Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/R9g6Ttk2V6_fkissQUqTJXMKHxY.roa
File: R9g6Ttk2V6_fkissQUqTJXMKHxY.roa (raw, json)
Hash identifier: B7VsrnXMBSQFyXGKxbCGG4uZuHp/9FUA1Tp1BrBrwUA=
Subject key identifier: 47:D8:3A:4E:D9:36:57:AF:DF:92:2B:2C:41:4A:93:25:73:0A:1F:16
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 018249855FD587076AE5EC095D5FE84FA95C
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/R9g6Ttk2V6_fkissQUqTJXMKHxY.roa
Signing time: Fri 29 Jul 2022 10:34:13 +0000
ROA not before: Fri 29 Jul 2022 10:34:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213216
IP address blocks: 2a06:a005:45e::/47 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:49:85:5f:d5:87:07:6a:e5:ec:09:5d:5f:e8:4f:a9:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jul 29 10:34:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=47d83a4ed93657afdf922b2c414a9325730a1f16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:4d:37:27:aa:88:93:d6:91:01:42:20:2e:6b:
80:cf:05:a4:8a:30:70:d6:d4:4b:26:3d:25:d6:e0:
4e:54:61:bc:4d:5f:fa:1d:98:71:41:23:11:59:f9:
ee:f7:20:43:a8:8f:94:1a:b1:db:bb:f5:5e:9d:0c:
ec:37:d9:77:ae:fe:15:63:c7:fb:9d:68:53:fc:08:
78:9d:97:6c:b1:54:37:8d:82:f3:4e:8e:5c:dc:93:
8e:dc:22:1b:2d:fd:24:e4:79:50:56:a2:4b:83:43:
a8:b1:35:05:c7:82:0e:07:6c:6f:1b:fb:56:12:b2:
f0:53:34:44:8c:06:70:86:c4:1d:14:34:21:4d:26:
15:bc:8e:af:4c:e6:2f:b8:03:b4:82:af:68:b3:7e:
55:13:45:9b:84:19:ed:24:7c:c6:ce:ee:92:a6:a7:
6a:46:93:0e:2b:8f:89:80:31:34:02:7e:49:d1:4c:
6a:ae:77:e4:5d:da:d7:20:b5:21:5d:b5:4b:9b:dd:
9b:90:60:61:c9:e0:8c:81:06:43:38:08:5e:4a:8b:
03:ba:82:bb:28:5f:ac:f6:f5:6f:c4:35:d2:c0:ce:
f2:40:24:c1:38:01:30:89:6d:c5:41:3b:06:5b:2a:
16:45:8c:99:8a:86:e9:7a:a4:98:08:ef:fb:04:16:
20:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:D8:3A:4E:D9:36:57:AF:DF:92:2B:2C:41:4A:93:25:73:0A:1F:16
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/R9g6Ttk2V6_fkissQUqTJXMKHxY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:45e::/47
Signature Algorithm: sha256WithRSAEncryption
28:11:77:0f:42:91:15:db:2b:ec:fc:40:d6:29:04:64:76:99:
d8:40:bc:d3:55:70:b8:e3:fe:b7:ca:aa:5c:b9:cf:0f:47:d6:
93:c9:be:1a:65:c7:5f:ce:22:9b:8d:0b:c9:ac:dc:9c:80:c8:
e6:6b:3c:64:9c:33:ea:a7:a0:6e:d0:43:a0:42:d8:cf:db:21:
7a:d5:14:ca:f9:34:dc:cb:2d:7f:1f:96:23:de:71:32:b9:2c:
28:2e:b0:9e:29:5e:63:40:52:e3:32:d9:5e:00:f4:bb:3f:d4:
86:2c:1a:73:59:b1:ea:55:cd:46:7b:11:a0:17:ec:36:9f:0a:
6c:6a:16:50:ec:a1:16:ba:53:72:04:e4:9e:05:26:4e:c0:c9:
be:44:cf:41:b4:31:6e:9b:25:75:c7:99:86:69:66:d6:77:24:
bf:39:0c:a7:76:4f:66:77:26:fe:dc:cf:39:fa:10:92:e1:7d:
a1:aa:10:7d:b1:64:63:ea:8c:fe:7d:4b:97:35:f8:54:84:f2:
eb:7e:29:02:8f:d5:b1:84:3f:71:25:1b:69:a1:d1:fd:03:52:
61:7d:27:34:a8:e3:d9:d2:e9:8f:98:0f:84:ef:87:bb:00:d2:
3a:ba:c7:14:fa:cf:34:85:df:f0:aa:8f:6b:82:3f:08:f2:01:
4a:e7:25:77
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYJJhV/Vhwdq5ewJXV/oT6lcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIwNzI5MTAzNDEzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0N2Q4M2E0ZWQ5MzY1N2FmZGY5MjJiMmM0MTRhOTMyNTczMGExZjE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl003J6qIk9aRAUIgLmuAzwWkijBw
1tRLJj0l1uBOVGG8TV/6HZhxQSMRWfnu9yBDqI+UGrHbu/VenQzsN9l3rv4VY8f7
nWhT/Ah4nZdssVQ3jYLzTo5c3JOO3CIbLf0k5HlQVqJLg0OosTUFx4IOB2xvG/tW
ErLwUzREjAZwhsQdFDQhTSYVvI6vTOYvuAO0gq9os35VE0WbhBntJHzGzu6Spqdq
RpMOK4+JgDE0An5J0UxqrnfkXdrXILUhXbVLm92bkGBhyeCMgQZDOAheSosDuoK7
KF+s9vVvxDXSwM7yQCTBOAEwiW3FQTsGWyoWRYyZiobpeqSYCO/7BBYgHwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFEfYOk7ZNlev35IrLEFKkyVzCh8WMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvUjlnNlR0azJWNl9ma2lzc1FVcVRKWE1LSHhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBKgagBQRe
MA0GCSqGSIb3DQEBCwUAA4IBAQAoEXcPQpEV2yvs/EDWKQRkdpnYQLzTVXC44/63
yqpcuc8PR9aTyb4aZcdfziKbjQvJrNycgMjmazxknDPqp6Bu0EOgQtjP2yF61RTK
+TTcyy1/H5Yj3nEyuSwoLrCeKV5jQFLjMtleAPS7P9SGLBpzWbHqVc1GexGgF+w2
nwpsahZQ7KEWulNyBOSeBSZOwMm+RM9BtDFumyV1x5mGaWbWdyS/OQyndk9mdyb+
3M85+hCS4X2hqhB9sWRj6oz+fUuXNfhUhPLrfikCj9WxhD9xJRtpodH9A1JhfSc0
qOPZ0umPmA+E74e7ANI6uscU+s80hd/wqo9rgj8I8gFK5yV3
-----END CERTIFICATE-----
Generated at Tue Apr 22 14:06:22 2025 by rpki-client