Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/BU62ttozkMP1IMaSq4y_beu38EU.roa
File: BU62ttozkMP1IMaSq4y_beu38EU.roa (raw, json)
Hash identifier: SHyh75RZsDsLXssWSE9egICanVUsZwSuE0eo5ldD6wg=
Subject key identifier: 05:4E:B6:B6:DA:33:90:C3:F5:20:C6:92:AB:8C:BF:6D:EB:B7:F0:45
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01829111DA78021D99E79CFE384DD34ABCC9
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/BU62ttozkMP1IMaSq4y_beu38EU.roa
Signing time: Fri 12 Aug 2022 08:00:42 +0000
ROA not before: Fri 12 Aug 2022 08:00:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212154
IP address blocks: 2a06:a005:5ae::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:91:11:da:78:02:1d:99:e7:9c:fe:38:4d:d3:4a:bc:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Aug 12 08:00:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=054eb6b6da3390c3f520c692ab8cbf6debb7f045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8c:14:83:9c:2a:78:0c:9b:f4:a9:db:bf:92:
48:cc:35:9f:cf:26:a2:a9:cd:c9:c6:15:63:73:cb:
ec:94:29:4f:ea:71:40:2d:70:23:fc:cd:6e:4c:ce:
47:69:c8:f6:5d:44:f1:ac:70:d9:f8:62:79:fd:79:
d6:ea:24:7f:3b:ce:e2:1a:e4:a3:78:08:b5:a8:33:
ac:10:47:b0:62:fe:a8:b6:44:c0:9b:fb:28:af:9f:
50:e5:04:d8:c3:12:c3:10:87:d1:36:6a:b4:00:1e:
4e:06:35:f5:6d:a0:48:4a:23:1d:3d:a4:ee:6e:df:
8a:fe:ae:8e:fc:bb:8a:f5:13:9a:3d:ad:1c:bb:13:
63:0b:fb:5b:1a:a2:0f:ff:da:67:3f:17:1e:ac:ce:
c5:28:b8:1c:7d:3b:5d:37:1f:ff:50:48:5e:ff:ee:
99:17:59:14:ea:14:88:a6:11:86:0f:cf:2a:69:47:
8d:68:2f:bf:11:d8:69:75:86:84:82:19:f5:b1:b0:
56:2e:38:5a:db:fe:dd:10:fb:97:7b:86:d9:b7:da:
87:8e:ed:30:12:57:0d:33:12:43:35:c0:0d:1d:05:
e6:f3:92:27:aa:7a:20:f2:4f:c7:9c:d5:91:a7:e3:
e2:78:f6:a5:5c:ae:bc:f4:be:20:ea:af:ac:6c:08:
34:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:4E:B6:B6:DA:33:90:C3:F5:20:C6:92:AB:8C:BF:6D:EB:B7:F0:45
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/BU62ttozkMP1IMaSq4y_beu38EU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5ae::/48
Signature Algorithm: sha256WithRSAEncryption
64:76:4e:8c:d2:3e:33:0b:83:ed:f4:b6:bf:6a:77:95:2b:7d:
49:84:bc:ba:33:be:18:fb:4e:9b:cb:23:a3:ef:d3:f1:81:2e:
fb:b1:3c:1c:fe:6e:cd:1b:1f:a3:e9:03:e3:5f:8e:38:95:1a:
25:ea:03:38:08:1a:aa:21:f7:df:e6:47:54:71:e8:ae:1f:f6:
b0:1a:55:d3:62:43:a9:dc:71:f9:d7:1f:3e:33:2b:6f:b8:bd:
9a:a7:df:a8:68:2e:6c:73:7b:b6:57:f2:ca:41:e5:38:70:4f:
15:3d:c2:74:e8:c1:9f:ca:e7:27:d2:37:1e:03:bd:7f:77:34:
23:6e:bc:4b:73:94:09:c2:40:48:2c:1d:d8:14:42:e2:e4:ba:
1e:71:44:02:95:c2:c1:b1:14:8d:dc:ee:53:d8:bf:71:81:be:
51:d3:01:20:78:d3:c6:a8:f8:3a:c8:ee:60:b5:ce:cf:d4:da:
46:4e:78:a1:17:f1:25:29:03:8a:c6:74:5b:54:1b:db:5b:e9:
d1:df:10:9e:7a:ea:ca:29:78:d7:5d:d5:50:aa:58:3d:c2:44:
7b:ce:16:2f:b6:ef:33:82:61:fd:9b:0b:98:fc:c5:1b:bf:58:
6b:d5:c9:ce:16:82:d9:34:c6:9b:84:2a:42:15:b4:e3:6a:82:
c1:0f:f4:83
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYKREdp4Ah2Z55z+OE3TSrzJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIwODEyMDgwMDQyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNTRlYjZiNmRhMzM5MGMzZjUyMGM2OTJhYjhjYmY2ZGViYjdmMDQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIwUg5wqeAyb9Knbv5JIzDWfzyai
qc3JxhVjc8vslClP6nFALXAj/M1uTM5Hacj2XUTxrHDZ+GJ5/XnW6iR/O87iGuSj
eAi1qDOsEEewYv6otkTAm/sor59Q5QTYwxLDEIfRNmq0AB5OBjX1baBISiMdPaTu
bt+K/q6O/LuK9ROaPa0cuxNjC/tbGqIP/9pnPxcerM7FKLgcfTtdNx//UEhe/+6Z
F1kU6hSIphGGD88qaUeNaC+/EdhpdYaEghn1sbBWLjha2/7dEPuXe4bZt9qHju0w
ElcNMxJDNcANHQXm85Inqnog8k/HnNWRp+PiePalXK689L4g6q+sbAg0MwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFAVOtrbaM5DD9SDGkquMv23rt/BFMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvQlU2MnR0b3prTVAxSU1hU3E0eV9iZXUzOEVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgagBQWu
MA0GCSqGSIb3DQEBCwUAA4IBAQBkdk6M0j4zC4Pt9La/aneVK31JhLy6M74Y+06b
yyOj79PxgS77sTwc/m7NGx+j6QPjX444lRol6gM4CBqqIfff5kdUceiuH/awGlXT
YkOp3HH51x8+MytvuL2ap9+oaC5sc3u2V/LKQeU4cE8VPcJ06MGfyucn0jceA71/
dzQjbrxLc5QJwkBILB3YFELi5LoecUQClcLBsRSN3O5T2L9xgb5R0wEgeNPGqPg6
yO5gtc7P1NpGTnihF/ElKQOKxnRbVBvbW+nR3xCeeurKKXjXXdVQqlg9wkR7zhYv
tu8zgmH9mwuY/MUbv1hr1cnOFoLZNMabhCpCFbTjaoLBD/SD
-----END CERTIFICATE-----
Generated at Fri Apr 18 10:03:30 2025 by rpki-client