Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Mnv48QFq1QrONjDh3GBoVvXmS94.roa
File: Mnv48QFq1QrONjDh3GBoVvXmS94.roa (raw, json)
Hash identifier: /Uo29sA4D1/xVc64xcisUuP8PBro24jF3AawkauInLQ=
Subject key identifier: 32:7B:F8:F1:01:6A:D5:0A:CE:36:30:E1:DC:60:68:56:F5:E6:4B:DE
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0182AC29D8D0BA650198EBA57546E2159EC8
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Mnv48QFq1QrONjDh3GBoVvXmS94.roa
Signing time: Wed 17 Aug 2022 14:16:39 +0000
ROA not before: Wed 17 Aug 2022 14:16:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212387
IP address blocks: 2a06:a005:9::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ac:29:d8:d0:ba:65:01:98:eb:a5:75:46:e2:15:9e:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Aug 17 14:16:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=327bf8f1016ad50ace3630e1dc606856f5e64bde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bc:57:14:ab:32:57:af:4f:e5:6c:bf:78:6e:
8e:df:e6:bb:37:4a:28:67:98:e6:81:2e:26:4a:74:
d2:f7:a4:ea:a8:d0:b2:68:9d:0d:59:2b:1f:37:91:
60:1c:0d:0c:7a:38:a2:e6:38:59:6a:28:b4:25:6c:
69:ed:1a:48:fe:78:ea:3a:c0:1d:4d:75:f1:00:ca:
2a:d2:83:fa:39:54:1b:08:89:2d:44:39:75:eb:f3:
89:05:19:e2:7e:6b:26:62:9e:ca:6c:ae:fd:11:93:
2a:01:84:a2:79:d5:b9:8d:68:41:3f:2e:f9:1e:95:
e2:a7:ea:aa:ee:75:2f:c2:3a:ad:39:30:d4:5e:81:
54:a3:1d:13:1e:b4:b1:c6:1c:0f:47:68:26:86:5e:
7c:97:7a:b7:54:bb:59:1a:77:14:92:b5:ad:c6:c4:
aa:35:b3:77:34:d0:91:c3:2a:54:42:0d:4d:86:27:
fa:b1:4f:06:c0:c3:90:0e:9a:48:8c:86:f7:b5:a0:
26:d3:93:da:35:9a:9c:4c:41:71:50:7c:b5:e7:4a:
98:62:e3:72:20:a8:2e:26:00:45:28:21:13:bb:ac:
fe:bb:81:bd:6e:f4:77:28:b5:c4:12:bc:c1:bb:05:
23:ac:69:69:01:6c:b9:c9:11:78:69:bf:8d:7d:0f:
1b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:7B:F8:F1:01:6A:D5:0A:CE:36:30:E1:DC:60:68:56:F5:E6:4B:DE
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Mnv48QFq1QrONjDh3GBoVvXmS94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:9::/48
Signature Algorithm: sha256WithRSAEncryption
9a:2c:67:dd:42:1b:a1:65:82:a4:4c:19:01:39:e9:9c:3b:aa:
e9:64:89:16:1b:c0:7c:46:a2:55:54:29:9a:d5:5d:85:a0:cd:
57:2f:27:94:8b:12:c8:c7:23:a6:bf:aa:7b:7f:5a:47:db:62:
7d:df:42:85:c5:fc:e0:ca:e7:16:79:c2:f2:66:7d:ab:1f:45:
dd:8c:23:cf:ad:f4:f6:c2:35:8f:45:79:a1:a8:f4:2a:b8:d5:
9f:12:ce:b0:29:f3:10:2c:f2:23:08:93:b0:57:e6:31:3b:55:
f2:f7:e3:69:af:fd:9d:98:82:1c:35:24:5d:38:30:61:25:f5:
4f:af:f6:db:79:18:b0:f2:cd:b6:11:9e:86:0b:a8:2e:6b:55:
a4:52:71:de:a4:dc:9f:32:68:c3:c0:ef:e0:5c:31:ed:2e:c6:
b1:ee:59:8f:17:05:a8:09:ae:ae:df:e2:ce:0e:ca:95:40:bc:
cf:e7:42:6e:9b:a4:0d:ef:60:55:0c:ab:eb:de:58:15:ee:bd:
6d:fc:28:d4:c3:30:31:4f:fc:97:ec:ab:c5:f8:b3:31:3f:2b:
55:75:96:24:9f:13:e9:ca:47:88:d7:a6:dd:95:dd:13:d3:c0:
85:70:fe:6e:56:df:3b:35:a3:b8:35:1c:72:8e:7f:b1:0b:9b:
71:41:d1:55
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYKsKdjQumUBmOuldUbiFZ7IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIwODE3MTQxNjM5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMjdiZjhmMTAxNmFkNTBhY2UzNjMwZTFkYzYwNjg1NmY1ZTY0YmRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLxXFKsyV69P5Wy/eG6O3+a7N0oo
Z5jmgS4mSnTS96TqqNCyaJ0NWSsfN5FgHA0Mejii5jhZaii0JWxp7RpI/njqOsAd
TXXxAMoq0oP6OVQbCIktRDl16/OJBRnifmsmYp7KbK79EZMqAYSiedW5jWhBPy75
HpXip+qq7nUvwjqtOTDUXoFUox0THrSxxhwPR2gmhl58l3q3VLtZGncUkrWtxsSq
NbN3NNCRwypUQg1Nhif6sU8GwMOQDppIjIb3taAm05PaNZqcTEFxUHy150qYYuNy
IKguJgBFKCETu6z+u4G9bvR3KLXEErzBuwUjrGlpAWy5yRF4ab+NfQ8brQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFDJ7+PEBatUKzjYw4dxgaFb15kveMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvTW52NDhRRnExUXJPTmpEaDNHQm9WdlhtUzk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgagBQAJ
MA0GCSqGSIb3DQEBCwUAA4IBAQCaLGfdQhuhZYKkTBkBOemcO6rpZIkWG8B8RqJV
VCma1V2FoM1XLyeUixLIxyOmv6p7f1pH22J930KFxfzgyucWecLyZn2rH0XdjCPP
rfT2wjWPRXmhqPQquNWfEs6wKfMQLPIjCJOwV+YxO1Xy9+Npr/2dmIIcNSRdODBh
JfVPr/bbeRiw8s22EZ6GC6gua1WkUnHepNyfMmjDwO/gXDHtLsax7lmPFwWoCa6u
3+LODsqVQLzP50Jum6QN72BVDKvr3lgV7r1t/CjUwzAxT/yX7KvF+LMxPytVdZYk
nxPpykeI16bdld0T08CFcP5uVt87NaO4NRxyjn+xC5txQdFV
-----END CERTIFICATE-----
Generated at Fri Apr 18 10:21:27 2025 by rpki-client