Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Kb4x_vKH36zJb0U2fsU6HsMJ8u4.roa
File: Kb4x_vKH36zJb0U2fsU6HsMJ8u4.roa (raw, json)
Hash identifier: jMRcyU/f8q1Rez4adNfxqJ5IJX+SRDRgFvDZzbWeH44=
Subject key identifier: 29:BE:31:FE:F2:87:DF:AC:C9:6F:45:36:7E:C5:3A:1E:C3:09:F2:EE
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01833DF9FE0406A75BF27AB6B20302FED276
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Kb4x_vKH36zJb0U2fsU6HsMJ8u4.roa
Signing time: Wed 14 Sep 2022 21:48:57 +0000
ROA not before: Wed 14 Sep 2022 21:48:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205329
IP address blocks: 2a06:a005:1d50::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:3d:f9:fe:04:06:a7:5b:f2:7a:b6:b2:03:02:fe:d2:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Sep 14 21:48:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=29be31fef287dfacc96f45367ec53a1ec309f2ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ac:56:b1:7e:77:1b:ba:c6:b0:f7:ee:58:4a:
15:eb:7f:d8:19:26:63:47:47:76:c5:1f:59:24:5c:
1d:d7:43:85:67:a5:ab:4c:29:80:bf:9a:a0:ba:14:
c3:b6:75:2f:41:81:87:41:c8:50:80:48:91:e4:05:
2c:6e:e2:87:ac:d8:b0:9c:ee:77:c7:88:d9:ba:2f:
1c:e5:7f:ff:f4:f9:45:be:9a:f2:5e:41:69:30:9d:
d6:03:37:32:90:3a:77:03:c8:11:fe:27:04:68:bf:
26:86:57:1b:cd:df:06:b4:de:9b:8e:56:68:3a:0a:
ed:45:3d:92:ee:99:9d:c2:d0:4b:15:91:da:55:14:
36:ee:07:9d:a5:6d:f5:d0:a9:6a:f7:94:c8:43:ef:
d4:53:0f:85:1e:c9:b2:98:1d:40:c7:33:68:c2:4d:
a9:48:7e:ed:3e:4a:55:c1:b1:7f:c7:0a:33:f2:5a:
39:ee:89:41:e3:64:7f:5c:27:6b:8a:f0:ac:51:33:
40:e2:fc:7a:f1:81:10:a4:ea:8e:26:ca:1f:2a:c3:
f0:b9:28:56:b7:8f:c3:62:40:03:13:89:86:e9:cb:
52:d1:77:68:06:b5:33:74:ec:c2:ea:b2:53:53:92:
1d:14:15:64:d7:da:9e:87:1e:09:89:16:80:df:cf:
c0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:BE:31:FE:F2:87:DF:AC:C9:6F:45:36:7E:C5:3A:1E:C3:09:F2:EE
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Kb4x_vKH36zJb0U2fsU6HsMJ8u4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1d50::/44
Signature Algorithm: sha256WithRSAEncryption
0f:c8:ca:29:a0:b5:c5:6d:79:30:0e:a5:fc:bd:d9:8d:87:df:
c4:c7:8d:ca:4a:02:c4:a5:27:e3:d3:8d:e8:10:67:2d:af:3c:
9f:36:a2:d8:d3:b4:66:b5:27:5a:2f:3f:f4:f3:5e:0a:da:7d:
56:2f:0e:df:60:b9:4c:c9:f7:db:d1:61:69:01:ac:7b:b8:9c:
e0:38:ee:1a:dd:71:d9:a5:cd:de:63:4e:c9:23:e1:55:2b:42:
c0:77:34:51:f3:09:2b:08:68:62:b3:4a:7f:70:d2:7e:08:bb:
5a:2c:55:a7:3a:04:45:7f:7e:68:e7:fa:39:32:e7:af:8c:24:
27:31:1e:8f:ab:43:e8:11:88:51:28:6a:a6:8b:56:bc:56:7e:
58:aa:95:7c:8b:31:71:dd:94:83:d3:b9:a4:de:47:4b:79:fc:
f6:76:11:22:34:3e:ea:f9:c6:29:1c:f4:47:80:3c:5b:e7:c6:
5e:ff:3e:f4:69:84:9f:3d:c8:80:b6:36:20:7d:7d:05:15:65:
ef:30:34:2f:8b:a9:21:59:3e:7d:b6:00:2e:d2:ac:bd:7b:bf:
44:b3:24:1c:e4:27:2a:4c:f2:35:66:56:f7:c1:fc:2c:d5:cc:
dd:dd:52:73:50:71:eb:15:3f:d1:4c:0c:0e:b5:2d:9c:1e:4f:
fd:42:1f:21
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYM9+f4EBqdb8nq2sgMC/tJ2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIwOTE0MjE0ODU3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOWJlMzFmZWYyODdkZmFjYzk2ZjQ1MzY3ZWM1M2ExZWMzMDlmMmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqxWsX53G7rGsPfuWEoV63/YGSZj
R0d2xR9ZJFwd10OFZ6WrTCmAv5qguhTDtnUvQYGHQchQgEiR5AUsbuKHrNiwnO53
x4jZui8c5X//9PlFvpryXkFpMJ3WAzcykDp3A8gR/icEaL8mhlcbzd8GtN6bjlZo
OgrtRT2S7pmdwtBLFZHaVRQ27gedpW310Klq95TIQ+/UUw+FHsmymB1AxzNowk2p
SH7tPkpVwbF/xwoz8lo57olB42R/XCdrivCsUTNA4vx68YEQpOqOJsofKsPwuShW
t4/DYkADE4mG6ctS0XdoBrUzdOzC6rJTU5IdFBVk19qehx4JiRaA38/AUQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFCm+Mf7yh9+syW9FNn7FOh7DCfLuMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvS2I0eF92S0gzNnpKYjBVMmZzVTZIc01KOHU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgagBR1Q
MA0GCSqGSIb3DQEBCwUAA4IBAQAPyMopoLXFbXkwDqX8vdmNh9/Ex43KSgLEpSfj
043oEGctrzyfNqLY07RmtSdaLz/0814K2n1WLw7fYLlMyffb0WFpAax7uJzgOO4a
3XHZpc3eY07JI+FVK0LAdzRR8wkrCGhis0p/cNJ+CLtaLFWnOgRFf35o5/o5Muev
jCQnMR6Pq0PoEYhRKGqmi1a8Vn5YqpV8izFx3ZSD07mk3kdLefz2dhEiND7q+cYp
HPRHgDxb58Ze/z70aYSfPciAtjYgfX0FFWXvMDQvi6khWT59tgAu0qy9e79EsyQc
5CcqTPI1Zlb3wfws1czd3VJzUHHrFT/RTAwOtS2cHk/9Qh8h
-----END CERTIFICATE-----
Generated at Fri Apr 18 10:08:12 2025 by rpki-client