Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/V532IJLTS27bdHg2mf8gJgrgXFo.roa
File: V532IJLTS27bdHg2mf8gJgrgXFo.roa (raw, json)
Hash identifier: mv2h/SNTsr+xZ3QjeAROvImHiJMsQOCnxHYWm5RFGTg=
Subject key identifier: 57:9D:F6:20:92:D3:4B:6E:DB:74:78:36:99:FF:20:26:0A:E0:5C:5A
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01840F58770071DFD00DE727832B810A3B32
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/V532IJLTS27bdHg2mf8gJgrgXFo.roa
Signing time: Tue 25 Oct 2022 13:32:46 +0000
ROA not before: Tue 25 Oct 2022 13:32:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201938
IP address blocks: 2a06:a005:5a2::/48 maxlen: 48
2a06:a005:5a6::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:0f:58:77:00:71:df:d0:0d:e7:27:83:2b:81:0a:3b:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Oct 25 13:32:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=579df62092d34b6edb74783699ff20260ae05c5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:94:b7:87:c3:58:9b:70:64:d3:07:06:70:45:
60:c7:6f:12:9d:35:2a:f9:82:6f:fc:09:d2:2d:55:
6f:fd:0a:9d:73:55:94:0b:45:42:0c:e1:d1:e7:34:
22:65:3c:ab:f6:ee:b4:06:2e:5a:07:a6:9c:cd:d8:
57:ab:78:a7:6d:f3:20:86:eb:cc:4c:8f:c5:d4:26:
e3:10:d0:40:88:ed:a2:09:d4:07:f1:f8:7e:ac:34:
79:2b:24:8c:c5:a1:90:4e:1f:51:d6:f4:61:10:63:
3e:bf:31:ad:07:14:cb:23:ed:3d:63:24:23:c2:f2:
2b:81:d8:93:96:cf:1b:28:66:5d:f7:01:bc:ac:bc:
47:a3:88:53:71:3e:4c:55:85:74:c4:7f:eb:20:eb:
64:27:8d:4d:43:74:da:15:5b:f6:8c:48:61:e8:46:
d8:51:d7:e1:76:e3:0a:a4:b4:63:0b:2c:63:5f:7c:
53:68:a8:80:40:da:e0:6c:35:89:86:10:0c:5f:9b:
85:e7:f4:c3:bd:f6:fb:83:c0:81:22:f1:59:3f:42:
b9:e1:ad:69:2f:38:64:9b:1a:d9:2c:80:39:11:3a:
cd:74:68:01:98:0b:fb:06:0f:7b:ea:b1:0e:5d:12:
82:89:e5:1c:18:f6:b6:69:3c:32:e0:d8:3b:99:93:
8c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:9D:F6:20:92:D3:4B:6E:DB:74:78:36:99:FF:20:26:0A:E0:5C:5A
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/V532IJLTS27bdHg2mf8gJgrgXFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5a2::/48
2a06:a005:5a6::/48
Signature Algorithm: sha256WithRSAEncryption
01:5f:95:a4:eb:e6:99:7c:67:97:9e:0a:76:f2:86:94:98:70:
b3:62:e2:ee:72:e4:cf:04:22:89:2d:9f:5b:5e:a6:6a:c7:8b:
ce:b1:87:c2:93:e0:5b:49:71:ee:23:ab:71:24:a2:d7:2d:55:
63:07:17:d1:ea:15:c6:29:33:a7:2a:8f:a1:f1:53:80:8e:78:
d3:19:44:dc:0b:2c:43:34:ab:df:dd:60:5f:1e:09:65:97:50:
49:84:71:ed:c3:84:36:a2:4d:e4:60:13:6f:a4:91:4e:09:9c:
9f:31:75:9f:6e:3e:80:43:17:33:a8:ba:56:aa:93:3e:bc:9a:
ab:8e:54:c0:7f:56:df:27:71:37:19:d3:3c:11:4f:d4:04:78:
d3:cf:80:86:80:c5:cf:ca:cb:04:2e:cb:d9:ca:6a:50:cd:2e:
8c:a6:7d:25:39:2f:0e:c6:89:81:d6:7b:23:aa:01:ab:33:5a:
52:cf:0c:fa:65:f1:8c:77:a9:c5:55:17:98:89:cd:f3:c6:f2:
da:18:57:f4:1a:f0:54:cf:82:f7:4e:46:72:66:7a:07:d0:5b:
b0:ff:ed:c8:82:66:b3:7e:30:5d:04:31:bd:1d:b1:59:14:96:
1b:8c:25:74:6f:f0:3a:46:f2:05:13:0a:0d:6d:32:42:21:d8:
93:35:94:b7
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYQPWHcAcd/QDecngyuBCjsyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIxMDI1MTMzMjQ2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NzlkZjYyMDkyZDM0YjZlZGI3NDc4MzY5OWZmMjAyNjBhZTA1YzVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5S3h8NYm3Bk0wcGcEVgx28SnTUq
+YJv/AnSLVVv/Qqdc1WUC0VCDOHR5zQiZTyr9u60Bi5aB6aczdhXq3inbfMghuvM
TI/F1CbjENBAiO2iCdQH8fh+rDR5KySMxaGQTh9R1vRhEGM+vzGtBxTLI+09YyQj
wvIrgdiTls8bKGZd9wG8rLxHo4hTcT5MVYV0xH/rIOtkJ41NQ3TaFVv2jEhh6EbY
UdfhduMKpLRjCyxjX3xTaKiAQNrgbDWJhhAMX5uF5/TDvfb7g8CBIvFZP0K54a1p
LzhkmxrZLIA5ETrNdGgBmAv7Bg976rEOXRKCieUcGPa2aTwy4Ng7mZOMTQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFFed9iCS00tu23R4Npn/ICYK4FxaMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvVjUzMklKTFRTMjdiZEhnMm1mOGdKZ3JnWEZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgagBQWi
AwcAKgagBQWmMA0GCSqGSIb3DQEBCwUAA4IBAQABX5Wk6+aZfGeXngp28oaUmHCz
YuLucuTPBCKJLZ9bXqZqx4vOsYfCk+BbSXHuI6txJKLXLVVjBxfR6hXGKTOnKo+h
8VOAjnjTGUTcCyxDNKvf3WBfHglll1BJhHHtw4Q2ok3kYBNvpJFOCZyfMXWfbj6A
QxczqLpWqpM+vJqrjlTAf1bfJ3E3GdM8EU/UBHjTz4CGgMXPyssELsvZympQzS6M
pn0lOS8OxomB1nsjqgGrM1pSzwz6ZfGMd6nFVReYic3zxvLaGFf0GvBUz4L3TkZy
ZnoH0Fuw/+3IgmazfjBdBDG9HbFZFJYbjCV0b/A6RvIFEwoNbTJCIdiTNZS3
-----END CERTIFICATE-----
Generated at Fri Apr 18 10:10:59 2025 by rpki-client