Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/5MavBK8GzDFFG5PpR_bR3NRF0-k.roa
File: 5MavBK8GzDFFG5PpR_bR3NRF0-k.roa (raw, json)
Hash identifier: AeHJCZO8mRVZNLmIk9p03SieziabGO8ng+2FWhTKBVY=
Subject key identifier: E4:C6:AF:04:AF:06:CC:31:45:1B:93:E9:47:F6:D1:DC:D4:45:D3:E9
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 018246873B61DCD50CB5D1E8337B5169650A
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/5MavBK8GzDFFG5PpR_bR3NRF0-k.roa
Signing time: Thu 28 Jul 2022 20:37:23 +0000
ROA not before: Thu 28 Jul 2022 20:37:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210013
IP address blocks: 2a06:a005:490::/44 maxlen: 48
2a06:a005:1460::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:46:87:3b:61:dc:d5:0c:b5:d1:e8:33:7b:51:69:65:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jul 28 20:37:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e4c6af04af06cc31451b93e947f6d1dcd445d3e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4a:5d:b9:3f:46:f5:a4:cf:a5:11:9a:2e:95:
3e:10:34:57:2e:eb:fb:73:2e:24:c6:19:8d:0c:ce:
ae:5c:88:5b:20:be:87:5e:ad:7a:84:b9:78:c0:a6:
c7:45:09:50:fd:f2:fd:be:c1:fd:ea:16:89:b2:c2:
9a:aa:8e:94:1f:58:3e:c5:da:85:0d:e8:26:69:be:
d4:c5:bd:c2:7f:94:71:d4:b4:e4:56:23:ca:41:f3:
08:74:ba:e4:32:0d:8c:f2:6c:d1:a2:19:68:9a:09:
93:40:b4:d4:7c:5a:64:1a:3d:4c:8d:5a:7b:7e:6c:
c6:b7:ea:b4:d1:0f:80:85:4a:7b:d7:c1:5a:50:c7:
11:1f:69:93:57:9b:b9:ee:92:c2:16:4e:8e:ef:3f:
e8:8f:2e:e1:d3:36:49:b0:b8:6d:0f:6c:5d:71:33:
ca:5d:ff:07:ba:78:5e:e7:75:48:0f:3e:c3:f0:06:
31:72:04:b8:12:a2:95:0c:3a:b5:25:61:6b:3f:2f:
66:f1:9f:29:39:fd:89:38:be:ff:30:1c:f5:e7:f4:
14:d8:1e:f0:21:3f:d8:9d:cb:89:bb:40:67:6b:e2:
96:37:eb:7a:5e:74:15:b3:3b:79:d8:76:ef:a0:85:
74:91:1b:3b:19:61:3a:4a:42:88:5d:53:06:a4:8d:
65:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:C6:AF:04:AF:06:CC:31:45:1B:93:E9:47:F6:D1:DC:D4:45:D3:E9
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/5MavBK8GzDFFG5PpR_bR3NRF0-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:490::/44
2a06:a005:1460::/44
Signature Algorithm: sha256WithRSAEncryption
37:c9:9c:79:84:f8:a7:6c:6d:e6:ad:44:d6:e8:e7:35:7b:23:
ea:45:80:17:8b:bd:c7:bb:ec:c4:63:76:df:52:07:20:46:4e:
b6:55:15:23:ed:49:84:73:ad:dd:cc:fb:10:e9:3a:12:c8:58:
5d:26:f5:26:17:f7:93:11:41:a5:b3:69:3c:6e:76:58:3a:ef:
f4:6b:76:09:e9:89:99:11:00:25:48:42:f5:b9:b6:6f:19:6c:
58:c2:dc:b8:8a:af:18:71:f1:9c:25:d6:4a:6a:3a:ba:0f:27:
18:3b:00:e9:53:37:1a:2d:ce:3c:c7:0d:e3:dd:49:3c:52:40:
ca:7a:9a:00:22:13:f9:46:78:c3:89:ea:e0:57:12:35:f6:73:
09:56:40:84:81:b3:93:6c:0d:fc:4b:c0:ec:ba:54:50:a6:23:
b9:bf:35:df:5d:0f:6a:4b:01:ca:f7:76:0a:a6:b5:02:30:59:
fa:19:cf:61:64:af:62:8a:b3:3c:82:a5:e4:c8:71:8a:fe:a9:
47:7d:fd:8e:c2:41:9f:88:bc:53:a5:44:01:c3:a3:e9:38:08:
28:62:91:21:55:81:22:13:65:53:7a:31:ac:7f:57:2c:00:df:
2d:dd:2a:5a:d8:84:03:13:1a:18:f9:55:c7:46:07:c3:1f:2a:
f0:14:50:be
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYJGhzth3NUMtdHoM3tRaWUKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIwNzI4MjAzNzIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNGM2YWYwNGFmMDZjYzMxNDUxYjkzZTk0N2Y2ZDFkY2Q0NDVkM2U5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUpduT9G9aTPpRGaLpU+EDRXLuv7
cy4kxhmNDM6uXIhbIL6HXq16hLl4wKbHRQlQ/fL9vsH96haJssKaqo6UH1g+xdqF
Degmab7Uxb3Cf5Rx1LTkViPKQfMIdLrkMg2M8mzRohlomgmTQLTUfFpkGj1MjVp7
fmzGt+q00Q+AhUp718FaUMcRH2mTV5u57pLCFk6O7z/ojy7h0zZJsLhtD2xdcTPK
Xf8Hunhe53VIDz7D8AYxcgS4EqKVDDq1JWFrPy9m8Z8pOf2JOL7/MBz15/QU2B7w
IT/YncuJu0Bna+KWN+t6XnQVszt52HbvoIV0kRs7GWE6SkKIXVMGpI1lsQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFOTGrwSvBswxRRuT6Uf20dzURdPpMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvNU1hdkJLOEd6REZGRzVQcFJfYlIzTlJGMC1rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKgagBQSQ
AwcEKgagBRRgMA0GCSqGSIb3DQEBCwUAA4IBAQA3yZx5hPinbG3mrUTW6Oc1eyPq
RYAXi73Hu+zEY3bfUgcgRk62VRUj7UmEc63dzPsQ6ToSyFhdJvUmF/eTEUGls2k8
bnZYOu/0a3YJ6YmZEQAlSEL1ubZvGWxYwty4iq8YcfGcJdZKajq6DycYOwDpUzca
Lc48xw3j3Uk8UkDKepoAIhP5RnjDiergVxI19nMJVkCEgbOTbA38S8DsulRQpiO5
vzXfXQ9qSwHK93YKprUCMFn6Gc9hZK9iirM8gqXkyHGK/qlHff2OwkGfiLxTpUQB
w6PpOAgoYpEhVYEiE2VTejGsf1csAN8t3Spa2IQDExoY+VXHRgfDHyrwFFC+
-----END CERTIFICATE-----
Generated at Mon Apr 21 07:48:54 2025 by rpki-client