Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/YEXzhJGzHlTL4Gj1u4XvY4BiiCU.roa
File: YEXzhJGzHlTL4Gj1u4XvY4BiiCU.roa (raw, json)
Hash identifier: SrXZIxG+2wg+gnnTA0aUIqNaZmDrU129uQSp6mcjexs=
Subject key identifier: 60:45:F3:84:91:B3:1E:54:CB:E0:68:F5:BB:85:EF:63:80:62:88:25
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0182458F1F94E592843AA3E28A47AA59CE1B
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/YEXzhJGzHlTL4Gj1u4XvY4BiiCU.roa
Signing time: Thu 28 Jul 2022 16:06:23 +0000
ROA not before: Thu 28 Jul 2022 16:06:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203619
IP address blocks: 2a06:a005:1410::/44 maxlen: 48
2a06:a005:1430::/44 maxlen: 48
2a06:a005:1440::/44 maxlen: 48
2a06:a005:1420::/44 maxlen: 48
2a06:a005:1450::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:45:8f:1f:94:e5:92:84:3a:a3:e2:8a:47:aa:59:ce:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jul 28 16:06:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6045f38491b31e54cbe068f5bb85ef6380628825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ab:c7:77:c6:8d:01:09:c0:3b:95:a6:f9:b4:
c5:f2:50:74:ef:cb:65:7a:3a:6c:92:c3:62:44:8b:
ff:a4:10:e2:45:a8:fc:cb:9f:8e:29:82:c4:10:46:
8a:5d:97:a6:11:a4:b9:d2:fa:83:95:e7:60:c4:bc:
d7:f0:d7:4c:8c:3d:fa:c5:bb:8e:9e:d4:08:1d:cb:
f1:7e:bc:ac:3d:4e:b1:61:48:bc:e4:1f:9c:0b:aa:
d3:d0:83:0b:9e:7b:03:ab:73:3a:48:3f:56:33:4e:
d4:91:f9:1f:83:30:5b:7d:b3:7e:14:08:d5:b1:51:
68:1f:62:d5:b9:2a:6d:24:0a:e4:7f:15:44:71:dd:
5b:37:f3:02:df:1e:ca:d5:bb:a9:07:05:03:7e:f3:
dd:c8:53:12:0c:45:b5:25:ca:19:27:5a:d9:3f:ca:
54:d7:91:59:5d:a8:03:6b:c6:7f:af:3c:e9:e4:91:
dd:a6:be:5e:99:a5:27:27:fc:b3:4d:4a:93:74:8d:
75:cc:5d:a8:10:fd:b7:40:a1:86:d3:93:50:0a:ba:
80:48:50:7d:d7:56:70:e2:7b:6a:16:a9:c9:e9:f4:
bb:1e:0c:8f:73:f0:d7:9c:ab:7f:18:c6:d7:e7:56:
f1:e4:12:e6:d0:35:59:e4:7c:99:a8:20:5f:6e:8e:
27:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:45:F3:84:91:B3:1E:54:CB:E0:68:F5:BB:85:EF:63:80:62:88:25
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/YEXzhJGzHlTL4Gj1u4XvY4BiiCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1410::-2a06:a005:145f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
89:1d:94:48:05:f7:31:8e:8d:42:eb:90:90:a1:08:e3:bc:75:
2b:7a:6e:95:db:81:30:11:e1:98:cb:be:f9:c4:5f:03:f5:0d:
ba:4c:e5:9d:66:f9:a9:62:7a:8a:6a:8c:ba:12:6b:e1:0f:aa:
b8:01:eb:16:e1:ac:12:1e:38:df:f6:0c:65:8a:24:59:d9:8b:
7b:af:a9:97:a8:c0:f7:4a:b0:68:b9:2b:54:46:99:c5:84:4d:
2b:33:6d:53:b9:e0:3a:93:11:16:ae:25:d2:a8:e5:83:b3:85:
a8:94:f6:49:e5:0e:15:4a:0b:86:0b:aa:e2:7b:98:5f:6e:ea:
71:ad:1f:bf:17:e2:9b:d0:b4:1f:49:c7:43:20:4a:dc:c1:6b:
e2:0b:5d:c4:01:b5:90:69:08:02:da:c1:5c:c5:00:b8:a8:ea:
24:10:48:52:1b:6c:55:92:d3:ef:fe:2a:e9:9f:26:19:ce:87:
9a:d2:4b:a9:0e:c5:6a:20:ff:d3:f6:9d:ce:7d:85:a9:27:57:
cb:4a:6a:31:4d:f8:c2:88:5b:c9:54:ff:c8:f8:d7:eb:f2:aa:
8d:68:86:62:95:83:c6:fb:2b:f5:59:5a:46:0c:d4:1c:38:cd:
78:e2:83:bc:01:85:1e:10:35:02:71:3a:75:5e:eb:90:95:93:
3c:42:20:10
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYJFjx+U5ZKEOqPiikeqWc4bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIwNzI4MTYwNjIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MDQ1ZjM4NDkxYjMxZTU0Y2JlMDY4ZjViYjg1ZWY2MzgwNjI4ODI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqvHd8aNAQnAO5Wm+bTF8lB078tl
ejpsksNiRIv/pBDiRaj8y5+OKYLEEEaKXZemEaS50vqDledgxLzX8NdMjD36xbuO
ntQIHcvxfrysPU6xYUi85B+cC6rT0IMLnnsDq3M6SD9WM07UkfkfgzBbfbN+FAjV
sVFoH2LVuSptJArkfxVEcd1bN/MC3x7K1bupBwUDfvPdyFMSDEW1JcoZJ1rZP8pU
15FZXagDa8Z/rzzp5JHdpr5emaUnJ/yzTUqTdI11zF2oEP23QKGG05NQCrqASFB9
11Zw4ntqFqnJ6fS7HgyPc/DXnKt/GMbX51bx5BLm0DVZ5HyZqCBfbo4nhwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFGBF84SRsx5Uy+Bo9buF72OAYoglMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvWUVYemhKR3pIbFRMNEdqMXU0WHZZNEJpaUNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwQqBqAF
FBADBwUqBqAFFEAwDQYJKoZIhvcNAQELBQADggEBAIkdlEgF9zGOjULrkJChCOO8
dSt6bpXbgTAR4ZjLvvnEXwP1DbpM5Z1m+alieopqjLoSa+EPqrgB6xbhrBIeON/2
DGWKJFnZi3uvqZeowPdKsGi5K1RGmcWETSszbVO54DqTERauJdKo5YOzhaiU9knl
DhVKC4YLquJ7mF9u6nGtH78X4pvQtB9Jx0MgStzBa+ILXcQBtZBpCALawVzFALio
6iQQSFIbbFWS0+/+KumfJhnOh5rSS6kOxWog/9P2nc59haknV8tKajFN+MKIW8lU
/8j41+vyqo1ohmKVg8b7K/VZWkYM1Bw4zXjig7wBhR4QNQJxOnVe65CVkzxCIBA=
-----END CERTIFICATE-----
Generated at Wed Apr 23 06:43:03 2025 by rpki-client