Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/HlqDAlmD2DZ60bbRHFyxnCZ3AY0.roa
File: HlqDAlmD2DZ60bbRHFyxnCZ3AY0.roa (raw, json)
Hash identifier: Dv8yUMFT5s3lciPUfxZ+b1ev+QvjD0BjCxsOfY+Cl48=
Subject key identifier: 1E:5A:83:02:59:83:D8:36:7A:D1:B6:D1:1C:5C:B1:9C:26:77:01:8D
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0184C33246DC61695AA7C3FA9731FE6DB11C
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/HlqDAlmD2DZ60bbRHFyxnCZ3AY0.roa
Signing time: Tue 29 Nov 2022 11:42:42 +0000
ROA not before: Tue 29 Nov 2022 11:42:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212252
IP address blocks: 2a06:a005:2430::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c3:32:46:dc:61:69:5a:a7:c3:fa:97:31:fe:6d:b1:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Nov 29 11:42:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1e5a83025983d8367ad1b6d11c5cb19c2677018d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:4d:88:1b:2b:ef:d6:53:0c:aa:ef:03:c4:31:
ea:3d:75:b2:6a:a0:19:04:e1:af:de:1c:67:f1:03:
b4:a5:99:81:55:68:b0:8e:65:de:1e:bb:4f:55:7d:
ef:2b:32:26:ab:51:fa:fa:9b:cf:40:7f:0a:11:3c:
84:41:ad:35:be:3c:6e:f8:ea:b8:ef:35:40:65:ce:
e0:ff:70:52:01:fe:21:ef:35:89:03:95:9a:3a:6d:
9f:ee:37:05:4a:2c:ca:b0:95:bb:0a:0d:23:96:12:
30:3c:cf:45:1a:23:c3:ac:d6:f1:7b:ac:5e:6a:af:
79:83:03:e4:ae:3e:d3:29:dc:bd:5c:e8:fa:7c:2d:
76:d7:72:aa:ac:5d:d8:bc:75:cf:d9:fd:d8:89:4f:
2e:05:f8:fe:d8:67:56:23:65:1c:f6:c7:d2:a9:00:
de:9b:99:1f:38:4a:a7:4a:42:0c:dd:40:82:d9:7e:
fd:cc:32:22:ac:1a:c1:4c:3b:04:e1:7a:4d:e4:56:
41:f4:4a:7f:de:f8:df:1e:f9:08:7d:b0:a4:ca:dc:
57:27:d0:56:44:73:8e:d7:ee:a5:74:1e:38:e0:0d:
f1:fe:40:66:c8:e0:4c:46:a3:b8:d4:70:c6:2d:a0:
70:23:f1:42:6c:ce:44:bf:75:0e:f1:62:93:1b:6b:
35:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:5A:83:02:59:83:D8:36:7A:D1:B6:D1:1C:5C:B1:9C:26:77:01:8D
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/HlqDAlmD2DZ60bbRHFyxnCZ3AY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2430::/44
Signature Algorithm: sha256WithRSAEncryption
0a:e7:a5:ec:d7:9a:61:69:3d:ee:70:ef:b6:11:da:b5:dc:89:
5e:07:27:ea:0d:87:e7:c9:6d:01:81:7f:62:1c:62:51:f8:78:
e9:93:67:6d:7c:0f:9b:5c:39:d1:2f:ff:67:06:61:b3:e2:35:
fe:57:9b:e5:f8:8d:64:a6:80:ab:73:ce:48:57:5e:c4:5d:34:
80:c9:d5:03:57:38:0a:65:9e:6e:1e:d8:44:57:32:b8:fd:e2:
0d:4a:ee:53:4f:90:f3:74:f9:ad:4d:2b:18:a3:1e:78:b7:fe:
1c:25:80:3d:c0:9a:6d:5e:b1:60:6a:d6:06:7b:5c:e8:43:38:
be:5b:a9:a7:43:93:d9:c2:cc:48:7b:e4:c7:7e:21:e8:8e:8a:
10:41:70:4d:1f:2b:31:ad:9f:fa:49:dc:1b:01:39:37:1b:d8:
8f:5e:15:1c:3d:1e:bf:09:df:5a:f5:82:3d:91:44:4b:60:b1:
dc:2d:47:f0:c4:c6:ee:e1:30:bf:3a:a2:93:93:32:ef:a8:7e:
00:6e:de:c9:21:ab:21:1e:9e:26:19:bc:2f:a2:a8:91:22:43:
71:f8:a1:a0:d3:63:29:4c:a2:95:87:aa:ce:75:9b:95:fa:b2:
bf:bc:2d:ae:98:91:77:ab:df:69:f3:cb:73:df:43:69:89:63:
30:e4:2d:bb
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYTDMkbcYWlap8P6lzH+bbEcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIxMTI5MTE0MjQyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZTVhODMwMjU5ODNkODM2N2FkMWI2ZDExYzVjYjE5YzI2NzcwMThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgU2IGyvv1lMMqu8DxDHqPXWyaqAZ
BOGv3hxn8QO0pZmBVWiwjmXeHrtPVX3vKzImq1H6+pvPQH8KETyEQa01vjxu+Oq4
7zVAZc7g/3BSAf4h7zWJA5WaOm2f7jcFSizKsJW7Cg0jlhIwPM9FGiPDrNbxe6xe
aq95gwPkrj7TKdy9XOj6fC1213KqrF3YvHXP2f3YiU8uBfj+2GdWI2Uc9sfSqQDe
m5kfOEqnSkIM3UCC2X79zDIirBrBTDsE4XpN5FZB9Ep/3vjfHvkIfbCkytxXJ9BW
RHOO1+6ldB444A3x/kBmyOBMRqO41HDGLaBwI/FCbM5Ev3UO8WKTG2s1ewIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFB5agwJZg9g2etG20RxcsZwmdwGNMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvSGxxREFsbUQyRFo2MGJiUkhGeXhuQ1ozQVkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgagBSQw
MA0GCSqGSIb3DQEBCwUAA4IBAQAK56Xs15phaT3ucO+2Edq13IleByfqDYfnyW0B
gX9iHGJR+Hjpk2dtfA+bXDnRL/9nBmGz4jX+V5vl+I1kpoCrc85IV17EXTSAydUD
VzgKZZ5uHthEVzK4/eINSu5TT5DzdPmtTSsYox54t/4cJYA9wJptXrFgatYGe1zo
Qzi+W6mnQ5PZwsxIe+THfiHojooQQXBNHysxrZ/6SdwbATk3G9iPXhUcPR6/Cd9a
9YI9kURLYLHcLUfwxMbu4TC/OqKTkzLvqH4Abt7JIashHp4mGbwvoqiRIkNx+KGg
02MpTKKVh6rOdZuV+rK/vC2umJF3q99p88tz30NpiWMw5C27
-----END CERTIFICATE-----
Generated at Fri Apr 18 10:06:46 2025 by rpki-client