Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/2UcHwfQSmI1SyF8LSlgZB_e-OV8.roa
File: 2UcHwfQSmI1SyF8LSlgZB_e-OV8.roa (raw, json)
Hash identifier: O/X7VFOqiRO58SzDQlKhLskM/9PI5MV2SdYegzs0s/k=
Subject key identifier: D9:47:07:C1:F4:12:98:8D:52:C8:5F:0B:4A:58:19:07:F7:BE:39:5F
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 1ACE8FBF
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/2UcHwfQSmI1SyF8LSlgZB_e-OV8.roa
Signing time: Sun 12 Jun 2022 15:04:03 +0000
ROA not before: Sun 12 Jun 2022 15:04:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204842
IP address blocks: 2a06:a005:cc0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 449744831 (0x1ace8fbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jun 12 15:04:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d94707c1f412988d52c85f0b4a581907f7be395f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:93:2a:19:c1:b3:b3:c8:7a:48:c4:5f:27:a7:
36:cd:42:d4:c3:e0:f7:44:9f:9e:49:3c:57:65:40:
98:54:58:24:27:7f:a3:93:0a:73:4b:21:77:c8:13:
a9:6b:79:30:df:d0:ac:0c:49:9c:30:52:15:d4:06:
98:e8:5b:ab:66:53:1a:ba:c9:44:8c:08:0e:51:a9:
13:bd:d2:ee:4b:2f:7c:03:d0:a5:3c:2d:58:e9:b9:
78:b8:d5:63:38:72:55:6e:b3:5d:50:e9:8f:bf:c1:
05:52:84:a2:d1:40:c7:bf:fa:a9:23:8d:a2:cd:17:
0f:1c:1b:f4:86:45:58:51:7b:28:c6:ea:ee:dd:9e:
1a:9d:c8:f4:a6:90:d3:f7:ba:65:55:bf:51:c9:5b:
60:be:38:80:13:9c:00:db:41:a7:d3:fe:6b:d0:3b:
80:2f:c7:16:9b:2f:17:9f:ff:62:45:9c:9f:14:e3:
75:a6:3d:80:e8:21:95:78:d5:26:1c:b8:ab:c1:cc:
63:c5:da:69:71:af:a1:d0:80:ea:86:55:1d:56:2c:
db:31:64:7c:71:0a:9e:90:80:9b:73:9e:6a:67:9a:
a9:2a:97:b6:02:1c:27:50:8c:11:f4:e0:4e:2f:b2:
07:b9:a7:18:4d:5e:a9:64:f1:12:35:4b:18:e3:2c:
e4:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:47:07:C1:F4:12:98:8D:52:C8:5F:0B:4A:58:19:07:F7:BE:39:5F
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/2UcHwfQSmI1SyF8LSlgZB_e-OV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:cc0::/44
Signature Algorithm: sha256WithRSAEncryption
59:4d:3d:54:4f:34:7e:4f:24:ee:41:52:03:ab:14:54:93:45:
d3:aa:a8:32:ce:b4:14:ac:50:98:7e:f0:5c:80:84:17:a1:4f:
34:93:f3:14:7d:32:8f:61:6c:cc:32:9a:80:7c:3f:b2:e1:bd:
31:a0:25:86:e8:c4:fc:53:31:9e:97:1e:98:64:3c:72:02:cf:
08:d6:6d:6c:ab:27:d3:fe:43:74:46:5a:e2:81:c6:4f:75:6f:
e9:06:51:04:f2:70:d4:3b:cd:9c:a6:59:3e:3d:e0:ac:68:fb:
6d:0d:32:b5:f9:52:cc:0d:a9:65:17:b5:33:9d:9d:66:c7:00:
d5:c6:39:69:c3:31:e3:d1:15:ac:df:2d:be:cb:87:00:5b:39:
27:fb:72:06:7e:03:87:72:28:49:d7:c7:3f:ce:03:4a:2b:af:
83:8d:58:59:cc:43:08:cd:f7:16:14:c0:87:c7:f6:f8:52:43:
25:16:78:8d:16:a8:83:f2:d0:34:8b:4b:c0:bc:7d:24:04:4f:
91:57:6f:64:d6:f2:f2:13:4d:d9:d5:86:71:e6:a3:cf:d5:35:
52:4a:9a:16:dd:17:e7:23:20:ca:a0:c9:91:52:7b:8e:df:39:
bd:d6:5d:e5:cc:a0:fd:65:e2:23:4b:a5:a6:dd:76:ac:10:a5:
4e:2f:fe:ea
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEGs6PvzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NDkxNDU0MWZkMWI5NWU3YzBhZmM4NzVmYmVmNzg3OTRmNTUzODZiMB4XDTIyMDYx
MjE1MDQwM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDk0NzA3YzFmNDEy
OTg4ZDUyYzg1ZjBiNGE1ODE5MDdmN2JlMzk1ZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKWTKhnBs7PIekjEXyenNs1C1MPg90Sfnkk8V2VAmFRYJCd/
o5MKc0shd8gTqWt5MN/QrAxJnDBSFdQGmOhbq2ZTGrrJRIwIDlGpE73S7ksvfAPQ
pTwtWOm5eLjVYzhyVW6zXVDpj7/BBVKEotFAx7/6qSONos0XDxwb9IZFWFF7KMbq
7t2eGp3I9KaQ0/e6ZVW/UclbYL44gBOcANtBp9P+a9A7gC/HFpsvF5//YkWcnxTj
daY9gOghlXjVJhy4q8HMY8XaaXGvodCA6oZVHVYs2zFkfHEKnpCAm3OeameaqSqX
tgIcJ1CMEfTgTi+yB7mnGE1eqWTxEjVLGOMs5JcCAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBTZRwfB9BKYjVLIXwtKWBkH9745XzAfBgNVHSMEGDAWgBRUkUVB/RuV58Cv
yHX773h5T1U4azAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ZKRkZRZjBibGVmQXI4aDEtLTk0ZVU5Vk9Hcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGEvNDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8x
LzJVY0h3ZlFTbUkxU3lGOExTbGdaQl9lLU9WOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEv
NDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8xL1ZKRkZRZjBibGVm
QXI4aDEtLTk0ZVU5Vk9Hcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoGoAUMwDANBgkqhkiG9w0BAQsF
AAOCAQEAWU09VE80fk8k7kFSA6sUVJNF06qoMs60FKxQmH7wXICEF6FPNJPzFH0y
j2FszDKagHw/suG9MaAlhujE/FMxnpcemGQ8cgLPCNZtbKsn0/5DdEZa4oHGT3Vv
6QZRBPJw1DvNnKZZPj3grGj7bQ0ytflSzA2pZRe1M52dZscA1cY5acMx49EVrN8t
vsuHAFs5J/tyBn4Dh3IoSdfHP84DSiuvg41YWcxDCM33FhTAh8f2+FJDJRZ4jRao
g/LQNItLwLx9JARPkVdvZNby8hNN2dWGceajz9U1UkqaFt0X5yMgyqDJkVJ7jt85
vdZd5cyg/WXiI0ulpt12rBClTi/+6g==
-----END CERTIFICATE-----
Generated at Fri Apr 18 10:02:11 2025 by rpki-client