Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ATIQIe_z_xZf8RfrqZa79PyER6k.roa
File: ATIQIe_z_xZf8RfrqZa79PyER6k.roa (raw, json)
Hash identifier: mCT4RnMASof+jhBMczJ84tDVbxs6LjgYgM2VDlzp1kU=
Subject key identifier: 01:32:10:21:EF:F3:FF:16:5F:F1:17:EB:A9:96:BB:F4:FC:84:47:A9
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 018226B79D7AE7313765F6E8213D2EDB7BA8
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ATIQIe_z_xZf8RfrqZa79PyER6k.roa
Signing time: Fri 22 Jul 2022 16:22:23 +0000
ROA not before: Fri 22 Jul 2022 16:22:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203979
IP address blocks: 2a06:a005:8b0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:26:b7:9d:7a:e7:31:37:65:f6:e8:21:3d:2e:db:7b:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jul 22 16:22:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=01321021eff3ff165ff117eba996bbf4fc8447a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:86:97:ae:28:28:40:a5:6b:4c:79:61:7e:4f:
70:74:5f:87:11:11:51:b2:fa:83:73:89:2b:26:17:
88:5d:b3:8d:0d:95:5a:f6:8e:25:bc:74:ed:2f:f4:
e0:14:95:ed:62:45:b8:a5:67:5e:a0:31:3c:63:ff:
a2:4b:be:e6:5f:35:4b:48:a3:0b:45:a0:ba:b9:ee:
2e:b6:b9:79:f1:c2:58:60:93:a3:73:94:c7:b0:27:
bf:a9:23:4a:d6:6d:4a:79:74:dc:11:97:d5:48:2c:
39:be:c6:1b:7b:ad:98:01:1c:54:ba:3f:53:3b:37:
d6:05:75:6e:95:12:da:1b:59:ac:88:7a:8c:7b:89:
2d:ce:c2:02:9c:83:97:53:98:eb:7c:0f:71:66:cf:
d6:6a:11:33:c2:ff:f6:96:98:db:81:24:d2:07:be:
ff:ac:7f:fa:bf:a0:81:28:fb:6b:96:76:58:8e:54:
ff:a8:0d:cf:6b:77:87:8e:58:35:ec:29:ff:37:81:
9d:7a:36:36:b4:36:5d:88:c8:88:26:82:07:de:26:
98:19:77:ba:83:f3:d4:1a:ea:5f:ff:1a:b2:fc:3f:
c1:e2:bb:d8:89:23:e8:db:c7:57:c2:0d:27:78:51:
c8:09:e5:01:96:6c:75:03:38:8d:2d:36:84:64:19:
73:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:32:10:21:EF:F3:FF:16:5F:F1:17:EB:A9:96:BB:F4:FC:84:47:A9
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ATIQIe_z_xZf8RfrqZa79PyER6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:8b0::/44
Signature Algorithm: sha256WithRSAEncryption
46:6b:65:70:0b:f2:8f:30:eb:42:f0:ad:03:fe:31:b1:5f:47:
7b:1f:30:bb:a8:0f:61:83:6f:c0:d5:8f:a0:37:3f:e7:0d:f7:
6c:a5:83:0b:d2:6a:2e:fa:b2:25:91:ed:4b:77:ec:08:05:7a:
e7:52:49:26:3b:8f:54:69:9d:10:b7:bf:a0:50:b5:cb:1b:19:
bf:bb:c4:8b:3b:ab:54:a5:19:9b:c8:6c:e3:15:b2:f6:ed:89:
b4:a8:95:c2:53:67:11:21:ca:52:9f:22:fb:e2:09:fc:a4:b7:
27:6b:b8:25:37:8a:57:a2:bb:99:3d:bf:74:39:82:48:05:a7:
e5:b7:b0:23:bf:ae:bc:f8:7d:6c:b9:4f:02:03:fc:aa:8a:22:
03:a8:a2:2b:11:f8:ab:77:1e:56:c5:b1:8d:09:02:55:b8:97:
08:d8:c2:45:84:39:34:68:e8:fc:0e:fb:fc:b9:c7:cd:40:b9:
0d:80:d5:fe:7f:6a:2c:47:94:8b:89:0c:fd:9c:c0:a4:47:86:
61:b0:60:cd:22:a9:5f:5c:b0:3d:1e:8e:7f:5b:cf:de:fd:23:
7e:da:cb:c1:cb:22:bd:10:c5:d6:ea:4e:07:d7:f1:88:9a:66:
91:7d:3d:fa:ea:8c:9d:89:59:51:1c:48:c2:f5:df:34:78:8a:
0a:3d:93:53
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYImt5165zE3ZfboIT0u23uoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIwNzIyMTYyMjIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMTMyMTAyMWVmZjNmZjE2NWZmMTE3ZWJhOTk2YmJmNGZjODQ0N2E5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4aXrigoQKVrTHlhfk9wdF+HERFR
svqDc4krJheIXbONDZVa9o4lvHTtL/TgFJXtYkW4pWdeoDE8Y/+iS77mXzVLSKML
RaC6ue4utrl58cJYYJOjc5THsCe/qSNK1m1KeXTcEZfVSCw5vsYbe62YARxUuj9T
OzfWBXVulRLaG1msiHqMe4ktzsICnIOXU5jrfA9xZs/WahEzwv/2lpjbgSTSB77/
rH/6v6CBKPtrlnZYjlT/qA3Pa3eHjlg17Cn/N4GdejY2tDZdiMiIJoIH3iaYGXe6
g/PUGupf/xqy/D/B4rvYiSPo28dXwg0neFHICeUBlmx1AziNLTaEZBlz5wIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFAEyECHv8/8WX/EX66mWu/T8hEepMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvQVRJUUllX3pfeFpmOFJmcnFaYTc5UHlFUjZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgagBQiw
MA0GCSqGSIb3DQEBCwUAA4IBAQBGa2VwC/KPMOtC8K0D/jGxX0d7HzC7qA9hg2/A
1Y+gNz/nDfdspYML0mou+rIlke1Ld+wIBXrnUkkmO49UaZ0Qt7+gULXLGxm/u8SL
O6tUpRmbyGzjFbL27Ym0qJXCU2cRIcpSnyL74gn8pLcna7glN4pXoruZPb90OYJI
Baflt7Ajv668+H1suU8CA/yqiiIDqKIrEfirdx5WxbGNCQJVuJcI2MJFhDk0aOj8
Dvv8ucfNQLkNgNX+f2osR5SLiQz9nMCkR4ZhsGDNIqlfXLA9Ho5/W8/e/SN+2svB
yyK9EMXW6k4H1/GImmaRfT366oydiVlRHEjC9d80eIoKPZNT
-----END CERTIFICATE-----
Generated at Fri Apr 18 10:03:34 2025 by rpki-client