Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/4KH88IInKDN_OeyEXpCISmXZ3SI.roa
File: 4KH88IInKDN_OeyEXpCISmXZ3SI.roa (raw, json)
Hash identifier: tXuQjnhLg95/5NEpbWBXYtFE4Avtr6zS0Ng80MfaMOE=
Subject key identifier: E0:A1:FC:F0:82:27:28:33:7F:39:EC:84:5E:90:88:4A:65:D9:DD:22
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0184BB5493C17CDF5312508FEF8D8DA9B06C
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/4KH88IInKDN_OeyEXpCISmXZ3SI.roa
Signing time: Sun 27 Nov 2022 23:03:13 +0000
ROA not before: Sun 27 Nov 2022 23:03:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210537
IP address blocks: 2a06:a005:1507::/48 maxlen: 48
2a06:a005:20c0::/44 maxlen: 48
2a06:a005:1508::/48 maxlen: 48
2a06:a005:d2d::/48 maxlen: 48
2a05:dfc7:5600::/39 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:bb:54:93:c1:7c:df:53:12:50:8f:ef:8d:8d:a9:b0:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Nov 27 23:03:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e0a1fcf0822728337f39ec845e90884a65d9dd22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8a:15:92:e9:07:25:fe:89:bc:f4:8f:1d:a0:
b7:0b:b5:7f:3d:1f:79:17:cd:33:ea:f1:ed:e7:5f:
e5:19:14:2e:a2:47:69:ac:43:94:80:7d:41:8e:15:
c0:6a:3b:e9:46:b8:d6:39:77:c2:5b:ae:b8:b2:09:
15:1d:f8:c7:41:dc:9a:0a:f0:d3:da:9f:87:7b:04:
7f:85:e1:ad:d6:5f:b9:aa:8b:00:80:91:20:73:3d:
bd:a0:6a:0c:49:3c:44:1d:bf:fa:ac:a6:63:4a:2a:
ac:c0:12:7f:6c:ef:d2:9a:29:3b:6b:a6:08:72:7a:
2f:51:48:82:0c:43:88:de:29:38:7c:77:f8:4e:b1:
65:4c:c0:5e:9e:9e:63:09:b4:f5:74:cb:1d:c3:5b:
42:54:1b:df:4e:8a:b5:ac:e1:9d:98:1e:cc:31:8c:
bd:3a:79:7f:35:cc:d8:1e:c6:d5:63:a5:6e:46:ce:
b4:22:0e:f8:3c:63:20:03:de:bb:09:40:96:18:c9:
f5:0c:0c:66:08:30:03:bb:ab:40:88:85:be:24:56:
18:37:91:b2:f1:c0:6e:69:c3:44:b3:5a:29:1d:f5:
c3:42:20:ee:51:f3:07:50:81:e0:e3:3e:b1:42:4f:
df:bc:2c:2c:87:73:2f:e3:3c:3a:58:9e:ce:9d:50:
69:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:A1:FC:F0:82:27:28:33:7F:39:EC:84:5E:90:88:4A:65:D9:DD:22
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/4KH88IInKDN_OeyEXpCISmXZ3SI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc7:5600::/39
2a06:a005:d2d::/48
2a06:a005:1507::-2a06:a005:1508:ffff:ffff:ffff:ffff:ffff
2a06:a005:20c0::/44
Signature Algorithm: sha256WithRSAEncryption
8b:24:eb:3f:ea:a6:b8:1c:30:7f:94:f0:6c:f5:d9:4e:23:55:
76:df:70:e3:3a:d8:07:d3:9b:dd:46:24:2e:27:22:de:98:f4:
38:3d:04:55:bc:f6:37:11:35:66:5c:e3:52:78:e7:2e:13:46:
c5:0a:97:76:e3:4f:ad:5c:b3:f4:56:73:5f:19:15:4c:04:71:
2e:00:a0:8d:21:23:a0:2b:c3:ca:1c:39:1c:ba:53:80:14:97:
09:ec:3e:61:65:be:31:07:0f:1e:c4:2f:af:4e:ec:17:21:00:
2c:0b:35:92:f6:c0:6c:32:ff:89:68:e5:83:46:88:29:24:ec:
9d:d4:43:2d:2b:e4:60:05:9e:b6:1f:66:9f:ad:b3:2d:d7:23:
5e:ef:18:86:f5:a0:a6:0b:f6:22:0d:d1:a7:f5:9b:ca:b5:33:
5a:45:8d:a8:f2:f7:2a:2e:a0:7e:d5:dc:8c:d5:8c:c6:c5:d3:
6f:20:c3:de:fd:dd:39:12:5b:07:e5:b5:00:0a:51:2c:69:d6:
c7:c7:84:c4:a9:de:4a:ef:d0:84:74:9a:91:89:54:42:d3:c0:
15:2b:71:a4:c2:22:93:1e:f8:bc:4c:e4:74:dd:65:81:95:37:
3e:87:a9:47:9b:8d:4f:90:fb:15:1e:00:a5:ff:8f:a7:3f:73:
e5:80:4a:93
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgISAYS7VJPBfN9TElCP742NqbBsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIxMTI3MjMwMzEzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMGExZmNmMDgyMjcyODMzN2YzOWVjODQ1ZTkwODg0YTY1ZDlkZDIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ooVkukHJf6JvPSPHaC3C7V/PR95
F80z6vHt51/lGRQuokdprEOUgH1BjhXAajvpRrjWOXfCW664sgkVHfjHQdyaCvDT
2p+HewR/heGt1l+5qosAgJEgcz29oGoMSTxEHb/6rKZjSiqswBJ/bO/Smik7a6YI
cnovUUiCDEOI3ik4fHf4TrFlTMBenp5jCbT1dMsdw1tCVBvfToq1rOGdmB7MMYy9
Onl/NczYHsbVY6VuRs60Ig74PGMgA967CUCWGMn1DAxmCDADu6tAiIW+JFYYN5Gy
8cBuacNEs1opHfXDQiDuUfMHUIHg4z6xQk/fvCwsh3Mv4zw6WJ7OnVBpSwIDAQAB
o4ICMTCCAi0wHQYDVR0OBBYEFOCh/PCCJygzfznshF6QiEpl2d0iMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvNEtIODhJSW5LRE5fT2V5RVhwQ0lTbVhaM1NJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjA0BAIAAjAuAwYBKgXfx1YD
BwAqBqAFDS0wEgMHACoGoAUVBwMHACoGoAUVCAMHBCoGoAUgwDANBgkqhkiG9w0B
AQsFAAOCAQEAiyTrP+qmuBwwf5TwbPXZTiNVdt9w4zrYB9Ob3UYkLici3pj0OD0E
Vbz2NxE1ZlzjUnjnLhNGxQqXduNPrVyz9FZzXxkVTARxLgCgjSEjoCvDyhw5HLpT
gBSXCew+YWW+MQcPHsQvr07sFyEALAs1kvbAbDL/iWjlg0aIKSTsndRDLSvkYAWe
th9mn62zLdcjXu8YhvWgpgv2Ig3Rp/WbyrUzWkWNqPL3Ki6gftXcjNWMxsXTbyDD
3v3dORJbB+W1AApRLGnWx8eExKneSu/QhHSakYlUQtPAFStxpMIikx74vEzkdN1l
gZU3PoepR5uNT5D7FR4Apf+Ppz9z5YBKkw==
-----END CERTIFICATE-----
Generated at Fri Apr 18 09:58:09 2025 by rpki-client