Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/2Qc8ODxf1uOcJGgQcyTLJqn69JU.roa
File: 2Qc8ODxf1uOcJGgQcyTLJqn69JU.roa (raw, json)
Hash identifier: TIkNtF3Bglx9Wt5hRUNvo32nGArH5ad9TkWhg5bOuTE=
Subject key identifier: D9:07:3C:38:3C:5F:D6:E3:9C:24:68:10:73:24:CB:26:A9:FA:F4:95
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 19DDF287
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/2Qc8ODxf1uOcJGgQcyTLJqn69JU.roa
Signing time: Mon 16 May 2022 09:14:29 +0000
ROA not before: Mon 16 May 2022 09:14:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205432
IP address blocks: 2a06:a005:9d0::/44 maxlen: 48
2a06:a005:680::/44 maxlen: 48
2a06:a005:6a0::/44 maxlen: 48
2a06:a005:690::/44 maxlen: 48
2a06:a005:1a::/47 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 433975943 (0x19ddf287)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: May 16 09:14:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d9073c383c5fd6e39c2468107324cb26a9faf495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:00:e6:41:98:bf:dc:e3:f6:20:63:11:08:da:
46:2a:26:60:21:15:dd:65:c2:a9:5a:ab:39:bc:45:
eb:22:1b:ea:ab:3a:89:e1:6c:6e:e7:d2:86:dc:d2:
c8:57:ab:e4:2d:9e:c7:93:9b:70:0b:68:dc:ee:fb:
59:0d:a9:d0:44:f3:3d:c1:f9:d9:5e:76:ee:5f:b1:
3a:3c:64:82:34:d2:df:98:f0:0f:4d:44:b3:b2:ad:
39:cb:d6:6c:77:57:88:1c:5d:ec:9d:31:bd:16:df:
ec:04:db:d5:55:ef:d0:01:33:0f:36:4d:66:6f:ba:
9f:51:75:29:22:14:f0:e4:b9:74:1a:1f:ab:b2:9b:
7b:1a:d4:b2:9f:fa:b2:ce:5f:e7:ae:ef:23:cc:30:
0f:79:e2:14:de:4d:98:3e:eb:a2:82:40:4f:76:6f:
f8:39:bb:9c:d8:71:e3:82:71:2e:d6:1a:1c:fe:d9:
bf:2a:16:81:8d:0f:9c:0b:2b:d2:ed:6f:eb:de:52:
f5:4b:ed:3d:91:56:85:02:32:1a:b0:a6:50:c5:3e:
a5:b5:aa:71:cc:68:f2:da:df:be:f5:e9:10:18:e9:
bb:bf:c1:4d:ab:94:08:0f:9a:30:e7:0f:e1:a7:fc:
93:34:f7:9d:3e:75:95:6a:f2:89:45:26:a9:5b:c5:
88:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:07:3C:38:3C:5F:D6:E3:9C:24:68:10:73:24:CB:26:A9:FA:F4:95
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/2Qc8ODxf1uOcJGgQcyTLJqn69JU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1a::/47
2a06:a005:680::-2a06:a005:6af:ffff:ffff:ffff:ffff:ffff
2a06:a005:9d0::/44
Signature Algorithm: sha256WithRSAEncryption
6a:46:e5:a1:37:d5:01:02:87:fb:af:74:a0:be:03:09:d7:67:
c1:95:40:5b:0e:39:a1:b7:de:f8:ca:e0:17:cb:a6:ad:28:95:
52:8e:76:d8:a4:f7:45:43:be:00:28:d3:1b:dc:aa:46:cb:b4:
85:7c:ba:3a:d0:ab:63:ca:e5:ad:db:69:08:55:ea:8c:d0:e6:
43:fd:37:1c:49:f8:cf:d8:11:95:82:e4:0c:de:4e:7a:da:53:
cf:1f:0f:9b:76:55:06:6e:6f:57:72:ea:e2:66:69:e5:f2:9a:
b6:24:e4:4c:b9:11:a6:99:16:65:aa:4a:09:72:ad:2f:8a:bd:
e4:85:8f:f2:16:6b:02:d8:ea:d2:b4:91:b9:dd:25:be:35:ea:
fd:60:9e:ee:19:e6:dc:c1:1a:8c:56:43:3e:ad:77:01:c8:ac:
3c:16:2e:ec:44:60:b9:eb:96:26:76:83:74:81:49:cb:91:b0:
00:f0:10:0f:57:96:42:ee:fb:e8:f9:8f:cf:29:5e:42:3f:b5:
d4:fb:76:e2:5d:83:7f:f5:39:23:35:b2:d2:fe:f5:d3:d2:05:
7f:54:6b:ad:6e:73:96:ce:68:51:69:5e:eb:1a:92:fd:8c:33:
67:7e:b2:9e:3e:33:fd:34:05:20:f1:d3:45:49:40:6a:74:57:
59:90:1b:cf
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgIEGd3yhzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NDkxNDU0MWZkMWI5NWU3YzBhZmM4NzVmYmVmNzg3OTRmNTUzODZiMB4XDTIyMDUx
NjA5MTQyOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDkwNzNjMzgzYzVm
ZDZlMzljMjQ2ODEwNzMyNGNiMjZhOWZhZjQ5NTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKgA5kGYv9zj9iBjEQjaRiomYCEV3WXCqVqrObxF6yIb6qs6
ieFsbufShtzSyFer5C2ex5ObcAto3O77WQ2p0ETzPcH52V527l+xOjxkgjTS35jw
D01Es7KtOcvWbHdXiBxd7J0xvRbf7ATb1VXv0AEzDzZNZm+6n1F1KSIU8OS5dBof
q7KbexrUsp/6ss5f567vI8wwD3niFN5NmD7rooJAT3Zv+Dm7nNhx44JxLtYaHP7Z
vyoWgY0PnAsr0u1v695S9UvtPZFWhQIyGrCmUMU+pbWqccxo8trfvvXpEBjpu7/B
TauUCA+aMOcP4af8kzT3nT51lWryiUUmqVvFiA0CAwEAAaOCAikwggIlMB0GA1Ud
DgQWBBTZBzw4PF/W45wkaBBzJMsmqfr0lTAfBgNVHSMEGDAWgBRUkUVB/RuV58Cv
yHX773h5T1U4azAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ZKRkZRZjBibGVmQXI4aDEtLTk0ZVU5Vk9Hcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGEvNDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8x
LzJRYzhPRHhmMXVPY0pHZ1FjeVRMSnFuNjlKVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEv
NDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8xL1ZKRkZRZjBibGVm
QXI4aDEtLTk0ZVU5Vk9Hcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA/
BggrBgEFBQcBBwEB/wQwMC4wLAQCAAIwJgMHASoGoAUAGjASAwcHKgagBQaAAwcE
KgagBQagAwcEKgagBQnQMA0GCSqGSIb3DQEBCwUAA4IBAQBqRuWhN9UBAof7r3Sg
vgMJ12fBlUBbDjmht974yuAXy6atKJVSjnbYpPdFQ74AKNMb3KpGy7SFfLo60Ktj
yuWt22kIVeqM0OZD/TccSfjP2BGVguQM3k562lPPHw+bdlUGbm9XcuriZmnl8pq2
JORMuRGmmRZlqkoJcq0vir3khY/yFmsC2OrStJG53SW+Ner9YJ7uGebcwRqMVkM+
rXcByKw8Fi7sRGC565YmdoN0gUnLkbAA8BAPV5ZC7vvo+Y/PKV5CP7XU+3biXYN/
9TkjNbLS/vXT0gV/VGutbnOWzmhRaV7rGpL9jDNnfrKePjP9NAUg8dNFSUBqdFdZ
kBvP
-----END CERTIFICATE-----
Generated at Fri Apr 18 10:19:49 2025 by rpki-client