Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/1-qFTNDkFw_3cSj7yL_paHYKtB_U.roa
File: 1-qFTNDkFw_3cSj7yL_paHYKtB_U.roa (raw, json)
Hash identifier: aU+oPmwi3CLdmUec8MGFJ5Y7E6ceHixGvKhVjaboIRg=
Subject key identifier: FA:A1:53:34:39:05:C3:FD:DC:4A:3E:F2:2F:FA:5A:1D:82:AD:07:F5
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 018256EB1AFA70665C35E2A7065214B64652
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/1-qFTNDkFw_3cSj7yL_paHYKtB_U.roa
Signing time: Mon 01 Aug 2022 01:00:24 +0000
ROA not before: Mon 01 Aug 2022 01:00:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210667
IP address blocks: 2a06:a005:1250::/44 maxlen: 48
2a06:a005:ad0::/44 maxlen: 48
2a07:54c2:b00b::/48 maxlen: 48
2a06:a005:2de::/48 maxlen: 48
2a06:a005:2d3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:56:eb:1a:fa:70:66:5c:35:e2:a7:06:52:14:b6:46:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Aug 1 01:00:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=faa153343905c3fddc4a3ef22ffa5a1d82ad07f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2d:6a:08:31:c2:0d:1b:70:fb:70:45:e7:10:
fa:ac:32:89:db:79:5d:5c:45:c6:9a:8e:fc:92:f3:
90:20:79:e0:3f:e1:27:e1:59:59:ff:b1:6d:f7:dd:
d7:d1:fd:af:b7:fd:64:b5:ea:f5:e7:ab:00:b9:8a:
e2:56:c2:d9:81:68:60:20:2a:44:8a:76:be:57:d9:
28:45:f7:47:11:81:1d:4d:6a:66:08:7b:6d:cb:eb:
74:18:65:ab:9b:c4:86:0d:b2:b9:ae:40:c2:97:d5:
fc:a4:5b:66:6f:61:9f:15:69:d7:4b:cc:7e:d2:78:
f8:d6:00:31:40:9f:9c:e3:5b:07:61:68:8c:f6:9d:
31:f9:e5:c0:cc:4b:d6:0d:29:06:aa:1e:ce:b4:02:
00:76:e5:03:b8:56:55:f3:fb:f3:df:c3:90:0d:22:
7c:3b:d3:5f:ae:7b:49:f9:88:ed:a1:79:f5:2c:f0:
34:40:78:a3:29:92:6d:3c:44:0e:42:3e:1e:e2:69:
ff:ed:ce:7f:f4:61:f8:49:fa:16:67:38:ad:8e:95:
a2:12:c2:54:94:bf:33:60:7c:1f:6f:f5:e0:03:6e:
01:13:f0:ee:5a:bd:74:31:02:ab:37:03:08:c0:d1:
d1:3b:72:94:77:c6:d6:ae:1e:a0:cf:b0:84:0d:b5:
60:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:A1:53:34:39:05:C3:FD:DC:4A:3E:F2:2F:FA:5A:1D:82:AD:07:F5
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/1-qFTNDkFw_3cSj7yL_paHYKtB_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2d3::/48
2a06:a005:2de::/48
2a06:a005:ad0::/44
2a06:a005:1250::/44
2a07:54c2:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
7c:d0:90:2a:ad:75:07:34:68:81:7f:fc:da:35:ab:2c:41:29:
1a:96:c0:97:9c:a1:8c:e9:20:61:cc:48:ac:5f:f4:96:43:00:
d2:48:38:19:29:d7:65:0a:20:58:7e:dc:9f:9e:a9:bd:bf:7e:
cb:94:33:82:07:27:54:fe:a6:53:3b:b9:62:a5:88:c3:db:e3:
fc:b5:f6:71:e3:f3:80:67:e9:76:12:9c:8a:59:33:7b:c6:6f:
f7:52:e5:60:56:16:2e:12:22:01:41:c2:00:47:a4:2b:77:41:
57:41:f5:16:1e:34:2b:a8:6e:0e:5f:b8:13:7e:cd:69:82:28:
ce:ef:b6:ab:92:07:fd:d7:e3:d8:92:bd:11:55:b8:f4:89:43:
b0:6e:8b:99:b7:a5:bf:f1:54:8d:e3:59:f8:b0:3a:93:51:4c:
ca:db:ed:61:3e:2a:69:e9:2b:2e:34:cd:65:4d:c4:a0:76:78:
81:51:41:54:3d:b1:29:7e:c9:70:5c:f4:cf:7f:44:96:0d:23:
7c:5c:28:dc:c6:19:fe:52:24:ff:e0:4f:e8:3e:59:c1:f6:ee:
e6:84:a6:a2:9c:bd:b9:2a:21:ad:e1:ec:1d:85:4a:08:3a:7e:
02:7c:be:60:65:06:dd:22:5a:e0:ed:5b:9a:d5:2a:2e:cc:bd:
31:7e:62:db
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgISAYJW6xr6cGZcNeKnBlIUtkZSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIwODAxMDEwMDI0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYWExNTMzNDM5MDVjM2ZkZGM0YTNlZjIyZmZhNWExZDgyYWQwN2Y1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoy1qCDHCDRtw+3BF5xD6rDKJ23ld
XEXGmo78kvOQIHngP+En4VlZ/7Ft993X0f2vt/1kter156sAuYriVsLZgWhgICpE
ina+V9koRfdHEYEdTWpmCHtty+t0GGWrm8SGDbK5rkDCl9X8pFtmb2GfFWnXS8x+
0nj41gAxQJ+c41sHYWiM9p0x+eXAzEvWDSkGqh7OtAIAduUDuFZV8/vz38OQDSJ8
O9NfrntJ+YjtoXn1LPA0QHijKZJtPEQOQj4e4mn/7c5/9GH4SfoWZzitjpWiEsJU
lL8zYHwfb/XgA24BE/DuWr10MQKrNwMIwNHRO3KUd8bWrh6gz7CEDbVgkQIDAQAB
o4ICMTCCAi0wHQYDVR0OBBYEFPqhUzQ5BcP93Eo+8i/6Wh2CrQf1MB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvMS1xRlRORGtGd18zY1NqN3lMX3BhSFlLdEJfVS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNGEvNDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUz
Ny8xL1ZKRkZRZjBibGVmQXI4aDEtLTk0ZVU5Vk9Hcy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjBGBggrBgEFBQcBBwEB/wQ3MDUwMwQCAAIwLQMHACoGoAUC
0wMHACoGoAUC3gMHBCoGoAUK0AMHBCoGoAUSUAMHACoHVMKwCzANBgkqhkiG9w0B
AQsFAAOCAQEAfNCQKq11BzRogX/82jWrLEEpGpbAl5yhjOkgYcxIrF/0lkMA0kg4
GSnXZQogWH7cn56pvb9+y5QzggcnVP6mUzu5YqWIw9vj/LX2cePzgGfpdhKcilkz
e8Zv91LlYFYWLhIiAUHCAEekK3dBV0H1Fh40K6huDl+4E37NaYIozu+2q5IH/dfj
2JK9EVW49IlDsG6Lmbelv/FUjeNZ+LA6k1FMytvtYT4qaekrLjTNZU3EoHZ4gVFB
VD2xKX7JcFz0z39Elg0jfFwo3MYZ/lIk/+BP6D5Zwfbu5oSmopy9uSohreHsHYVK
CDp+Any+YGUG3SJa4O1bmtUqLsy9MX5i2w==
-----END CERTIFICATE-----
Generated at Wed Apr 23 02:25:02 2025 by rpki-client