a:
33:f0:19:75:b5:3d:66:d5:53:4e:a5:34:40:1d:f2:36:d0:33:
d7:36:58:f8
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAYHuvSpgt8lJsKzfLwke7qjOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIwNzExMTkyOTQzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmODdkM2JjMGQ2ODVjYjRjNjVmM2E0ZWQxOGZkZGE3NjNmNzcyMTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopLrtE2hM8A4o7Hz+nLtKgfDycDw
3WBlVv2EMvkTZaVBoWDjbrHq2Jp8C3WoxUY8lnK6nhbBrJPcLTfCNTBvB5qoffLv
qWl5cIG/D13mAPM4R4mEYhktrt6UW/00uIYqZr/4aEOGNopysVBe6X6AzdPFqrWI
koD2wgzijkTDYkAJwMZAwevdroa/rEXk8zT3+M7j+gdYpruqjiWUXwkw3sXnXXAL
ACf4HVBZgC06uWTTgZjIHy6QG/gRalIubToG0hyeGjTd34/qPDovckOAGa6k/PBe
RGyET1uzAp7zTGY33FXM4M2gw3lh/cAmg+y1rbKGfcdx8fL1ZTsdGW8QywIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFPh9O8DWhctMZfOk7Rj92nY/dyGQMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvMS1IMDd3TmFGeTB4bDg2VHRHUDNhZGo5M0laQS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNGEvNDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUz
Ny8xL1ZKRkZRZjBibGVmQXI4aDEtLTk0ZVU5Vk9Hcy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAIwEgMHACoGoAUE
NwMHACoGoAUKFTANBgkqhkiG9w0BAQsFAAOCAQEAWlM8I0wKy9t5AIphe5Z4joRv
dinIxh2dVtV054sjM7/5xC6qoHZn4ukZKhP3+Y/RJDobjkpCdfrfk9CSQFxVX0C0
6z4iVn1iNnV6o0b5p8j7iq9+HE9WMfrR4jKbBg7i9fRpfpDqPXoJd4vq+MulPxve
ZgpEQGE7trYI4UdyNocEtavsPAMTzEefEiFx/a3+8dX4BvuR7Nx5Mloq0asoZNPC
O40NCtzXywuu2GDSAzvh0TXN1xf/JVdl6WsdytK9jhrHURJGunxwv+1CpZ+IfSpK
XXNMWnGq2MGn4z85CsSw+ruLMRcyIPB6M/AZdbU9ZtVTTqU0QB3yNtAz1zZY+A==
-----END CERTIFICATE-----
Generated at Tue Apr 22 00:32:27 2025 by rpki-client