Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/90WziqVDmmgTLRO98wW5PwU2xkY.roa
File: 90WziqVDmmgTLRO98wW5PwU2xkY.roa (raw, json)
Hash identifier: UnRfgiVR17rXCM13kt01sAspv0ozNSrKlL6LrspHhL8=
Subject key identifier: F7:45:B3:8A:A5:43:9A:68:13:2D:13:BD:F3:05:B9:3F:05:36:C6:46
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01832F1BF38D2D37B659DB06166C4F0DAAB7
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/90WziqVDmmgTLRO98wW5PwU2xkY.roa
Signing time: Mon 12 Sep 2022 00:31:44 +0000
ROA not before: Mon 12 Sep 2022 00:31:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208029
IP address blocks: 2a06:a005:d2b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:2f:1b:f3:8d:2d:37:b6:59:db:06:16:6c:4f:0d:aa:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Sep 12 00:31:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f745b38aa5439a68132d13bdf305b93f0536c646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:93:e7:e0:ae:3a:52:43:97:3e:07:5e:7c:bd:
42:6a:8c:b2:ee:6e:df:2a:72:25:d8:ba:8e:fe:c3:
f4:50:a4:99:be:91:ed:86:2e:53:4d:e6:fa:55:fb:
1f:9d:68:2a:e5:f6:1b:81:60:69:68:7b:9d:e5:cc:
bd:14:21:d4:a2:d1:86:a8:2c:04:3b:1f:8c:36:7c:
5a:a1:de:28:8f:c8:87:59:fd:0f:de:d7:55:3e:48:
bd:f3:4e:28:72:ed:5f:6b:99:c1:b1:cf:e2:99:da:
60:42:a7:c2:0a:7d:e2:2f:50:ff:0f:ef:6a:59:c2:
d7:6d:a8:16:66:48:b4:54:95:08:79:e8:78:cc:77:
e9:7b:dd:33:87:1b:92:b8:6a:e9:c3:e8:be:7f:be:
8a:54:b5:e3:1b:41:e3:ad:1c:34:41:d2:24:21:5b:
d2:1f:2c:0b:c9:7a:6c:da:ee:f7:45:55:66:07:5a:
67:13:ee:e3:be:cb:2f:0d:40:23:26:28:b7:eb:be:
3c:c4:df:49:a9:b6:c4:a7:b7:77:53:f2:18:bb:eb:
15:62:ed:80:48:30:77:66:df:5b:f1:cf:6f:40:5d:
10:ba:03:56:03:73:c8:94:b9:8b:e3:b1:25:d4:48:
b9:d8:de:1c:fa:f8:18:4a:29:92:f9:e9:51:01:46:
f1:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:45:B3:8A:A5:43:9A:68:13:2D:13:BD:F3:05:B9:3F:05:36:C6:46
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/90WziqVDmmgTLRO98wW5PwU2xkY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:d2b::/48
Signature Algorithm: sha256WithRSAEncryption
48:c0:f1:e1:a7:10:df:21:e2:b7:28:14:7c:0f:70:7e:26:c8:
c2:19:07:0c:37:87:4b:19:9a:d1:8a:ef:14:06:8b:13:7c:d5:
62:f8:15:1e:cc:e0:7f:3b:a3:9c:54:ae:96:7a:88:ef:e5:45:
7a:70:8c:fb:8b:7b:d9:88:9f:e1:80:32:8b:57:a8:34:58:17:
e9:b6:b4:a8:2d:a6:5f:06:15:7d:45:54:9d:98:a1:95:6b:08:
4b:aa:60:8a:39:f0:b6:f3:f6:09:d8:17:e6:0e:8b:d5:ff:75:
48:3e:82:37:3d:d8:57:9d:ad:ef:82:ff:4d:66:4d:ca:be:03:
f3:54:48:a3:00:97:7a:94:9c:aa:49:e9:40:62:15:68:b6:1e:
0f:17:d5:27:96:bc:53:ad:6c:21:1a:cb:6f:f3:e7:be:72:21:
a1:be:bf:6a:6d:f2:68:db:f3:e4:5a:a4:62:2e:2d:46:6b:85:
9a:2a:db:7d:4c:d2:73:12:e1:33:86:3c:c3:fa:37:91:97:5e:
32:1d:89:75:33:2b:86:be:86:15:07:6d:d3:f5:8c:4c:12:fc:
62:a1:14:93:b9:15:de:24:a5:7b:4f:85:12:07:30:58:30:0b:
1d:f9:03:be:ab:42:94:4e:1d:0b:fa:5f:bd:08:96:67:0b:2c:
fb:41:f6:ca
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYMvG/ONLTe2WdsGFmxPDaq3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIwOTEyMDAzMTQ0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzQ1YjM4YWE1NDM5YTY4MTMyZDEzYmRmMzA1YjkzZjA1MzZjNjQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipPn4K46UkOXPgdefL1Caoyy7m7f
KnIl2LqO/sP0UKSZvpHthi5TTeb6VfsfnWgq5fYbgWBpaHud5cy9FCHUotGGqCwE
Ox+MNnxaod4oj8iHWf0P3tdVPki9804ocu1fa5nBsc/imdpgQqfCCn3iL1D/D+9q
WcLXbagWZki0VJUIeeh4zHfpe90zhxuSuGrpw+i+f76KVLXjG0HjrRw0QdIkIVvS
HywLyXps2u73RVVmB1pnE+7jvssvDUAjJii36748xN9JqbbEp7d3U/IYu+sVYu2A
SDB3Zt9b8c9vQF0QugNWA3PIlLmL47El1Ei52N4c+vgYSimS+elRAUbx3wIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFPdFs4qlQ5poEy0TvfMFuT8FNsZGMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvOTBXemlxVkRtbWdUTFJPOTh3VzVQd1UyeGtZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgagBQ0r
MA0GCSqGSIb3DQEBCwUAA4IBAQBIwPHhpxDfIeK3KBR8D3B+JsjCGQcMN4dLGZrR
iu8UBosTfNVi+BUezOB/O6OcVK6Weojv5UV6cIz7i3vZiJ/hgDKLV6g0WBfptrSo
LaZfBhV9RVSdmKGVawhLqmCKOfC28/YJ2BfmDovV/3VIPoI3PdhXna3vgv9NZk3K
vgPzVEijAJd6lJyqSelAYhVoth4PF9UnlrxTrWwhGstv8+e+ciGhvr9qbfJo2/Pk
WqRiLi1Ga4WaKtt9TNJzEuEzhjzD+jeRl14yHYl1MyuGvoYVB23T9YxMEvxioRST
uRXeJKV7T4USBzBYMAsd+QO+q0KUTh0L+l+9CJZnCyz7QfbK
-----END CERTIFICATE-----
Generated at Tue Apr 22 14:16:25 2025 by rpki-client