Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/J49al545qXrv6Co9RucTJcvDGi8.roa
File: J49al545qXrv6Co9RucTJcvDGi8.roa (raw, json)
Hash identifier: cKCxmQ5IE8N4imld85tWAPZKIhedJ2m+qBPwTdkWrvY=
Subject key identifier: 27:8F:5A:97:9E:39:A9:7A:EF:E8:2A:3D:46:E7:13:25:CB:C3:1A:2F
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 1AC86192
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/J49al545qXrv6Co9RucTJcvDGi8.roa
Signing time: Sun 12 Jun 2022 04:34:03 +0000
ROA not before: Sun 12 Jun 2022 04:34:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 395332
IP address blocks: 2a06:a005:5e1::/48 maxlen: 48
2a06:a005:c80::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 449339794 (0x1ac86192)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jun 12 04:34:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=278f5a979e39a97aefe82a3d46e71325cbc31a2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0e:07:c1:20:5d:6a:59:0f:46:c5:6a:77:a6:
86:81:65:a3:8a:73:e5:42:6b:3d:67:82:78:89:43:
93:38:29:aa:f6:ce:c6:79:fd:6b:fd:8b:d4:b9:df:
f0:3f:4d:26:f8:2d:5d:dc:e9:10:51:5d:a9:19:55:
9a:9e:42:1b:85:23:a3:40:37:22:9c:6c:a8:61:4a:
85:56:a3:96:e5:8b:39:be:5d:4e:4e:48:03:2e:ed:
8e:fb:78:0e:e3:9d:e1:ea:c2:44:4d:ce:31:35:2a:
f6:8c:cb:09:66:90:0c:91:21:25:8b:70:b4:1a:c9:
7f:44:5c:15:07:2f:3d:a3:89:cc:38:3f:68:1e:13:
3d:9a:9d:46:85:e0:bd:0d:48:d1:05:b2:2d:02:45:
d9:72:1c:34:ad:ab:64:c7:7a:92:79:29:f2:b2:40:
b7:0f:8d:e9:25:c2:54:88:3b:0c:67:b1:4f:e0:26:
90:50:7d:5b:11:01:01:0e:de:98:21:27:6f:4a:a4:
64:cd:e6:da:eb:45:d3:56:83:c3:f8:66:c3:04:ae:
37:b2:e3:03:29:74:bd:e5:86:96:f4:5d:13:e1:da:
46:46:42:ab:c2:7f:26:e8:d2:2a:c0:43:a9:2a:e7:
a0:f8:fd:b9:5a:d6:9c:8f:26:a3:3c:5d:91:46:f0:
23:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:8F:5A:97:9E:39:A9:7A:EF:E8:2A:3D:46:E7:13:25:CB:C3:1A:2F
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/J49al545qXrv6Co9RucTJcvDGi8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5e1::/48
2a06:a005:c80::/44
Signature Algorithm: sha256WithRSAEncryption
34:e1:91:0d:ad:e0:16:d8:e6:d5:7a:70:74:52:50:8b:28:36:
83:1d:ef:ab:39:78:a5:2e:53:0f:6a:64:e3:32:b7:3b:61:3e:
a3:b0:78:7d:d5:ad:6f:a5:59:db:78:22:31:cd:ca:1f:69:ee:
eb:58:ce:23:52:7e:74:69:e3:d1:4c:f9:98:21:81:43:d3:27:
87:93:09:46:a0:05:9e:54:20:e4:4b:4b:f1:68:be:80:37:f9:
d3:4a:7a:97:b9:8f:3c:07:ff:40:2d:0e:35:5a:16:c4:f5:5e:
57:ba:cd:d2:f8:5b:07:55:05:94:55:81:75:b4:6e:f6:bc:6b:
98:7c:8b:e2:9f:ba:27:26:3a:06:6e:74:9c:52:dc:cd:7c:79:
04:eb:6f:b1:8c:4f:a0:6a:bb:75:0b:5a:cf:e2:f5:bf:9b:ee:
fb:5c:13:71:70:60:e0:06:1e:39:a7:68:a6:87:a9:0e:35:e5:
cb:12:58:4b:45:e4:40:5f:f3:15:f2:a5:29:90:4e:cb:48:30:
71:b0:ea:a0:a5:49:5f:5e:53:d8:e1:bc:54:7d:e2:e1:01:51:
9e:57:7a:ed:a4:48:3a:44:19:0d:3f:83:5e:b9:c0:80:0a:f6:
7c:16:c4:1e:10:75:65:b3:bf:81:8b:3a:6e:dd:0e:3c:ee:70:
02:73:40:1c
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIEGshhkjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NDkxNDU0MWZkMWI5NWU3YzBhZmM4NzVmYmVmNzg3OTRmNTUzODZiMB4XDTIyMDYx
MjA0MzQwM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjc4ZjVhOTc5ZTM5
YTk3YWVmZTgyYTNkNDZlNzEzMjVjYmMzMWEyZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANIOB8EgXWpZD0bFanemhoFlo4pz5UJrPWeCeIlDkzgpqvbO
xnn9a/2L1Lnf8D9NJvgtXdzpEFFdqRlVmp5CG4Ujo0A3IpxsqGFKhVajluWLOb5d
Tk5IAy7tjvt4DuOd4erCRE3OMTUq9ozLCWaQDJEhJYtwtBrJf0RcFQcvPaOJzDg/
aB4TPZqdRoXgvQ1I0QWyLQJF2XIcNK2rZMd6knkp8rJAtw+N6SXCVIg7DGexT+Am
kFB9WxEBAQ7emCEnb0qkZM3m2utF01aDw/hmwwSuN7LjAyl0veWGlvRdE+HaRkZC
q8J/JujSKsBDqSrnoPj9uVrWnI8mozxdkUbwIzMCAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBQnj1qXnjmpeu/oKj1G5xMly8MaLzAfBgNVHSMEGDAWgBRUkUVB/RuV58Cv
yHX773h5T1U4azAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ZKRkZRZjBibGVmQXI4aDEtLTk0ZVU5Vk9Hcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGEvNDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8x
L0o0OWFsNTQ1cVhydjZDbzlSdWNUSmN2REdpOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEv
NDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8xL1ZKRkZRZjBibGVm
QXI4aDEtLTk0ZVU5Vk9Hcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAIwEgMHACoGoAUF4QMHBCoGoAUMgDANBgkq
hkiG9w0BAQsFAAOCAQEANOGRDa3gFtjm1XpwdFJQiyg2gx3vqzl4pS5TD2pk4zK3
O2E+o7B4fdWtb6VZ23giMc3KH2nu61jOI1J+dGnj0Uz5mCGBQ9Mnh5MJRqAFnlQg
5EtL8Wi+gDf500p6l7mPPAf/QC0ONVoWxPVeV7rN0vhbB1UFlFWBdbRu9rxrmHyL
4p+6JyY6Bm50nFLczXx5BOtvsYxPoGq7dQtaz+L1v5vu+1wTcXBg4AYeOadopoep
DjXlyxJYS0XkQF/zFfKlKZBOy0gwcbDqoKVJX15T2OG8VH3i4QFRnld67aRIOkQZ
DT+DXrnAgAr2fBbEHhB1ZbO/gYs6bt0OPO5wAnNAHA==
-----END CERTIFICATE-----
Generated at Fri Apr 18 10:09:33 2025 by rpki-client