Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Jr2phSy_b-HbD3Hw3iZNVGKTcJg.roa
File: Jr2phSy_b-HbD3Hw3iZNVGKTcJg.roa (raw, json)
Hash identifier: hghZbuytjOs71W56DWG+SP0jzNxeQgRH1j8mFxDgIo8=
Subject key identifier: 26:BD:A9:85:2C:BF:6F:E1:DB:0F:71:F0:DE:26:4D:54:62:93:70:98
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0183BFFACA780AAEB66986BAD4169C2747B0
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Jr2phSy_b-HbD3Hw3iZNVGKTcJg.roa
Signing time: Mon 10 Oct 2022 03:40:27 +0000
ROA not before: Mon 10 Oct 2022 03:40:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44570
IP address blocks: 2a06:a004::/32 maxlen: 48
2a06:a000::/32 maxlen: 48
2a06:1280:1000::/36 maxlen: 48
2a06:a003::/32 maxlen: 48
2a06:a005::/32 maxlen: 48
2a06:a005:1a70::/44 maxlen: 48
2a06:a005:18e0::/44 maxlen: 48
2a07:54c2:b00b::/48 maxlen: 48
2a05:dfc7:1300::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:bf:fa:ca:78:0a:ae:b6:69:86:ba:d4:16:9c:27:47:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Oct 10 03:40:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=26bda9852cbf6fe1db0f71f0de264d5462937098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b6:a3:ac:c1:84:33:09:7d:a6:d0:e0:b7:5f:
d4:3c:68:da:07:de:74:00:d9:a3:7f:c4:5e:33:b3:
47:ae:e7:05:62:d8:8a:df:38:00:2f:38:5d:8e:8d:
97:25:a1:25:2f:93:79:7f:d6:f2:29:2d:cd:d3:ba:
26:72:ff:ad:a5:04:d1:a3:be:79:6e:eb:05:9d:ea:
2e:01:41:be:68:fc:41:a7:d4:6a:4b:68:a1:4d:66:
b5:4c:45:85:21:b1:09:f5:2d:9e:6f:16:51:31:2e:
ba:aa:a3:69:21:5c:81:d1:39:6f:af:ad:e2:f6:21:
5e:9c:c7:12:d1:35:0e:1e:e4:1d:2e:f8:ca:d9:a8:
05:af:b3:af:f6:5c:2c:72:6b:01:a2:bb:b6:bf:f9:
cc:99:70:12:f5:87:db:2d:34:30:56:7c:3c:51:2b:
37:93:93:35:0c:a7:2c:92:e3:02:72:5f:be:98:72:
2c:1a:08:b9:d5:ae:f4:c6:44:14:0b:c2:2d:92:2c:
26:25:d3:4c:50:be:9a:c3:a0:b9:27:9a:c0:aa:25:
1c:1e:24:26:f6:bf:bf:4d:b7:6b:c7:b3:3d:42:f5:
0b:5a:bc:f0:17:b5:30:5e:0d:43:07:3d:c7:fe:a9:
e2:47:49:7f:c5:ae:02:97:36:d9:4e:69:e4:14:1d:
2b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:BD:A9:85:2C:BF:6F:E1:DB:0F:71:F0:DE:26:4D:54:62:93:70:98
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Jr2phSy_b-HbD3Hw3iZNVGKTcJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc7:1300::/40
2a06:1280:1000::/36
2a06:a000::/32
2a06:a003::-2a06:a005:ffff:ffff:ffff:ffff:ffff:ffff
2a07:54c2:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
38:49:73:14:6e:2b:fd:60:aa:0d:66:8a:65:44:1d:6f:86:3e:
00:a5:88:60:4c:37:48:17:23:19:fb:15:fa:00:51:7e:e6:3e:
cd:6f:a2:4f:8b:b6:56:3b:ae:60:41:bf:b2:f3:56:9f:69:d2:
01:b2:d2:a6:7c:85:ae:a1:81:d6:34:7a:83:5c:7d:2f:25:da:
6a:60:aa:1a:d7:f2:66:be:2f:8b:34:93:f1:3e:72:f3:1f:67:
52:e6:1f:15:65:15:de:ed:5e:9d:bc:87:09:85:32:3b:14:d3:
8a:0e:56:3f:4b:db:ac:a1:52:0d:94:a1:bb:6e:26:4f:d3:0b:
c0:af:32:78:73:e1:a4:2a:d2:fe:04:d2:a3:ce:79:d1:ea:74:
b3:36:20:ad:8d:ca:ed:5c:6e:ab:80:2d:c4:b7:5e:d0:e5:94:
28:15:0f:ec:e5:a0:ba:f1:29:f1:66:b7:14:04:08:58:7e:d6:
8f:ae:18:c9:a8:3d:2c:5b:62:c1:ca:72:64:df:c8:31:bd:7b:
eb:f2:21:5a:6c:ed:6f:6b:d8:3b:6e:a1:c9:78:ba:ca:4d:61:
f3:b4:5e:26:00:3e:ea:39:b1:d6:df:68:b8:9f:e9:19:47:51:
28:66:15:a7:3f:61:e0:cf:9c:3d:61:e1:3b:cc:c8:3d:bd:b5:
34:1d:f9:72
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAYO/+sp4Cq62aYa61BacJ0ewMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIxMDEwMDM0MDI3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNmJkYTk4NTJjYmY2ZmUxZGIwZjcxZjBkZTI2NGQ1NDYyOTM3MDk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4bajrMGEMwl9ptDgt1/UPGjaB950
ANmjf8ReM7NHrucFYtiK3zgALzhdjo2XJaElL5N5f9byKS3N07omcv+tpQTRo755
busFneouAUG+aPxBp9RqS2ihTWa1TEWFIbEJ9S2ebxZRMS66qqNpIVyB0Tlvr63i
9iFenMcS0TUOHuQdLvjK2agFr7Ov9lwscmsBoru2v/nMmXAS9YfbLTQwVnw8USs3
k5M1DKcskuMCcl++mHIsGgi51a70xkQUC8ItkiwmJdNMUL6aw6C5J5rAqiUcHiQm
9r+/Tbdrx7M9QvULWrzwF7UwXg1DBz3H/qniR0l/xa4ClzbZTmnkFB0rHwIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFCa9qYUsv2/h2w9x8N4mTVRik3CYMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvSnIycGhTeV9iLUhiRDNIdzNpWk5WR0tUY0pnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAAjAwAwYAKgXfxxMD
BgQqBhKAEAMFACoGoAAwDgMFACoGoAMDBQEqBqAEAwcAKgdUwrALMA0GCSqGSIb3
DQEBCwUAA4IBAQA4SXMUbiv9YKoNZoplRB1vhj4ApYhgTDdIFyMZ+xX6AFF+5j7N
b6JPi7ZWO65gQb+y81afadIBstKmfIWuoYHWNHqDXH0vJdpqYKoa1/Jmvi+LNJPx
PnLzH2dS5h8VZRXe7V6dvIcJhTI7FNOKDlY/S9usoVINlKG7biZP0wvArzJ4c+Gk
KtL+BNKjznnR6nSzNiCtjcrtXG6rgC3Et17Q5ZQoFQ/s5aC68SnxZrcUBAhYftaP
rhjJqD0sW2LBynJk38gxvXvr8iFabO1va9g7bqHJeLrKTWHztF4mAD7qObHW32i4
n+kZR1EoZhWnP2Hgz5w9YeE7zMg9vbU0Hfly
-----END CERTIFICATE-----
Generated at Fri Apr 18 10:00:52 2025 by rpki-client