Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/LTjidVjfr2cycgG9iqhwWJL9v0g.roa
File: LTjidVjfr2cycgG9iqhwWJL9v0g.roa (raw, json)
Hash identifier: bPoq+ynM+0iS4VisFEyKw4nuULiRyNzwNM9S6awWlXA=
Subject key identifier: 2D:38:E2:75:58:DF:AF:67:32:72:01:BD:8A:A8:70:58:92:FD:BF:48
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 1636540B
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/LTjidVjfr2cycgG9iqhwWJL9v0g.roa
Signing time: Fri 21 Jan 2022 17:18:40 +0000
ROA not before: Fri 21 Jan 2022 17:18:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209512
IP address blocks: 2a06:a005:80::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 372659211 (0x1636540b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jan 21 17:18:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2d38e27558dfaf67327201bd8aa8705892fdbf48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1f:12:21:db:19:13:c9:e1:8f:4d:45:5f:ad:
f0:b8:e0:65:18:e4:56:b6:26:ba:51:c6:6b:e2:3b:
e5:69:41:40:46:b3:ef:f0:3a:24:0b:fb:e9:24:fd:
4c:af:32:a0:da:d3:1d:ec:66:ad:87:69:41:bf:18:
7c:5c:39:ef:ea:34:f3:42:48:d4:e3:51:46:ec:6d:
3a:4b:ed:97:2d:5f:ce:78:eb:d0:44:59:7b:0b:0f:
14:c2:56:0e:64:c8:d3:61:55:2a:1b:26:54:be:a0:
10:69:b0:b2:b6:87:cd:a7:29:43:34:58:d6:9f:e2:
64:a0:69:25:85:82:fe:57:e6:8d:f4:30:b7:b1:f1:
c0:d0:a3:88:dd:10:89:81:81:0a:97:77:2c:e3:be:
0e:68:90:ee:6e:e4:f6:b1:e6:89:2e:9f:8a:fe:f3:
df:8c:97:0b:4f:dc:43:10:1a:b0:8a:83:89:7d:e6:
07:f9:5b:3d:60:4e:3d:e9:af:df:f2:38:94:4f:39:
ee:54:a4:01:bf:73:88:bd:1a:d3:d8:88:8e:8e:28:
69:48:f8:b2:97:fc:86:3f:b5:11:cc:56:a6:70:78:
d9:96:b6:f7:a7:54:8d:66:97:95:d7:38:16:00:30:
06:17:42:1a:c4:0b:50:52:c6:fb:47:b9:72:b3:8c:
76:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:38:E2:75:58:DF:AF:67:32:72:01:BD:8A:A8:70:58:92:FD:BF:48
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/LTjidVjfr2cycgG9iqhwWJL9v0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:80::/44
Signature Algorithm: sha256WithRSAEncryption
04:47:05:25:7d:37:21:ad:d5:70:63:f3:06:a1:33:99:a4:41:
6c:0c:0a:64:71:e9:37:01:1c:2b:50:26:64:b7:09:64:5f:9f:
b3:2b:46:8d:31:59:59:54:6f:e0:78:7b:88:d8:b7:d3:d8:04:
82:04:e1:e1:c3:56:49:f4:6b:eb:1f:70:cb:ce:52:26:65:ab:
fa:33:99:89:7a:d4:09:cc:d0:d8:ff:16:be:da:17:15:ef:c0:
b3:a8:bc:f3:ad:3b:4a:7c:a0:76:d8:3d:0c:38:a9:49:e8:6d:
17:a3:40:7c:b1:c0:87:37:51:b1:4d:26:e5:25:e3:f1:86:ae:
cd:34:b2:78:2a:74:f4:72:8d:6a:e6:70:2e:4d:8f:5b:d9:8b:
06:a1:43:13:d5:a0:30:06:0d:3b:cd:c2:d1:97:5a:c7:09:44:
b2:24:c3:17:d9:52:71:6b:86:b4:bd:ec:c5:1b:c7:f4:19:8e:
c9:c9:91:a0:8a:f4:44:a0:8d:6e:7b:63:35:8e:b9:a4:89:65:
a4:02:0a:cf:7a:64:eb:00:8b:1c:42:c9:ee:88:84:e1:58:ce:
6f:50:71:14:27:f2:92:97:e1:80:0f:e5:db:9a:f3:2d:11:50:
53:81:e0:33:ce:f9:6c:0e:72:e5:20:20:54:46:04:ce:25:e2:
4c:5e:48:67
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEFjZUCzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NDkxNDU0MWZkMWI5NWU3YzBhZmM4NzVmYmVmNzg3OTRmNTUzODZiMB4XDTIyMDEy
MTE3MTg0MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMmQzOGUyNzU1OGRm
YWY2NzMyNzIwMWJkOGFhODcwNTg5MmZkYmY0ODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ0fEiHbGRPJ4Y9NRV+t8LjgZRjkVrYmulHGa+I75WlBQEaz
7/A6JAv76ST9TK8yoNrTHexmrYdpQb8YfFw57+o080JI1ONRRuxtOkvtly1fznjr
0ERZewsPFMJWDmTI02FVKhsmVL6gEGmwsraHzacpQzRY1p/iZKBpJYWC/lfmjfQw
t7HxwNCjiN0QiYGBCpd3LOO+DmiQ7m7k9rHmiS6fiv7z34yXC0/cQxAasIqDiX3m
B/lbPWBOPemv3/I4lE857lSkAb9ziL0a09iIjo4oaUj4spf8hj+1EcxWpnB42Za2
96dUjWaXldc4FgAwBhdCGsQLUFLG+0e5crOMdskCAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBQtOOJ1WN+vZzJyAb2KqHBYkv2/SDAfBgNVHSMEGDAWgBRUkUVB/RuV58Cv
yHX773h5T1U4azAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ZKRkZRZjBibGVmQXI4aDEtLTk0ZVU5Vk9Hcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGEvNDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8x
L0xUamlkVmpmcjJjeWNnRzlpcWh3V0pMOXYwZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEv
NDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8xL1ZKRkZRZjBibGVm
QXI4aDEtLTk0ZVU5Vk9Hcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoGoAUAgDANBgkqhkiG9w0BAQsF
AAOCAQEABEcFJX03Ia3VcGPzBqEzmaRBbAwKZHHpNwEcK1AmZLcJZF+fsytGjTFZ
WVRv4Hh7iNi309gEggTh4cNWSfRr6x9wy85SJmWr+jOZiXrUCczQ2P8WvtoXFe/A
s6i88607Snygdtg9DDipSehtF6NAfLHAhzdRsU0m5SXj8YauzTSyeCp09HKNauZw
Lk2PW9mLBqFDE9WgMAYNO83C0ZdaxwlEsiTDF9lScWuGtL3sxRvH9BmOycmRoIr0
RKCNbntjNY65pIllpAIKz3pk6wCLHELJ7oiE4VjOb1BxFCfykpfhgA/l25rzLRFQ
U4HgM875bA5y5SAgVEYEziXiTF5IZw==
-----END CERTIFICATE-----
Generated at Fri Apr 18 10:10:47 2025 by rpki-client