Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/PBNdWBxgB5KJ0RPgCBXDKQI9vz8.roa
File: PBNdWBxgB5KJ0RPgCBXDKQI9vz8.roa (raw, json)
Hash identifier: Sqt+YfKWyN8QDpXftMHB/ah6HWSM2enQsh4zPc+uUf8=
Subject key identifier: 3C:13:5D:58:1C:60:07:92:89:D1:13:E0:08:15:C3:29:02:3D:BF:3F
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01827231D1DDFB46DB511308CDDAA1F60AEA
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/PBNdWBxgB5KJ0RPgCBXDKQI9vz8.roa
Signing time: Sat 06 Aug 2022 08:07:23 +0000
ROA not before: Sat 06 Aug 2022 08:07:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203472
IP address blocks: 2a06:a005:1650::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:72:31:d1:dd:fb:46:db:51:13:08:cd:da:a1:f6:0a:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Aug 6 08:07:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3c135d581c60079289d113e00815c329023dbf3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:73:00:e1:4a:4d:ec:01:a1:25:de:46:a3:a1:
ab:13:64:1a:9e:44:b6:2b:1e:c0:2c:ba:46:04:f7:
71:a6:db:2d:bd:2f:84:db:1e:f5:bb:01:f1:80:e0:
20:fa:78:57:f8:e5:8e:c9:c7:a7:f2:40:26:30:cb:
70:05:c2:41:8f:4e:6b:21:4a:46:a6:72:d7:5a:01:
34:68:bd:63:e5:37:67:b1:3b:b2:f2:7a:eb:37:4d:
39:e8:0a:66:71:d9:a7:7e:2a:3f:c3:ef:0d:3a:27:
86:87:7f:0a:12:06:b6:44:d0:12:ee:95:76:c1:64:
3c:0d:3b:4a:48:ab:9d:4c:3d:20:a3:aa:4b:5c:93:
2e:e8:be:eb:33:f7:45:a3:d3:68:a8:08:6f:bb:7a:
4c:fd:50:82:f0:09:4d:46:8a:8e:8c:a0:88:b6:2c:
b1:9a:c9:fe:77:bb:2e:88:61:81:d3:f7:9c:5e:44:
9d:77:52:4e:8a:4f:82:0b:a7:05:c0:74:27:40:07:
65:f8:1f:9f:ef:3b:49:4d:7d:c9:13:c3:47:99:2d:
08:8d:68:65:3f:25:0d:9f:70:f6:fa:17:32:8c:dd:
33:5f:b9:3b:82:43:e8:00:6a:47:50:d9:8f:bd:e3:
71:26:a7:7f:d4:89:2f:7c:15:bb:42:08:9a:72:9e:
ad:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:13:5D:58:1C:60:07:92:89:D1:13:E0:08:15:C3:29:02:3D:BF:3F
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/PBNdWBxgB5KJ0RPgCBXDKQI9vz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1650::/44
Signature Algorithm: sha256WithRSAEncryption
78:1b:91:7c:e6:fe:1d:2f:47:84:e3:85:3c:d4:12:78:97:6a:
1e:3f:ca:c6:5a:94:7b:f8:4b:55:d8:3f:10:54:89:41:de:03:
52:2b:68:23:e8:8f:31:d2:eb:24:e3:da:0a:14:03:36:3f:73:
30:e8:6c:2a:a2:d5:11:af:0e:1d:0d:98:43:3c:19:4b:cb:76:
ab:4e:04:25:77:dd:78:a5:f7:36:84:8a:c4:5b:20:29:3c:6e:
03:18:59:30:9f:ed:68:66:76:c9:4f:f2:df:d8:93:3d:0b:c6:
dc:05:ef:53:42:5c:5a:d6:91:d9:a2:d5:7c:68:24:67:dc:b5:
87:33:15:42:31:7f:fc:ca:d9:20:17:2e:ae:d6:5e:5d:23:46:
77:bd:11:e8:90:d4:91:10:12:ad:e4:a5:68:cf:16:7a:d1:85:
42:37:ad:71:d9:85:e0:2c:42:a5:4f:09:23:a5:b1:50:d8:4e:
b0:fa:ec:97:f1:67:29:32:16:b3:86:b5:0e:f4:09:fa:2e:f5:
0a:e3:33:ff:88:90:64:05:21:fd:68:20:de:c9:94:7c:8c:7f:
92:2c:9e:c1:08:74:f9:19:79:de:bc:fa:b4:6c:dc:b5:39:5f:
64:af:e4:3f:7f:ae:1f:55:f3:ff:4a:09:11:63:3e:6b:d0:49:
b5:f1:31:9c
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYJyMdHd+0bbURMIzdqh9grqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIwODA2MDgwNzIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYzEzNWQ1ODFjNjAwNzkyODlkMTEzZTAwODE1YzMyOTAyM2RiZjNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nMA4UpN7AGhJd5Go6GrE2QankS2
Kx7ALLpGBPdxptstvS+E2x71uwHxgOAg+nhX+OWOycen8kAmMMtwBcJBj05rIUpG
pnLXWgE0aL1j5TdnsTuy8nrrN0056Apmcdmnfio/w+8NOieGh38KEga2RNAS7pV2
wWQ8DTtKSKudTD0go6pLXJMu6L7rM/dFo9NoqAhvu3pM/VCC8AlNRoqOjKCItiyx
msn+d7suiGGB0/ecXkSdd1JOik+CC6cFwHQnQAdl+B+f7ztJTX3JE8NHmS0IjWhl
PyUNn3D2+hcyjN0zX7k7gkPoAGpHUNmPveNxJqd/1IkvfBW7Qgiacp6tDwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFDwTXVgcYAeSidET4AgVwykCPb8/MB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvUEJOZFdCeGdCNUtKMFJQZ0NCWERLUUk5dno4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgagBRZQ
MA0GCSqGSIb3DQEBCwUAA4IBAQB4G5F85v4dL0eE44U81BJ4l2oeP8rGWpR7+EtV
2D8QVIlB3gNSK2gj6I8x0usk49oKFAM2P3Mw6GwqotURrw4dDZhDPBlLy3arTgQl
d914pfc2hIrEWyApPG4DGFkwn+1oZnbJT/Lf2JM9C8bcBe9TQlxa1pHZotV8aCRn
3LWHMxVCMX/8ytkgFy6u1l5dI0Z3vRHokNSREBKt5KVozxZ60YVCN61x2YXgLEKl
TwkjpbFQ2E6w+uyX8WcpMhazhrUO9An6LvUK4zP/iJBkBSH9aCDeyZR8jH+SLJ7B
CHT5GXnevPq0bNy1OV9kr+Q/f64fVfP/SgkRYz5r0Em18TGc
-----END CERTIFICATE-----
Generated at Fri Apr 18 10:08:13 2025 by rpki-client