Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/8v2FW7vYQS5KSkjkw7MTAiyyNvk.roa
File: 8v2FW7vYQS5KSkjkw7MTAiyyNvk.roa (raw, json)
Hash identifier: 9nAjGojwiSSjT7opzc86Ti09EbR7Ub52Sx3VXhxT9vQ=
Subject key identifier: F2:FD:85:5B:BB:D8:41:2E:4A:4A:48:E4:C3:B3:13:02:2C:B2:36:F9
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0182BB284B87A36091E5BB5F807C85BAB2CE
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/8v2FW7vYQS5KSkjkw7MTAiyyNvk.roa
Signing time: Sat 20 Aug 2022 12:09:16 +0000
ROA not before: Sat 20 Aug 2022 12:09:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203857
IP address blocks: 2a06:a005:5ec::/48 maxlen: 48
2a06:a005:851::/48 maxlen: 48
2a06:a005:11::/48 maxlen: 48
2a06:a005:a02::/48 maxlen: 48
2a06:a005:856::/48 maxlen: 48
2a06:a005:456::/48 maxlen: 48
2a06:a005:4d6::/48 maxlen: 48
2a06:a005:5e4::/48 maxlen: 48
2a06:a005:5e9::/48 maxlen: 48
2a06:a005:2df::/48 maxlen: 48
2a06:a005:5ee::/48 maxlen: 48
2a06:a005:4d3::/48 maxlen: 48
2a06:a005:a01::/48 maxlen: 48
2a06:a005:4d2::/48 maxlen: 48
2a06:a005:432::/48 maxlen: 48
2a06:a005:12::/48 maxlen: 48
2a06:a005:4d7::/48 maxlen: 48
2a06:a005:10::/48 maxlen: 48
2a06:a005:850::/48 maxlen: 48
2a06:a005:4d5::/48 maxlen: 48
2a06:a005:5eb::/48 maxlen: 48
2a06:a005:2d4::/48 maxlen: 48
2a06:a005:4d4::/48 maxlen: 48
2a06:a005:5ea::/48 maxlen: 48
2a06:a005:5ef::/48 maxlen: 48
2a06:a005:a08::/48 maxlen: 48
2a06:a005:5e8::/48 maxlen: 48
2a06:a005:5ed::/48 maxlen: 48
2a06:a005:5e3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:bb:28:4b:87:a3:60:91:e5:bb:5f:80:7c:85:ba:b2:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Aug 20 12:09:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f2fd855bbbd8412e4a4a48e4c3b313022cb236f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:68:ce:7d:12:cd:b6:1d:32:e2:bb:f8:ee:34:
f0:a5:ea:90:90:bb:10:ad:02:e4:bd:f4:ad:9f:e8:
36:a1:53:23:8e:dc:fb:bd:41:fe:05:f5:6a:e0:2a:
0e:72:7a:2a:d3:79:a5:17:fb:83:47:c2:dd:2b:3e:
4f:e0:d1:1c:f9:d3:41:e4:f6:93:b3:aa:3a:f4:92:
4a:9f:23:94:82:f1:35:54:50:34:18:e6:17:ad:7c:
50:de:1b:9b:e4:3b:1f:bf:a9:63:46:56:02:74:26:
ca:a0:6d:9e:88:9d:5c:b7:12:3b:40:5b:b1:c5:54:
6b:4a:a2:95:ca:65:a5:a0:e0:5d:87:dc:73:92:bb:
5f:69:2d:0a:85:eb:d0:de:e7:b8:12:31:ec:a9:80:
07:e5:00:6c:57:80:84:42:6d:cd:7a:93:bb:fc:b1:
4a:0a:7e:d3:cb:27:5d:e8:36:ac:d2:29:df:84:88:
ef:ee:4d:b6:43:2f:28:26:6a:18:21:fc:41:c6:c9:
c8:dc:ad:57:34:7a:92:63:c4:54:66:b9:28:38:09:
e9:0c:09:e0:04:37:3d:a8:48:92:a1:08:3f:3d:67:
23:58:c9:a8:ae:33:8e:98:56:06:e6:6e:29:f6:28:
47:45:30:22:c7:6f:2f:6a:7f:b5:22:c0:7b:33:6e:
0e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:FD:85:5B:BB:D8:41:2E:4A:4A:48:E4:C3:B3:13:02:2C:B2:36:F9
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/8v2FW7vYQS5KSkjkw7MTAiyyNvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:10::-2a06:a005:12:ffff:ffff:ffff:ffff:ffff
2a06:a005:2d4::/48
2a06:a005:2df::/48
2a06:a005:432::/48
2a06:a005:456::/48
2a06:a005:4d2::-2a06:a005:4d7:ffff:ffff:ffff:ffff:ffff
2a06:a005:5e3::-2a06:a005:5e4:ffff:ffff:ffff:ffff:ffff
2a06:a005:5e8::/45
2a06:a005:850::/47
2a06:a005:856::/48
2a06:a005:a01::-2a06:a005:a02:ffff:ffff:ffff:ffff:ffff
2a06:a005:a08::/48
Signature Algorithm: sha256WithRSAEncryption
4b:be:15:58:12:35:12:2c:a3:c5:80:84:37:8f:88:12:52:97:
df:10:3e:ee:21:86:63:68:55:71:42:08:68:6c:d7:e2:93:58:
2f:08:99:bb:61:7e:6d:e0:74:8d:7a:64:5f:a1:08:1a:74:04:
1b:3c:c0:18:49:af:a5:4d:37:60:fc:32:f8:3d:68:63:8e:89:
12:fa:49:8b:93:dd:6e:c1:ce:62:82:14:f5:1e:f2:a7:e1:c0:
be:36:61:f5:b3:ae:ea:c2:a7:ea:6a:5c:97:63:9d:41:b8:77:
8e:d0:86:bb:81:c6:60:8d:55:3c:9d:73:82:f6:66:72:de:4a:
78:4a:53:70:4b:b3:6a:af:b3:16:89:0e:da:56:ca:cb:0d:6e:
20:39:6e:ed:81:37:11:a2:08:64:d3:ae:6e:a4:d4:17:c2:ae:
c5:5c:08:22:7d:aa:e1:15:56:59:cc:fc:bf:c3:09:7e:43:cf:
22:96:8e:ec:76:39:77:09:63:f4:24:a8:a3:4d:fb:a0:02:04:
44:f5:78:63:4c:c2:8f:de:1d:b4:09:71:b4:77:60:b0:37:f1:
be:89:87:bd:80:b5:d4:20:7d:43:7c:04:89:03:e8:07:ee:cc:
89:c2:fd:ca:f3:15:16:5b:1a:99:0d:38:4e:41:0f:2c:82:41:
a2:78:1f:a6
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAYK7KEuHo2CR5btfgHyFurLOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIwODIwMTIwOTE2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMmZkODU1YmJiZDg0MTJlNGE0YTQ4ZTRjM2IzMTMwMjJjYjIzNmY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGjOfRLNth0y4rv47jTwpeqQkLsQ
rQLkvfStn+g2oVMjjtz7vUH+BfVq4CoOcnoq03mlF/uDR8LdKz5P4NEc+dNB5PaT
s6o69JJKnyOUgvE1VFA0GOYXrXxQ3hub5Dsfv6ljRlYCdCbKoG2eiJ1ctxI7QFux
xVRrSqKVymWloOBdh9xzkrtfaS0KhevQ3ue4EjHsqYAH5QBsV4CEQm3NepO7/LFK
Cn7Tyydd6Das0infhIjv7k22Qy8oJmoYIfxBxsnI3K1XNHqSY8RUZrkoOAnpDAng
BDc9qEiSoQg/PWcjWMmorjOOmFYG5m4p9ihHRTAix28van+1IsB7M24OcwIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFPL9hVu72EEuSkpI5MOzEwIssjb5MB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvOHYyRlc3dllRUzVLU2tqa3c3TVRBaXl5TnZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIG1BggrBgEFBQcBBwEB/wSBpTCBojCBnwQCAAIwgZgwEgMH
BCoGoAUAEAMHACoGoAUAEgMHACoGoAUC1AMHACoGoAUC3wMHACoGoAUEMgMHACoG
oAUEVjASAwcBKgagBQTSAwcDKgagBQTQMBIDBwAqBqAFBeMDBwAqBqAFBeQDBwMq
BqAFBegDBwEqBqAFCFADBwAqBqAFCFYwEgMHACoGoAUKAQMHACoGoAUKAgMHACoG
oAUKCDANBgkqhkiG9w0BAQsFAAOCAQEAS74VWBI1EiyjxYCEN4+IElKX3xA+7iGG
Y2hVcUIIaGzX4pNYLwiZu2F+beB0jXpkX6EIGnQEGzzAGEmvpU03YPwy+D1oY46J
EvpJi5PdbsHOYoIU9R7yp+HAvjZh9bOu6sKn6mpcl2OdQbh3jtCGu4HGYI1VPJ1z
gvZmct5KeEpTcEuzaq+zFokO2lbKyw1uIDlu7YE3EaIIZNOubqTUF8KuxVwIIn2q
4RVWWcz8v8MJfkPPIpaO7HY5dwlj9CSoo037oAIERPV4Y0zCj94dtAlxtHdgsDfx
vomHvYC11CB9Q3wEiQPoB+7MicL9yvMVFlsamQ04TkEPLIJBongfpg==
-----END CERTIFICATE-----
Generated at Fri Apr 18 10:17:43 2025 by rpki-client