Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/KJ8OLeSFjFgOWeXuGo8_2SxdpmE.roa
File: KJ8OLeSFjFgOWeXuGo8_2SxdpmE.roa (raw, json)
Hash identifier: Z46nwxPvGlRoVTvO6o/GOEFgwv0GRgDCUayva9d7VKc=
Subject key identifier: 28:9F:0E:2D:E4:85:8C:58:0E:59:E5:EE:1A:8F:3F:D9:2C:5D:A6:61
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01823F9C99C65DF43AC57D7B9B51554A40F4
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/KJ8OLeSFjFgOWeXuGo8_2SxdpmE.roa
Signing time: Wed 27 Jul 2022 12:23:23 +0000
ROA not before: Wed 27 Jul 2022 12:23:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209263
IP address blocks: 2a06:1287:200::/40 maxlen: 48
2a06:a005:1070::/44 maxlen: 48
2a06:a005:470::/44 maxlen: 48
2a06:a005:e40::/44 maxlen: 48
2a06:a005:1080::/44 maxlen: 48
2a06:a005:1190::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:3f:9c:99:c6:5d:f4:3a:c5:7d:7b:9b:51:55:4a:40:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jul 27 12:23:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=289f0e2de4858c580e59e5ee1a8f3fd92c5da661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5c:01:c5:a0:ab:fb:9d:ae:19:2f:db:e3:96:
c9:6f:ee:e2:a3:36:19:3a:ed:e9:76:d0:6e:a0:4f:
67:8f:d1:96:c9:c4:8d:1a:e9:7e:26:2f:40:ac:01:
ba:d4:03:7a:d1:24:0a:4f:b4:7a:92:87:2b:3a:38:
e9:dc:d0:c3:29:1a:83:87:ba:ff:ba:8e:26:a0:65:
c1:64:07:f3:7c:35:e7:a0:8d:ed:8e:91:51:e9:6a:
fc:a3:9b:96:cf:13:24:17:de:c5:e7:ea:64:d5:54:
d4:ea:93:80:fe:b3:54:02:92:e8:a1:2b:3f:1b:14:
21:72:eb:6f:75:56:3c:49:2f:09:79:17:3b:56:eb:
17:6e:63:c2:3d:cd:ca:50:10:4d:1e:aa:ee:a2:6b:
13:da:8c:89:71:68:41:22:bb:be:ab:2e:98:cf:9e:
1c:56:8c:c8:fa:5c:7f:29:06:64:59:bc:a0:f6:57:
02:76:cc:86:50:c1:1b:be:a2:7b:76:00:4d:cb:be:
cf:03:19:42:04:ea:27:68:d1:a1:7e:83:0e:08:81:
1e:33:c3:e7:d1:06:f1:71:b7:5b:70:a4:ea:41:79:
e1:34:b4:c1:31:66:d3:fb:b1:e0:72:7e:9c:ce:05:
11:af:bd:23:87:99:4c:e3:9d:78:fa:9b:88:7d:21:
9e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:9F:0E:2D:E4:85:8C:58:0E:59:E5:EE:1A:8F:3F:D9:2C:5D:A6:61
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/KJ8OLeSFjFgOWeXuGo8_2SxdpmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1287:200::/40
2a06:a005:470::/44
2a06:a005:e40::/44
2a06:a005:1070::-2a06:a005:108f:ffff:ffff:ffff:ffff:ffff
2a06:a005:1190::/44
Signature Algorithm: sha256WithRSAEncryption
0c:bf:9b:8d:0e:5c:a6:ed:f0:a3:9d:ef:68:b3:13:78:17:c7:
62:25:f4:f5:2b:53:d8:8b:a3:db:ee:6c:25:87:75:6c:76:55:
4e:98:23:f2:4a:36:2e:89:05:4c:48:b2:74:a9:49:c9:65:03:
6b:4a:f5:60:e8:94:9c:a2:34:ca:e3:22:98:6d:d5:06:3c:4b:
07:b7:c1:f6:3a:ed:1f:fe:f0:6a:c5:f1:d1:fa:15:59:86:5e:
66:e3:d5:be:38:60:b8:71:b9:86:dc:b0:c6:02:a0:d0:2d:d4:
4d:b4:d9:90:88:2d:49:c3:f1:a7:ab:86:fa:58:10:57:27:7e:
df:ef:62:0e:53:db:ae:8e:a6:76:cd:e9:dc:84:c6:1c:c8:ed:
86:b8:8c:d5:56:17:e6:cc:76:83:22:c7:89:f1:f9:30:0b:76:
47:0a:02:ba:13:60:0e:60:af:13:4f:a7:95:57:d5:f4:62:ca:
54:99:fb:02:3a:90:a2:7a:c1:29:3a:8f:07:91:aa:ff:e5:70:
b0:8d:0a:ec:49:48:c2:80:f4:b9:c5:35:5e:1f:6c:55:ac:79:
c2:9e:d5:0f:ba:f9:37:42:22:b5:eb:31:d9:a7:8b:89:f2:f9:
6b:34:8d:24:17:51:b9:5b:17:96:be:c3:c4:b1:7f:9d:57:77:
15:47:9b:bb
-----BEGIN CERTIFICATE-----
MIIFLjCCBBagAwIBAgISAYI/nJnGXfQ6xX17m1FVSkD0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIwNzI3MTIyMzIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyODlmMGUyZGU0ODU4YzU4MGU1OWU1ZWUxYThmM2ZkOTJjNWRhNjYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFwBxaCr+52uGS/b45bJb+7iozYZ
Ou3pdtBuoE9nj9GWycSNGul+Ji9ArAG61AN60SQKT7R6kocrOjjp3NDDKRqDh7r/
uo4moGXBZAfzfDXnoI3tjpFR6Wr8o5uWzxMkF97F5+pk1VTU6pOA/rNUApLooSs/
GxQhcutvdVY8SS8JeRc7VusXbmPCPc3KUBBNHqruomsT2oyJcWhBIru+qy6Yz54c
VozI+lx/KQZkWbyg9lcCdsyGUMEbvqJ7dgBNy77PAxlCBOonaNGhfoMOCIEeM8Pn
0QbxcbdbcKTqQXnhNLTBMWbT+7Hgcn6czgURr70jh5lM4514+puIfSGeHQIDAQAB
o4ICOjCCAjYwHQYDVR0OBBYEFCifDi3khYxYDlnl7hqPP9ksXaZhMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvS0o4T0xlU0ZqRmdPV2VYdUdvOF8yU3hkcG1FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFAGCCsGAQUFBwEHAQH/BEEwPzA9BAIAAjA3AwYAKgYShwID
BwQqBqAFBHADBwQqBqAFDkAwEgMHBCoGoAUQcAMHBCoGoAUQgAMHBCoGoAURkDAN
BgkqhkiG9w0BAQsFAAOCAQEADL+bjQ5cpu3wo53vaLMTeBfHYiX09StT2Iuj2+5s
JYd1bHZVTpgj8ko2LokFTEiydKlJyWUDa0r1YOiUnKI0yuMimG3VBjxLB7fB9jrt
H/7wasXx0foVWYZeZuPVvjhguHG5htywxgKg0C3UTbTZkIgtScPxp6uG+lgQVyd+
3+9iDlPbro6mds3p3ITGHMjthriM1VYX5sx2gyLHifH5MAt2RwoCuhNgDmCvE0+n
lVfV9GLKVJn7AjqQonrBKTqPB5Gq/+VwsI0K7ElIwoD0ucU1Xh9sVax5wp7VD7r5
N0Iitesx2aeLifL5azSNJBdRuVsXlr7DxLF/nVd3FUebuw==
-----END CERTIFICATE-----
Generated at Fri Apr 18 10:10:53 2025 by rpki-client