Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/37tmAqHelrgthG4TPZ6l99au1fc.roa
File: 37tmAqHelrgthG4TPZ6l99au1fc.roa (raw, json)
Hash identifier: Cmt+nuSVTsOzsNdP5T9IeqJQYg4+bcZM4enKfpb08XM=
Subject key identifier: DF:BB:66:02:A1:DE:96:B8:2D:84:6E:13:3D:9E:A5:F7:D6:AE:D5:F7
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 1AFC9957
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/37tmAqHelrgthG4TPZ6l99au1fc.roa
Signing time: Sat 18 Jun 2022 00:19:45 +0000
ROA not before: Sat 18 Jun 2022 00:19:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209100
IP address blocks: 2a06:a005:d50::/44 maxlen: 48
2a06:a005:d60::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 452761943 (0x1afc9957)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jun 18 00:19:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dfbb6602a1de96b82d846e133d9ea5f7d6aed5f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1c:c5:68:72:85:9a:e0:6d:b8:86:f3:19:56:
62:1e:11:2e:4f:7e:67:89:65:24:06:72:16:2a:8a:
fe:fd:29:bf:64:35:4c:21:47:77:d7:ea:36:77:75:
1d:37:b5:05:39:f3:03:6f:3c:9e:49:35:ad:a4:41:
10:82:f0:fd:56:fb:73:2d:60:68:39:b8:dd:ab:1e:
56:54:0c:b5:c6:d3:90:e9:0e:f1:0e:c6:3a:9a:2b:
2e:dd:dd:21:3b:98:44:68:2c:f7:d1:02:03:75:7a:
bf:32:c1:07:1d:e2:1f:3e:c6:49:72:ba:1a:2a:26:
be:c7:c4:60:2f:9c:62:ea:c9:12:4b:5d:fc:c8:69:
1b:1f:f0:7e:27:04:d7:f0:14:2a:79:47:67:dd:f9:
07:bd:fa:b3:8b:0f:9c:45:a0:7b:72:db:9f:e3:65:
02:d4:c2:6e:75:1f:f7:7f:22:da:e3:7b:6a:cb:91:
c7:04:17:9b:4a:02:24:bf:97:ad:47:7d:28:35:ce:
df:bd:c7:c5:ce:e0:34:c5:7b:68:8a:4e:39:a6:ad:
90:4f:97:6a:98:8f:78:41:19:b9:09:0d:96:13:57:
65:35:2a:39:21:40:25:7a:66:75:3b:58:89:0c:23:
35:9b:96:3f:f4:d2:d4:db:51:16:5f:10:25:1b:a3:
d8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:BB:66:02:A1:DE:96:B8:2D:84:6E:13:3D:9E:A5:F7:D6:AE:D5:F7
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/37tmAqHelrgthG4TPZ6l99au1fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:d50::-2a06:a005:d6f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
25:e1:05:51:ee:fe:46:59:09:fc:ae:93:8a:7d:4d:c5:a8:3c:
b3:06:d4:11:9c:f6:13:4e:b7:4c:30:de:9a:c4:30:de:84:5b:
b3:3b:0d:a1:af:82:1e:f8:22:46:1d:05:fe:03:52:e9:f9:eb:
9a:b4:0a:cd:15:e7:b2:ad:bd:9d:b6:83:d8:2e:96:f9:24:ad:
52:dd:f8:65:27:a7:e2:0a:99:b1:c9:ab:5f:32:f7:73:72:fb:
19:1b:c9:7e:3f:92:60:b8:cf:56:a4:3e:80:41:7e:33:85:2b:
a1:5d:6f:12:24:cf:87:23:82:1a:2d:a9:bc:f4:23:1a:7f:39:
6f:6f:02:7e:e2:30:43:c0:14:82:f8:0e:b4:fb:a9:7d:11:b3:
f2:b0:8e:68:d6:5d:cc:93:62:d4:a0:fb:90:4d:75:31:36:f1:
1a:0c:e8:77:49:a5:8a:d3:7a:2a:06:d9:28:66:bc:7b:33:59:
57:3d:9a:56:ab:c6:c4:c1:66:25:43:1b:d0:b4:6f:c3:ae:7d:
17:d2:89:3b:12:01:ca:8d:69:8d:2e:6d:b0:73:de:ad:b4:7c:
b9:b2:37:7d:be:36:63:ec:58:91:ca:59:02:c9:60:86:24:d4:
33:eb:42:2e:8b:b2:59:84:3b:e1:c3:f7:af:57:2b:05:29:f9:
af:cb:de:13
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgIEGvyZVzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NDkxNDU0MWZkMWI5NWU3YzBhZmM4NzVmYmVmNzg3OTRmNTUzODZiMB4XDTIyMDYx
ODAwMTk0NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZGZiYjY2MDJhMWRl
OTZiODJkODQ2ZTEzM2Q5ZWE1ZjdkNmFlZDVmNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALQcxWhyhZrgbbiG8xlWYh4RLk9+Z4llJAZyFiqK/v0pv2Q1
TCFHd9fqNnd1HTe1BTnzA288nkk1raRBEILw/Vb7cy1gaDm43aseVlQMtcbTkOkO
8Q7GOporLt3dITuYRGgs99ECA3V6vzLBBx3iHz7GSXK6GiomvsfEYC+cYurJEktd
/MhpGx/wficE1/AUKnlHZ935B736s4sPnEWge3Lbn+NlAtTCbnUf938i2uN7asuR
xwQXm0oCJL+XrUd9KDXO373Hxc7gNMV7aIpOOaatkE+XapiPeEEZuQkNlhNXZTUq
OSFAJXpmdTtYiQwjNZuWP/TS1NtRFl8QJRuj2IECAwEAAaOCAhcwggITMB0GA1Ud
DgQWBBTfu2YCod6WuC2EbhM9nqX31q7V9zAfBgNVHSMEGDAWgBRUkUVB/RuV58Cv
yHX773h5T1U4azAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ZKRkZRZjBibGVmQXI4aDEtLTk0ZVU5Vk9Hcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGEvNDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8x
LzM3dG1BcUhlbHJndGhHNFRQWjZsOTlhdTFmYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEv
NDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8xL1ZKRkZRZjBibGVm
QXI4aDEtLTk0ZVU5Vk9Hcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAt
BggrBgEFBQcBBwEB/wQeMBwwGgQCAAIwFDASAwcEKgagBQ1QAwcEKgagBQ1gMA0G
CSqGSIb3DQEBCwUAA4IBAQAl4QVR7v5GWQn8rpOKfU3FqDyzBtQRnPYTTrdMMN6a
xDDehFuzOw2hr4Ie+CJGHQX+A1Lp+euatArNFeeyrb2dtoPYLpb5JK1S3fhlJ6fi
CpmxyatfMvdzcvsZG8l+P5JguM9WpD6AQX4zhSuhXW8SJM+HI4IaLam89CMafzlv
bwJ+4jBDwBSC+A60+6l9EbPysI5o1l3Mk2LUoPuQTXUxNvEaDOh3SaWK03oqBtko
Zrx7M1lXPZpWq8bEwWYlQxvQtG/Drn0X0ok7EgHKjWmNLm2wc96ttHy5sjd9vjZj
7FiRylkCyWCGJNQz60Iui7JZhDvhw/evVysFKfmvy94T
-----END CERTIFICATE-----
Generated at Fri Apr 18 10:03:37 2025 by rpki-client