Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/FdTlo5DNL-6w0QFzGzzq2pDJW0Q.roa
File: FdTlo5DNL-6w0QFzGzzq2pDJW0Q.roa (raw, json)
Hash identifier: W7bD7Z6+FA9phutu8Fb/vtFgQK3zA4K1/uRDAtkWNnM=
Subject key identifier: 15:D4:E5:A3:90:CD:2F:EE:B0:D1:01:73:1B:3C:EA:DA:90:C9:5B:44
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 1A1DA2E5
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/FdTlo5DNL-6w0QFzGzzq2pDJW0Q.roa
Signing time: Wed 25 May 2022 14:48:14 +0000
ROA not before: Wed 25 May 2022 14:48:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211144
IP address blocks: 2a06:a005:431::/48 maxlen: 48
2a06:a005:9f0::/44 maxlen: 48
2a06:a005:440::/44 maxlen: 48
2a06:a005:2d0::/48 maxlen: 48
2a06:a005:18::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 438149861 (0x1a1da2e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: May 25 14:48:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=15d4e5a390cd2feeb0d101731b3ceada90c95b44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:af:3f:42:57:a6:df:c8:bf:26:41:f1:59:07:
92:a5:63:45:f6:ed:39:a5:d2:ce:d9:98:ce:7d:e6:
02:c6:99:52:a2:c0:2d:bb:b6:b6:9c:e9:b7:82:84:
35:1e:99:26:32:12:7f:d2:f4:0d:24:66:cf:7f:7b:
99:f6:26:f2:f0:7e:e8:b0:9c:e3:6f:d2:07:15:3f:
7a:ec:69:d9:7c:96:74:63:c1:99:97:4a:6b:d8:a2:
45:e8:00:0d:92:a7:38:8a:57:9d:38:85:16:36:6a:
48:6e:ab:41:cc:dc:a9:9d:5c:59:c1:68:b3:43:e0:
08:85:b7:f0:5e:8e:f0:f8:f0:4b:80:1f:09:f7:20:
52:8a:05:73:7c:73:67:e3:a5:0d:86:88:88:88:58:
41:08:30:5c:f1:40:41:f9:9a:ec:5c:3c:96:f0:1e:
b0:75:09:40:41:0c:ee:33:39:65:0d:6f:30:45:76:
94:d8:6b:e6:39:07:85:06:93:55:84:4a:d7:29:cc:
6a:99:ca:f0:bb:d1:99:17:e5:1a:2c:9b:45:3c:ff:
6f:60:d0:42:aa:f2:88:59:15:8c:ea:b5:4f:c2:f2:
3e:2f:f6:98:ec:28:07:e0:b4:50:1f:b7:5c:93:cf:
00:e5:eb:fc:cc:a6:ff:90:8e:ab:75:79:fd:be:bf:
ba:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:D4:E5:A3:90:CD:2F:EE:B0:D1:01:73:1B:3C:EA:DA:90:C9:5B:44
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/FdTlo5DNL-6w0QFzGzzq2pDJW0Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:18::/48
2a06:a005:2d0::/48
2a06:a005:431::/48
2a06:a005:440::/44
2a06:a005:9f0::/44
Signature Algorithm: sha256WithRSAEncryption
13:f3:cd:ab:9c:3e:bb:4f:f2:3b:85:3e:94:93:f0:a2:34:5b:
07:c1:66:f8:aa:04:71:b4:8f:27:b2:d8:3b:fb:40:70:68:09:
de:32:56:ab:88:a1:b0:cf:62:b0:71:c7:d7:ad:57:f5:ea:f8:
24:01:40:82:46:c3:d1:50:8c:68:54:ef:dd:74:55:98:ce:ed:
76:3b:25:93:2d:7d:a4:44:8c:06:54:8d:86:97:01:5a:e0:db:
39:44:f7:6c:76:e4:bf:1b:cb:6b:91:dc:d8:b0:27:d5:5f:1c:
eb:69:3e:bc:67:13:54:43:ba:bf:72:02:b0:b8:e0:ef:f4:a2:
63:39:39:78:15:9d:d5:89:8e:cf:63:e8:d2:7a:b0:f8:6e:51:
d9:45:e6:24:c1:d3:7c:09:a7:a5:50:36:35:5f:0f:11:0b:0c:
37:17:76:6d:67:4b:aa:ff:ca:93:95:90:39:46:f4:15:9b:33:
18:17:d2:76:bd:86:4d:92:04:b0:42:cd:46:06:53:9b:04:c1:
35:eb:b5:71:5b:44:05:b1:9e:e6:64:27:05:a3:4f:a7:c7:9d:
48:78:15:07:97:1e:34:38:e0:11:b5:c5:00:8b:91:b0:cd:17:
3a:76:d7:7d:8c:20:8d:0e:c1:51:c2:a8:34:44:19:1f:46:ca:
ff:18:5a:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgIEGh2i5TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NDkxNDU0MWZkMWI5NWU3YzBhZmM4NzVmYmVmNzg3OTRmNTUzODZiMB4XDTIyMDUy
NTE0NDgxNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTVkNGU1YTM5MGNk
MmZlZWIwZDEwMTczMWIzY2VhZGE5MGM5NWI0NDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOivP0JXpt/IvyZB8VkHkqVjRfbtOaXSztmYzn3mAsaZUqLA
Lbu2tpzpt4KENR6ZJjISf9L0DSRmz397mfYm8vB+6LCc42/SBxU/euxp2XyWdGPB
mZdKa9iiRegADZKnOIpXnTiFFjZqSG6rQczcqZ1cWcFos0PgCIW38F6O8PjwS4Af
CfcgUooFc3xzZ+OlDYaIiIhYQQgwXPFAQfma7Fw8lvAesHUJQEEM7jM5ZQ1vMEV2
lNhr5jkHhQaTVYRK1ynMapnK8LvRmRflGiybRTz/b2DQQqryiFkVjOq1T8LyPi/2
mOwoB+C0UB+3XJPPAOXr/Mym/5COq3V5/b6/uqMCAwEAAaOCAjAwggIsMB0GA1Ud
DgQWBBQV1OWjkM0v7rDRAXMbPOrakMlbRDAfBgNVHSMEGDAWgBRUkUVB/RuV58Cv
yHX773h5T1U4azAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ZKRkZRZjBibGVmQXI4aDEtLTk0ZVU5Vk9Hcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGEvNDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8x
L0ZkVGxvNUROTC02dzBRRnpHenpxMnBESlcwUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEv
NDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8xL1ZKRkZRZjBibGVm
QXI4aDEtLTk0ZVU5Vk9Hcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBG
BggrBgEFBQcBBwEB/wQ3MDUwMwQCAAIwLQMHACoGoAUAGAMHACoGoAUC0AMHACoG
oAUEMQMHBCoGoAUEQAMHBCoGoAUJ8DANBgkqhkiG9w0BAQsFAAOCAQEAE/PNq5w+
u0/yO4U+lJPwojRbB8Fm+KoEcbSPJ7LYO/tAcGgJ3jJWq4ihsM9isHHH161X9er4
JAFAgkbD0VCMaFTv3XRVmM7tdjslky19pESMBlSNhpcBWuDbOUT3bHbkvxvLa5Hc
2LAn1V8c62k+vGcTVEO6v3ICsLjg7/SiYzk5eBWd1YmOz2Po0nqw+G5R2UXmJMHT
fAmnpVA2NV8PEQsMNxd2bWdLqv/Kk5WQOUb0FZszGBfSdr2GTZIEsELNRgZTmwTB
Neu1cVtEBbGe5mQnBaNPp8edSHgVB5ceNDjgEbXFAIuRsM0XOnbXfYwgjQ7BUcKo
NEQZH0bK/xhauw==
-----END CERTIFICATE-----
Generated at Tue Apr 22 23:19:33 2025 by rpki-client