Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Wi7OmNe896TI6z-G2IerOmsVu60.roa
File: Wi7OmNe896TI6z-G2IerOmsVu60.roa (raw, json)
Hash identifier: c9dcOQ2I7ocEvSaaKsNmVS7AI/k2E13Nmid8FeUE24o=
Subject key identifier: 5A:2E:CE:98:D7:BC:F7:A4:C8:EB:3F:86:D8:87:AB:3A:6B:15:BB:AD
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01826B9418C486D0D6E928637D6FE465E027
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Wi7OmNe896TI6z-G2IerOmsVu60.roa
Signing time: Fri 05 Aug 2022 01:17:23 +0000
ROA not before: Fri 05 Aug 2022 01:17:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203453
IP address blocks: 2a06:a005:5a2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:6b:94:18:c4:86:d0:d6:e9:28:63:7d:6f:e4:65:e0:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Aug 5 01:17:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5a2ece98d7bcf7a4c8eb3f86d887ab3a6b15bbad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:01:64:77:41:73:d1:65:ed:65:24:16:1f:88:
73:ce:84:d5:65:65:e7:88:3a:fb:de:72:ce:92:d4:
48:89:d6:00:f4:27:fc:b7:c0:f6:2f:e0:4d:b2:5c:
99:db:a4:a9:e6:48:79:72:88:e3:b9:00:0c:b8:1b:
0b:b5:91:ef:7d:cb:d5:6c:04:40:04:67:15:64:00:
07:31:d7:98:20:85:aa:55:41:86:aa:9c:3b:84:10:
8a:99:00:eb:53:75:dd:b0:b2:ab:8f:98:06:4e:38:
47:8c:16:7c:f9:1a:52:e0:7b:88:19:5f:72:73:02:
f6:ee:d7:2f:08:7c:ad:1f:34:3f:28:06:c0:7a:6c:
36:b0:40:28:4a:de:9d:0a:7f:74:de:96:19:0e:6d:
d2:8f:1b:13:d1:75:52:ae:05:29:e2:f3:7f:59:b0:
cf:e4:09:da:5e:c3:e7:cc:5d:ab:37:fc:6c:94:da:
5d:b7:fe:3d:cf:1e:d4:6b:09:c1:c3:b7:3c:c8:0a:
3f:39:7d:bf:83:82:67:82:45:8e:d1:d3:f9:57:93:
57:48:03:e4:4a:21:5c:f3:41:f6:a6:9f:76:cd:51:
ee:1b:18:85:a3:84:be:2d:65:af:6d:0d:1f:28:d2:
f8:31:58:48:20:30:61:0c:06:77:8c:a5:02:72:50:
e5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:2E:CE:98:D7:BC:F7:A4:C8:EB:3F:86:D8:87:AB:3A:6B:15:BB:AD
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Wi7OmNe896TI6z-G2IerOmsVu60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5a2::/48
Signature Algorithm: sha256WithRSAEncryption
0a:88:18:55:8d:f8:39:f5:a6:13:9f:8e:c4:cd:f9:3a:54:8c:
0b:5c:34:02:19:03:3b:48:43:1e:5e:6a:e5:23:2d:40:f6:30:
98:c2:04:26:4e:2a:65:bc:8f:9e:24:47:1e:c8:2b:ea:a7:c1:
d5:25:ee:8c:57:c5:3a:c9:d8:7c:83:53:0b:99:5a:e0:bc:b8:
09:3e:23:57:7b:15:98:3a:50:8f:06:65:08:eb:ec:69:38:bd:
5c:bd:03:b4:12:7f:ef:81:a5:bf:80:c4:0f:26:40:96:51:68:
00:77:b3:c1:8c:32:b5:3c:4d:2e:b1:fd:92:f2:f3:b1:f2:c7:
c9:22:b8:2d:20:bb:2d:ae:db:a6:85:a6:15:10:b8:dd:bd:91:
21:7e:9d:4e:c5:6a:17:25:08:50:5a:27:86:79:32:a6:8b:71:
c7:13:85:40:57:13:69:35:6c:ea:69:fc:b6:72:d0:40:cf:cd:
42:73:d0:30:70:c5:b1:5d:a1:2f:60:ef:65:60:42:2c:7c:0a:
b9:e7:4d:10:63:50:2b:9f:67:3f:8f:27:2a:11:b0:ec:71:b9:
97:6d:35:57:48:c3:38:2a:a2:f6:7f:d7:f6:76:b7:8b:6a:32:
9e:08:b9:17:64:25:ff:21:22:e4:70:27:ba:b1:14:f6:47:8c:
f6:06:3d:01
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYJrlBjEhtDW6ShjfW/kZeAnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIwODA1MDExNzIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YTJlY2U5OGQ3YmNmN2E0YzhlYjNmODZkODg3YWIzYTZiMTViYmFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgFkd0Fz0WXtZSQWH4hzzoTVZWXn
iDr73nLOktRIidYA9Cf8t8D2L+BNslyZ26Sp5kh5cojjuQAMuBsLtZHvfcvVbARA
BGcVZAAHMdeYIIWqVUGGqpw7hBCKmQDrU3XdsLKrj5gGTjhHjBZ8+RpS4HuIGV9y
cwL27tcvCHytHzQ/KAbAemw2sEAoSt6dCn903pYZDm3SjxsT0XVSrgUp4vN/WbDP
5AnaXsPnzF2rN/xslNpdt/49zx7UawnBw7c8yAo/OX2/g4JngkWO0dP5V5NXSAPk
SiFc80H2pp92zVHuGxiFo4S+LWWvbQ0fKNL4MVhIIDBhDAZ3jKUCclDlLQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFFouzpjXvPekyOs/htiHqzprFbutMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvV2k3T21OZTg5NlRJNnotRzJJZXJPbXNWdTYwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgagBQWi
MA0GCSqGSIb3DQEBCwUAA4IBAQAKiBhVjfg59aYTn47Ezfk6VIwLXDQCGQM7SEMe
XmrlIy1A9jCYwgQmTiplvI+eJEceyCvqp8HVJe6MV8U6ydh8g1MLmVrgvLgJPiNX
exWYOlCPBmUI6+xpOL1cvQO0En/vgaW/gMQPJkCWUWgAd7PBjDK1PE0usf2S8vOx
8sfJIrgtILstrtumhaYVELjdvZEhfp1OxWoXJQhQWieGeTKmi3HHE4VAVxNpNWzq
afy2ctBAz81Cc9AwcMWxXaEvYO9lYEIsfAq5500QY1Arn2c/jycqEbDscbmXbTVX
SMM4KqL2f9f2dreLajKeCLkXZCX/ISLkcCe6sRT2R4z2Bj0B
-----END CERTIFICATE-----
Generated at Fri Apr 18 10:09:35 2025 by rpki-client