Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/87rf15qmsz8qO4CVYoDw24FCR7U.roa
File: 87rf15qmsz8qO4CVYoDw24FCR7U.roa (raw, json)
Hash identifier: Eob6rwdnpxqn7okTl9OotpRHi9HVh1jlihSwH90SBuA=
Subject key identifier: F3:BA:DF:D7:9A:A6:B3:3F:2A:3B:80:95:62:80:F0:DB:81:42:47:B5
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0182F3CB9B651E867CACCB58C9F353D28242
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/87rf15qmsz8qO4CVYoDw24FCR7U.roa
Signing time: Wed 31 Aug 2022 12:06:23 +0000
ROA not before: Wed 31 Aug 2022 12:06:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203069
IP address blocks: 2a06:a005:488::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f3:cb:9b:65:1e:86:7c:ac:cb:58:c9:f3:53:d2:82:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Aug 31 12:06:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f3badfd79aa6b33f2a3b80956280f0db814247b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:77:d0:79:da:32:88:14:d9:26:0f:36:13:78:
8c:c7:7e:b6:62:cf:c3:2e:7a:a8:7d:c3:e9:d4:95:
1d:a4:3e:38:12:21:23:e0:98:2b:c1:05:68:fd:05:
ca:4e:d0:2e:87:8e:57:0a:7a:c0:f8:b9:68:27:c4:
76:fb:96:92:7f:67:16:cd:17:2c:bd:58:7e:73:b9:
ba:c3:6b:95:7e:e4:9a:f8:a4:c6:1a:28:ea:6c:77:
20:67:bf:d9:3f:22:26:57:02:24:ac:35:20:c2:d9:
ab:78:33:bf:dd:ac:b6:14:bf:e7:69:2e:12:df:00:
6d:ce:08:0e:77:55:3c:64:65:18:1f:95:3c:7f:fb:
7b:36:12:a3:6c:f3:d5:b0:23:c1:a3:f1:27:b0:ce:
90:e1:2d:68:13:ed:02:1c:85:c7:15:c1:b8:a0:82:
4c:3f:1b:78:3c:2e:b3:e4:af:cb:2b:53:24:19:8d:
ad:82:68:3d:06:00:3c:a6:90:1c:e2:15:2b:84:88:
f7:2f:8d:eb:c7:48:20:86:1e:93:1b:e1:9e:27:61:
c8:16:44:5e:1e:21:2a:40:f9:14:3d:01:43:ff:2b:
bb:94:df:87:6a:0c:a0:65:23:5b:c0:5e:92:36:d1:
f4:a4:96:68:b1:1b:a5:7e:d4:a9:5f:6b:41:70:7a:
3a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:BA:DF:D7:9A:A6:B3:3F:2A:3B:80:95:62:80:F0:DB:81:42:47:B5
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/87rf15qmsz8qO4CVYoDw24FCR7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:488::/46
Signature Algorithm: sha256WithRSAEncryption
9b:92:e3:2e:9b:c1:61:d1:c8:a9:10:60:50:5b:38:59:c4:8b:
4c:db:44:12:ca:cb:d1:41:a8:19:c8:7b:61:19:6f:81:94:ab:
0a:d6:d5:5d:ec:5a:f5:9b:d5:df:6f:4f:8b:34:bc:ba:4e:96:
a6:dc:94:3f:0d:03:bc:4e:60:26:f5:0d:1b:9c:38:20:87:f5:
11:5d:67:bc:32:41:8c:ad:48:7d:3c:e4:04:43:73:78:1b:81:
e5:5c:a3:1e:63:9f:67:cd:8b:2c:51:50:46:3e:b8:09:a7:be:
b0:19:a9:55:7d:25:8c:a9:b8:99:03:16:2b:d7:7e:34:f4:c1:
9c:32:32:ef:0c:1a:87:ea:a8:c2:11:d5:f2:92:b7:4b:7b:75:
ca:9f:eb:02:3e:c9:6a:1c:59:02:ea:44:f8:35:0a:d2:ab:d9:
d1:23:54:e5:d0:07:c0:cb:99:a2:2e:3d:20:ce:4a:28:5a:65:
3b:b5:a0:b9:c8:e5:ab:24:64:64:38:12:6d:e1:c2:68:01:6c:
98:fa:0f:6e:47:10:c4:71:e3:31:32:ee:8e:7d:59:a5:6b:0b:
f1:83:25:e8:36:88:95:53:94:07:20:bb:a3:7d:c4:24:12:f3:
a9:de:a2:be:70:07:d1:47:36:72:4b:8f:c6:48:5b:bf:f3:f4:
0d:37:f4:fa
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYLzy5tlHoZ8rMtYyfNT0oJCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIwODMxMTIwNjIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmM2JhZGZkNzlhYTZiMzNmMmEzYjgwOTU2MjgwZjBkYjgxNDI0N2I1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnfQedoyiBTZJg82E3iMx362Ys/D
LnqofcPp1JUdpD44EiEj4JgrwQVo/QXKTtAuh45XCnrA+LloJ8R2+5aSf2cWzRcs
vVh+c7m6w2uVfuSa+KTGGijqbHcgZ7/ZPyImVwIkrDUgwtmreDO/3ay2FL/naS4S
3wBtzggOd1U8ZGUYH5U8f/t7NhKjbPPVsCPBo/EnsM6Q4S1oE+0CHIXHFcG4oIJM
Pxt4PC6z5K/LK1MkGY2tgmg9BgA8ppAc4hUrhIj3L43rx0gghh6TG+GeJ2HIFkRe
HiEqQPkUPQFD/yu7lN+HagygZSNbwF6SNtH0pJZosRulftSpX2tBcHo6vwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFPO639eaprM/KjuAlWKA8NuBQke1MB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvODdyZjE1cW1zejhxTzRDVllvRHcyNEZDUjdVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCKgagBQSI
MA0GCSqGSIb3DQEBCwUAA4IBAQCbkuMum8Fh0cipEGBQWzhZxItM20QSysvRQagZ
yHthGW+BlKsK1tVd7Fr1m9Xfb0+LNLy6Tpam3JQ/DQO8TmAm9Q0bnDggh/URXWe8
MkGMrUh9POQEQ3N4G4HlXKMeY59nzYssUVBGPrgJp76wGalVfSWMqbiZAxYr1340
9MGcMjLvDBqH6qjCEdXykrdLe3XKn+sCPslqHFkC6kT4NQrSq9nRI1Tl0AfAy5mi
Lj0gzkooWmU7taC5yOWrJGRkOBJt4cJoAWyY+g9uRxDEceMxMu6OfVmlawvxgyXo
NoiVU5QHILujfcQkEvOp3qK+cAfRRzZyS4/GSFu/8/QNN/T6
-----END CERTIFICATE-----
Generated at Fri Apr 18 10:19:05 2025 by rpki-client