Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/4-aXgTFTx4j1RHrRi_8par4Rjy8.roa
File: 4-aXgTFTx4j1RHrRi_8par4Rjy8.roa (raw, json)
Hash identifier: +eQQDLW+OUUf09MXkF6bSv8ZPY3KHcxK8Jepzx+64bA=
Subject key identifier: E3:E6:97:81:31:53:C7:88:F5:44:7A:D1:8B:FF:29:6A:BE:11:8F:2F
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0182920D9FCDD56DD5679493188A90250EFA
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/4-aXgTFTx4j1RHrRi_8par4Rjy8.roa
Signing time: Fri 12 Aug 2022 12:35:42 +0000
ROA not before: Fri 12 Aug 2022 12:35:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211431
IP address blocks: 2a06:a005:1720::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:92:0d:9f:cd:d5:6d:d5:67:94:93:18:8a:90:25:0e:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Aug 12 12:35:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e3e697813153c788f5447ad18bff296abe118f2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:16:29:9f:59:52:24:a1:2c:1a:ac:14:a2:43:
38:fc:0f:f8:b6:90:f2:c5:01:c8:60:c8:58:10:a9:
bb:52:76:f0:d4:d3:7c:6f:67:54:2a:20:8d:6d:c2:
ad:60:9f:d0:5d:87:9e:42:ae:66:23:67:55:a8:79:
0f:50:8d:84:1f:62:6c:72:2b:9d:50:dc:ff:09:06:
de:2c:a9:ae:04:9c:09:63:d5:99:64:73:d6:8e:97:
79:fa:4a:45:99:52:6e:54:bc:fe:5a:08:a0:29:c1:
a7:76:bb:f9:2f:2f:a9:ba:5a:04:20:21:b2:9c:e4:
eb:e9:44:b0:11:52:56:58:5a:b7:b7:af:bf:e3:c4:
8b:44:1f:a8:b3:ec:a9:3d:31:d1:20:50:87:db:7d:
18:c3:95:22:70:af:e8:ca:4e:9d:28:65:1a:d7:a1:
ba:87:a3:4b:ed:47:b1:c8:6b:3f:3d:7e:03:3a:e1:
50:f2:e7:c5:55:53:62:e2:a7:2e:e6:ac:10:f3:1b:
f0:1b:03:17:be:f9:dd:86:2f:b7:8d:49:e0:cc:f2:
84:79:37:96:8e:75:27:b8:cd:ae:a9:36:2a:5a:d5:
f5:87:46:ac:9c:96:db:1a:2b:36:9e:4f:72:30:78:
1c:f3:b2:18:6f:b0:11:ae:3a:a4:d1:c4:e8:1c:1a:
15:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:E6:97:81:31:53:C7:88:F5:44:7A:D1:8B:FF:29:6A:BE:11:8F:2F
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/4-aXgTFTx4j1RHrRi_8par4Rjy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1720::/44
Signature Algorithm: sha256WithRSAEncryption
2a:c1:36:6f:cf:dc:6d:55:c3:7d:90:0b:d8:c4:e8:52:de:e7:
30:3b:de:4d:29:31:75:09:60:a5:79:06:f8:08:cc:97:5c:e5:
b6:b5:d9:6e:7c:b3:fb:91:74:6f:46:bb:c2:26:82:47:35:86:
31:3e:a1:fe:25:9c:27:2e:ba:0f:84:e4:40:4d:63:05:c8:a1:
e8:2f:99:a9:47:9f:9a:47:b3:61:c7:04:dc:c4:e3:b5:de:c9:
07:19:ca:28:5e:3d:7d:45:75:d5:e3:ee:b1:b4:3f:35:e1:09:
32:9d:ba:b2:0d:f7:29:ed:c2:7f:c9:79:b0:06:46:c2:7b:5d:
9c:7f:1d:41:aa:01:9b:85:9b:d1:93:f0:31:52:b4:16:75:1d:
a4:25:38:c2:c9:97:fb:d6:a5:bf:f9:f2:30:68:6f:c7:58:1d:
82:0b:a7:60:9b:b8:e5:28:51:91:57:55:32:e6:33:40:d0:b1:
16:e3:ed:6d:6b:e3:5f:aa:eb:9f:bd:78:fe:50:6d:b1:b1:53:
53:b2:b9:49:f0:a7:88:27:dc:5f:77:1b:68:83:94:b7:32:6b:
dd:83:a5:80:d5:82:bf:83:0c:a2:99:f0:b2:a9:6f:df:fe:ec:
3f:dc:a0:aa:6b:90:80:fc:a2:a0:74:44:3a:ec:0b:7a:61:61:
52:d0:13:61
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYKSDZ/N1W3VZ5STGIqQJQ76MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIwODEyMTIzNTQyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlM2U2OTc4MTMxNTNjNzg4ZjU0NDdhZDE4YmZmMjk2YWJlMTE4ZjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBYpn1lSJKEsGqwUokM4/A/4tpDy
xQHIYMhYEKm7Unbw1NN8b2dUKiCNbcKtYJ/QXYeeQq5mI2dVqHkPUI2EH2Jsciud
UNz/CQbeLKmuBJwJY9WZZHPWjpd5+kpFmVJuVLz+WgigKcGndrv5Ly+puloEICGy
nOTr6USwEVJWWFq3t6+/48SLRB+os+ypPTHRIFCH230Yw5UicK/oyk6dKGUa16G6
h6NL7UexyGs/PX4DOuFQ8ufFVVNi4qcu5qwQ8xvwGwMXvvndhi+3jUngzPKEeTeW
jnUnuM2uqTYqWtX1h0asnJbbGis2nk9yMHgc87IYb7ARrjqk0cToHBoVWwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFOPml4ExU8eI9UR60Yv/KWq+EY8vMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvNC1hWGdURlR4NGoxUkhyUmlfOHBhcjRSank4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgagBRcg
MA0GCSqGSIb3DQEBCwUAA4IBAQAqwTZvz9xtVcN9kAvYxOhS3ucwO95NKTF1CWCl
eQb4CMyXXOW2tdlufLP7kXRvRrvCJoJHNYYxPqH+JZwnLroPhORATWMFyKHoL5mp
R5+aR7NhxwTcxOO13skHGcooXj19RXXV4+6xtD814QkynbqyDfcp7cJ/yXmwBkbC
e12cfx1BqgGbhZvRk/AxUrQWdR2kJTjCyZf71qW/+fIwaG/HWB2CC6dgm7jlKFGR
V1Uy5jNA0LEW4+1ta+NfquufvXj+UG2xsVNTsrlJ8KeIJ9xfdxtog5S3Mmvdg6WA
1YK/gwyimfCyqW/f/uw/3KCqa5CA/KKgdEQ67At6YWFS0BNh
-----END CERTIFICATE-----
Generated at Tue Apr 22 18:25:02 2025 by rpki-client