Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/7ArLyrMmlvUiHxdWQiNW5Ggy0LA.roa
File: 7ArLyrMmlvUiHxdWQiNW5Ggy0LA.roa (raw, json)
Hash identifier: Arm3Ow/8NJlNt2s1jiS30S3zNxtuNUjys+f0t1ROaxI=
Subject key identifier: EC:0A:CB:CA:B3:26:96:F5:22:1F:17:56:42:23:56:E4:68:32:D0:B0
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0183C06C3DBC49F21C61116FCAA17C8F9FA4
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/7ArLyrMmlvUiHxdWQiNW5Ggy0LA.roa
Signing time: Mon 10 Oct 2022 05:44:22 +0000
ROA not before: Mon 10 Oct 2022 05:44:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205152
IP address blocks: 2a06:a005:1aa0::/44 maxlen: 48
2a06:a005:1ab0::/44 maxlen: 48
2a06:a005:1ac0::/44 maxlen: 48
2a06:a005:1a90::/44 maxlen: 48
2a06:a005:1a80::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c0:6c:3d:bc:49:f2:1c:61:11:6f:ca:a1:7c:8f:9f:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Oct 10 05:44:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ec0acbcab32696f5221f1756422356e46832d0b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:df:1b:d3:3e:5d:02:7f:5f:00:38:9b:ec:31:
c6:f0:2b:15:17:ae:49:b1:4a:88:29:9b:12:0f:fa:
cc:ee:c0:70:75:10:ce:ef:b7:67:09:b2:e4:b5:b8:
03:34:13:d4:8f:f9:ef:02:d6:2b:0f:f3:d9:80:20:
9c:44:07:da:1c:32:6a:57:78:ce:8b:ea:fd:50:38:
ad:b6:99:4a:9a:5d:91:6f:e3:94:66:bf:56:70:5f:
38:c0:96:ee:16:e9:3e:24:3a:99:02:63:20:d8:89:
3e:43:e7:8a:34:f2:55:58:c3:2e:a6:1f:2f:11:c7:
fe:1f:e0:ed:dc:3d:77:7c:62:39:60:15:3a:d5:fc:
d9:49:4d:fe:48:d9:f5:fc:ca:ca:25:c4:c6:3f:8f:
c9:aa:a3:24:66:22:f0:dd:c1:19:27:ea:9c:75:00:
21:74:02:71:2b:db:2c:d4:7a:e7:98:9f:62:7e:3a:
49:43:ed:82:4a:86:2e:df:da:0d:3f:c0:8b:15:63:
47:cd:a0:0d:22:92:98:b8:60:11:7b:41:ba:29:10:
96:f1:aa:79:3d:b0:6f:7b:69:bc:0c:7a:2e:ad:65:
c9:03:8a:08:55:26:94:3c:db:21:12:7d:5c:67:33:
9e:a9:f7:73:f1:98:64:93:11:f4:de:35:50:3a:d2:
83:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:0A:CB:CA:B3:26:96:F5:22:1F:17:56:42:23:56:E4:68:32:D0:B0
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/7ArLyrMmlvUiHxdWQiNW5Ggy0LA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1a80::-2a06:a005:1acf:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
60:43:9e:a1:f7:63:04:4a:0c:c3:4e:c2:7e:75:35:a0:d5:86:
8d:e6:24:96:ce:d0:51:5a:77:63:f8:15:b8:1f:8b:67:5e:e3:
bc:9f:86:28:19:c1:85:c3:b9:66:68:f5:98:a1:a1:48:5d:f7:
e3:f5:a9:98:f6:49:1d:26:dd:14:01:53:80:21:2e:31:ee:d3:
f8:f0:c8:a1:f4:40:d4:c4:52:48:9b:ac:d4:15:04:d5:f0:f3:
87:d2:2a:18:7a:d3:97:78:5b:f9:9c:ce:bd:c8:f5:38:ed:39:
ab:b9:f6:fa:f4:7d:e8:2d:58:00:f0:4a:c0:08:6d:f6:25:dd:
ce:c7:8c:ff:a1:0e:f1:76:b8:1c:a7:c6:1f:0b:16:b7:f1:50:
5f:24:ee:98:e8:9e:85:e5:78:1b:67:dc:63:bc:05:d9:ae:54:
f8:08:c6:fd:56:e1:08:23:2f:c3:63:51:b2:5d:f6:ca:30:e2:
14:82:cf:6e:14:42:61:19:d1:d4:e9:50:aa:8a:53:d0:b8:af:
c6:3a:26:ae:83:98:90:dd:7c:1d:4e:7b:c2:a9:99:f3:e5:eb:
15:e8:74:9b:90:de:c9:5b:3c:4c:73:a3:21:fb:23:b6:8c:de:
e0:46:40:b3:c6:a2:d0:f2:6a:f3:10:da:4b:14:49:e2:ca:16:
52:00:f3:f7
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYPAbD28SfIcYRFvyqF8j5+kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIxMDEwMDU0NDIyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYzBhY2JjYWIzMjY5NmY1MjIxZjE3NTY0MjIzNTZlNDY4MzJkMGIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg98b0z5dAn9fADib7DHG8CsVF65J
sUqIKZsSD/rM7sBwdRDO77dnCbLktbgDNBPUj/nvAtYrD/PZgCCcRAfaHDJqV3jO
i+r9UDittplKml2Rb+OUZr9WcF84wJbuFuk+JDqZAmMg2Ik+Q+eKNPJVWMMuph8v
Ecf+H+Dt3D13fGI5YBU61fzZSU3+SNn1/MrKJcTGP4/JqqMkZiLw3cEZJ+qcdQAh
dAJxK9ss1HrnmJ9ifjpJQ+2CSoYu39oNP8CLFWNHzaANIpKYuGARe0G6KRCW8ap5
PbBve2m8DHourWXJA4oIVSaUPNshEn1cZzOeqfdz8ZhkkxH03jVQOtKDPQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFOwKy8qzJpb1Ih8XVkIjVuRoMtCwMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvN0FyTHlyTW1sdlVpSHhkV1FpTlc1R2d5MExBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwcqBqAF
GoADBwQqBqAFGsAwDQYJKoZIhvcNAQELBQADggEBAGBDnqH3YwRKDMNOwn51NaDV
ho3mJJbO0FFad2P4Fbgfi2de47yfhigZwYXDuWZo9ZihoUhd9+P1qZj2SR0m3RQB
U4AhLjHu0/jwyKH0QNTEUkibrNQVBNXw84fSKhh605d4W/mczr3I9TjtOau59vr0
fegtWADwSsAIbfYl3c7HjP+hDvF2uBynxh8LFrfxUF8k7pjonoXleBtn3GO8Bdmu
VPgIxv1W4QgjL8NjUbJd9sow4hSCz24UQmEZ0dTpUKqKU9C4r8Y6Jq6DmJDdfB1O
e8KpmfPl6xXodJuQ3slbPExzoyH7I7aM3uBGQLPGotDyavMQ2ksUSeLKFlIA8/c=
-----END CERTIFICATE-----
Generated at Fri Apr 18 10:09:39 2025 by rpki-client