Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/UrkY6HbZuznEfmnRPNc_D3ksAQQ.roa
File: UrkY6HbZuznEfmnRPNc_D3ksAQQ.roa (raw, json)
Hash identifier: HrK3bBh8yeEk/dCz6pi5YwTHr0sNBOYAZ+AfAqHHcoc=
Subject key identifier: 52:B9:18:E8:76:D9:BB:39:C4:7E:69:D1:3C:D7:3F:0F:79:2C:01:04
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01843C941F17EFB6BB050B90D42A5851815B
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/UrkY6HbZuznEfmnRPNc_D3ksAQQ.roa
Signing time: Thu 03 Nov 2022 08:20:51 +0000
ROA not before: Thu 03 Nov 2022 08:20:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203888
IP address blocks: 2a06:a005:150a::/48 maxlen: 48
2a06:a005:d22::/48 maxlen: 48
2a06:a005:2250::/44 maxlen: 48
2a06:a005:2260::/44 maxlen: 48
2a06:a005:1550::/44 maxlen: 48
2a07:54c2:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:3c:94:1f:17:ef:b6:bb:05:0b:90:d4:2a:58:51:81:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Nov 3 08:20:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=52b918e876d9bb39c47e69d13cd73f0f792c0104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9a:39:bf:88:ba:ab:13:40:a7:c6:21:98:88:
a3:28:c0:5d:8d:43:0b:d4:dd:50:57:e4:fb:c2:10:
4d:ac:56:11:a0:84:ff:40:ac:53:d6:c5:95:09:dd:
ac:e7:90:a2:2f:81:54:b3:26:db:39:a9:50:9d:12:
d9:78:bf:96:8c:e9:e5:dd:2f:7a:ff:25:1b:69:18:
b4:7d:8a:01:fc:7c:95:fc:c9:9c:b8:87:1f:ae:56:
19:45:18:be:1d:59:7e:01:dc:5d:87:90:83:e4:29:
7a:f8:59:7f:59:7c:cb:89:00:90:6d:64:a0:e5:de:
a6:41:8a:96:4a:c6:f7:26:37:5b:90:f5:e4:8e:66:
de:fa:e4:a4:38:3e:1b:ee:39:00:f9:f9:04:f2:5c:
4b:bf:63:47:e5:14:1a:33:e9:1a:ee:95:0c:3f:a9:
3b:40:2e:31:83:fa:26:4d:98:2f:9e:47:56:b3:b7:
c2:92:b3:e3:e4:89:1a:e8:6f:e6:a8:5a:ce:bb:92:
3b:2e:b1:35:83:be:6b:da:6a:7a:cb:04:0c:11:92:
89:54:1c:19:ac:48:ec:7e:6b:a2:39:91:ac:84:f9:
08:a4:35:a9:07:10:3a:db:fe:db:5c:53:d3:28:55:
36:70:55:af:bf:72:19:f7:1e:b4:77:11:7f:23:05:
18:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:B9:18:E8:76:D9:BB:39:C4:7E:69:D1:3C:D7:3F:0F:79:2C:01:04
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/UrkY6HbZuznEfmnRPNc_D3ksAQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:d22::/48
2a06:a005:150a::/48
2a06:a005:1550::/44
2a06:a005:2250::-2a06:a005:226f:ffff:ffff:ffff:ffff:ffff
2a07:54c2:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
10:8b:6f:6a:5d:ac:99:99:14:ca:e8:f3:1f:4e:63:dd:6a:e3:
95:95:19:a0:55:f8:7b:49:65:8e:59:a8:8c:ba:4b:f9:ce:ce:
7a:df:df:30:fa:fd:41:26:a0:c0:69:8b:61:6b:a3:e6:3a:6b:
57:8e:6f:0d:2a:8a:1f:2a:b4:61:64:6e:5d:36:f7:5b:61:a6:
e1:42:c9:80:82:eb:bc:de:24:9c:bf:91:8f:2c:88:05:df:d3:
67:71:c9:02:0c:a4:4c:3e:5d:db:a9:1e:54:16:ba:9e:e8:84:
55:46:70:02:c5:11:4e:06:19:dc:7d:07:9f:aa:de:8c:40:e5:
5d:37:70:69:70:48:c4:3a:d8:2c:c6:01:ac:34:8b:b8:a8:b3:
23:ae:5c:89:11:6b:c5:a9:f5:d8:79:23:ef:78:f8:53:e9:1f:
10:7a:c3:39:04:3e:8b:cb:a5:9e:b9:c8:3b:a9:5b:8d:59:9c:
45:70:7f:55:32:9c:ae:53:29:44:cb:fa:d5:09:b4:a2:db:78:
d7:d1:b7:63:9e:65:80:b3:c9:49:27:e7:86:c9:1c:a4:1f:fb:
5a:23:1d:40:3f:e4:85:e3:a3:de:f3:ab:e1:43:93:f8:07:02:
16:bd:15:d9:f0:68:30:04:90:1b:46:91:0c:a8:1a:aa:b8:0d:
fc:ad:02:d3
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgISAYQ8lB8X77a7BQuQ1CpYUYFbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIxMTAzMDgyMDUxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MmI5MThlODc2ZDliYjM5YzQ3ZTY5ZDEzY2Q3M2YwZjc5MmMwMTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJo5v4i6qxNAp8YhmIijKMBdjUML
1N1QV+T7whBNrFYRoIT/QKxT1sWVCd2s55CiL4FUsybbOalQnRLZeL+WjOnl3S96
/yUbaRi0fYoB/HyV/MmcuIcfrlYZRRi+HVl+Adxdh5CD5Cl6+Fl/WXzLiQCQbWSg
5d6mQYqWSsb3JjdbkPXkjmbe+uSkOD4b7jkA+fkE8lxLv2NH5RQaM+ka7pUMP6k7
QC4xg/omTZgvnkdWs7fCkrPj5Ika6G/mqFrOu5I7LrE1g75r2mp6ywQMEZKJVBwZ
rEjsfmuiOZGshPkIpDWpBxA62/7bXFPTKFU2cFWvv3IZ9x60dxF/IwUYwwIDAQAB
o4ICOzCCAjcwHQYDVR0OBBYEFFK5GOh22bs5xH5p0TzXPw95LAEEMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvVXJrWTZIYlp1em5FZm1uUlBOY19EM2tzQVFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAAjA4AwcAKgagBQ0i
AwcAKgagBRUKAwcEKgagBRVQMBIDBwQqBqAFIlADBwQqBqAFImADBwAqB1TCsAsw
DQYJKoZIhvcNAQELBQADggEBABCLb2pdrJmZFMro8x9OY91q45WVGaBV+HtJZY5Z
qIy6S/nOznrf3zD6/UEmoMBpi2Fro+Y6a1eObw0qih8qtGFkbl0291thpuFCyYCC
67zeJJy/kY8siAXf02dxyQIMpEw+XdupHlQWup7ohFVGcALFEU4GGdx9B5+q3oxA
5V03cGlwSMQ62CzGAaw0i7iosyOuXIkRa8Wp9dh5I+94+FPpHxB6wzkEPovLpZ65
yDupW41ZnEVwf1UynK5TKUTL+tUJtKLbeNfRt2OeZYCzyUkn54bJHKQf+1ojHUA/
5IXjo97zq+FDk/gHAha9FdnwaDAEkBtGkQyoGqq4DfytAtM=
-----END CERTIFICATE-----
Generated at Tue Apr 22 03:20:01 2025 by rpki-client