Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/C66w8FM5loQoOLPwVRXsLpbqabM.roa
File: C66w8FM5loQoOLPwVRXsLpbqabM.roa (raw, json)
Hash identifier: erHGwrwp3dogZsDyhMdJakgBWq05072Nm6gV8dG/X0w=
Subject key identifier: 0B:AE:B0:F0:53:39:96:84:28:38:B3:F0:55:15:EC:2E:96:EA:69:B3
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0182E5354799059B9D900B5DE730D89E0AA2
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/C66w8FM5loQoOLPwVRXsLpbqabM.roa
Signing time: Sun 28 Aug 2022 16:07:30 +0000
ROA not before: Sun 28 Aug 2022 16:07:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212983
IP address blocks: 2a06:a005:480::/48 maxlen: 48
2a06:a005:43e::/48 maxlen: 48
2a06:a005:483::/48 maxlen: 48
2a06:a005:13::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:e5:35:47:99:05:9b:9d:90:0b:5d:e7:30:d8:9e:0a:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Aug 28 16:07:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0baeb0f0533996842838b3f05515ec2e96ea69b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:71:d9:ef:7e:6d:13:78:36:32:92:a6:a3:5c:
ef:c3:ef:8c:59:7e:4d:4b:11:99:6e:bc:1a:20:61:
97:e1:48:49:63:24:7c:c8:0e:72:5b:f1:50:a3:6d:
da:8e:f7:54:8a:3e:c3:f9:85:a3:46:bd:23:f6:62:
32:49:b9:ce:6d:4b:b5:30:7d:82:ce:93:ef:00:01:
30:d5:a3:3a:a4:e4:46:ae:fc:98:17:70:b4:45:f0:
b3:db:c7:f7:79:8e:03:7f:c9:9a:5a:63:8f:b2:a9:
66:ef:f9:60:9f:c5:0e:04:ae:76:d7:a6:d4:f9:5f:
e0:6f:98:8f:12:dc:27:2e:0f:99:ae:8c:8d:b0:92:
7f:0f:be:57:0a:3a:0a:88:4f:4b:1c:71:77:87:37:
2f:d9:9b:ac:03:1f:eb:21:84:3e:d1:db:d9:db:60:
fb:40:03:cd:8f:9f:77:fb:77:34:12:35:5c:5a:6f:
63:a8:9a:92:65:81:43:ee:ab:79:75:eb:7e:9a:62:
7d:b4:90:02:99:64:35:e8:8c:46:81:09:fb:0d:f9:
b6:04:62:27:76:55:9f:83:14:91:a4:6c:a9:fd:1d:
5d:a8:99:f6:20:df:63:fa:76:b1:9e:dd:10:42:d6:
a9:c0:36:04:b2:29:22:d8:23:b0:b0:0d:24:08:a7:
69:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:AE:B0:F0:53:39:96:84:28:38:B3:F0:55:15:EC:2E:96:EA:69:B3
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/C66w8FM5loQoOLPwVRXsLpbqabM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:13::/48
2a06:a005:43e::/48
2a06:a005:480::/48
2a06:a005:483::/48
Signature Algorithm: sha256WithRSAEncryption
66:f9:63:8d:71:6d:c1:03:8f:2c:f3:0b:d8:36:b9:97:d8:07:
e9:95:e1:14:fb:f9:d6:b7:66:2e:6b:65:15:bc:5b:43:9c:39:
44:52:fd:84:da:f4:4f:48:b8:69:d9:68:1c:3e:17:f0:64:e0:
fe:3d:9b:d9:ba:7b:12:63:f9:08:c0:b9:34:05:87:b6:32:cc:
25:7b:71:65:1d:01:54:6a:94:76:70:cc:08:ca:dd:1e:c7:d8:
9b:2a:a9:c2:e5:25:dc:fe:04:6f:78:ec:24:9e:63:74:2a:d4:
7d:cf:f4:3d:08:24:63:6c:14:71:ab:38:b6:5c:ed:8c:c8:5f:
38:fe:82:4a:3d:72:f6:42:e8:98:46:ac:6c:fe:ba:2a:e5:84:
1e:d7:89:d2:d5:2e:92:eb:d4:76:a8:97:a9:19:0f:53:f9:a9:
bb:25:11:e7:bd:d0:20:54:fa:e0:cc:41:5a:9f:2c:aa:36:71:
e2:1f:df:95:d2:f7:71:34:ec:7c:16:50:d2:56:e8:70:32:31:
4b:30:c3:5d:87:78:01:1b:92:10:97:f4:22:08:ce:1a:b0:be:
5e:a7:7b:b1:c5:80:f6:f3:65:2a:0f:e3:b4:b2:11:93:ea:96:
f6:52:80:bd:6a:f8:bd:20:b5:a8:ab:a0:35:90:d7:f3:d6:50:
06:78:a0:be
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYLlNUeZBZudkAtd5zDYngqiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIwODI4MTYwNzMwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYmFlYjBmMDUzMzk5Njg0MjgzOGIzZjA1NTE1ZWMyZTk2ZWE2OWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnHZ735tE3g2MpKmo1zvw++MWX5N
SxGZbrwaIGGX4UhJYyR8yA5yW/FQo23ajvdUij7D+YWjRr0j9mIySbnObUu1MH2C
zpPvAAEw1aM6pORGrvyYF3C0RfCz28f3eY4Df8maWmOPsqlm7/lgn8UOBK5216bU
+V/gb5iPEtwnLg+ZroyNsJJ/D75XCjoKiE9LHHF3hzcv2ZusAx/rIYQ+0dvZ22D7
QAPNj593+3c0EjVcWm9jqJqSZYFD7qt5det+mmJ9tJACmWQ16IxGgQn7Dfm2BGIn
dlWfgxSRpGyp/R1dqJn2IN9j+naxnt0QQtapwDYEsiki2COwsA0kCKdphwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFAuusPBTOZaEKDiz8FUV7C6W6mmzMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvQzY2dzhGTTVsb1FvT0xQd1ZSWHNMcGJxYWJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAAjAkAwcAKgagBQAT
AwcAKgagBQQ+AwcAKgagBQSAAwcAKgagBQSDMA0GCSqGSIb3DQEBCwUAA4IBAQBm
+WONcW3BA48s8wvYNrmX2AfpleEU+/nWt2Yua2UVvFtDnDlEUv2E2vRPSLhp2Wgc
PhfwZOD+PZvZunsSY/kIwLk0BYe2Mswle3FlHQFUapR2cMwIyt0ex9ibKqnC5SXc
/gRveOwknmN0KtR9z/Q9CCRjbBRxqzi2XO2MyF84/oJKPXL2QuiYRqxs/roq5YQe
14nS1S6S69R2qJepGQ9T+am7JRHnvdAgVPrgzEFanyyqNnHiH9+V0vdxNOx8FlDS
VuhwMjFLMMNdh3gBG5IQl/QiCM4asL5ep3uxxYD282UqD+O0shGT6pb2UoC9avi9
ILWoq6A1kNfz1lAGeKC+
-----END CERTIFICATE-----
Generated at Wed Apr 23 03:53:29 2025 by rpki-client