Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/_w9Aph5Yz7tceqVt0Lv7HCcgWKk.roa
File: _w9Aph5Yz7tceqVt0Lv7HCcgWKk.roa (raw, json)
Hash identifier: xsahLXgH1gI5G40RSRPOgDchGOy/MHrUcPRsOLK3eHs=
Subject key identifier: FF:0F:40:A6:1E:58:CF:BB:5C:7A:A5:6D:D0:BB:FB:1C:27:20:58:A9
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0184E2D190AD13B64657BA99B6F33FA76B79
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/_w9Aph5Yz7tceqVt0Lv7HCcgWKk.roa
Signing time: Mon 05 Dec 2022 15:04:55 +0000
ROA not before: Mon 05 Dec 2022 15:04:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200866
IP address blocks: 2a0a:6040:d200::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e2:d1:90:ad:13:b6:46:57:ba:99:b6:f3:3f:a7:6b:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Dec 5 15:04:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ff0f40a61e58cfbb5c7aa56dd0bbfb1c272058a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:92:a9:0b:c5:18:ba:a8:c7:70:d5:1c:f6:7c:
17:73:eb:ec:18:eb:dc:f7:af:2d:ba:67:e9:f0:d6:
0c:7d:ba:26:a2:ce:6e:7b:04:3d:49:d7:9d:a2:26:
ff:df:f3:b5:e8:de:4c:4b:17:be:5f:bd:03:9a:d9:
f0:13:d6:84:34:e6:fa:8f:05:a2:00:3f:87:80:6e:
9b:d2:d4:b3:9b:f0:6d:24:bc:06:83:79:44:ac:ae:
e5:f3:ad:71:e6:0e:15:35:cb:61:e7:8c:e6:da:83:
d2:8f:dc:7d:ee:26:b4:6c:c2:ea:9b:3e:03:4b:c7:
da:6e:24:15:93:e6:18:3a:5a:d4:b9:b3:fe:0d:04:
d6:e1:16:f9:d3:5d:fb:01:2c:1b:23:d7:70:32:32:
57:41:ff:05:d2:f2:61:ef:e8:10:ca:c6:43:09:ee:
a0:fc:67:32:77:39:f2:fe:e0:ae:e8:b9:f0:24:8f:
b4:e1:1b:73:ca:56:fe:c3:fe:02:69:2e:c6:b5:11:
6c:96:2f:66:f8:00:4c:e4:2b:c6:fa:11:9e:b1:6e:
9f:10:00:18:e5:1e:f9:6a:c7:d5:c7:d9:b2:0e:29:
10:f7:e9:ed:c6:ab:68:b1:26:b9:fd:ed:df:62:f9:
b9:8a:45:2b:41:d7:ca:7e:94:19:09:90:62:25:8f:
8f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:0F:40:A6:1E:58:CF:BB:5C:7A:A5:6D:D0:BB:FB:1C:27:20:58:A9
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/_w9Aph5Yz7tceqVt0Lv7HCcgWKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:d200::/40
Signature Algorithm: sha256WithRSAEncryption
11:e4:91:65:8e:58:91:90:3e:b0:9a:34:63:0e:f0:b6:7c:c5:
36:2d:1c:5e:1d:ad:a3:f6:de:16:8a:1e:a3:5f:7b:9a:1c:53:
2f:92:f6:0f:49:9a:a5:54:72:5a:f5:ee:a9:71:f2:37:7e:42:
e4:71:ce:87:98:f9:d6:1a:3b:57:d9:e6:c9:dd:0d:ee:38:65:
23:20:91:a0:9b:b8:81:a9:b1:28:ae:e0:73:36:26:40:b2:01:
f9:54:1b:1f:07:3b:a8:f6:a4:b0:2f:9a:2e:96:05:a9:ea:ae:
7f:f7:7c:5a:a1:4b:6a:81:ba:88:3f:90:14:44:f8:06:0c:43:
4d:f3:18:a4:f1:22:c8:9e:4c:9b:3f:e7:d8:a8:83:36:d2:71:
83:be:d1:f7:be:9a:ce:0e:cc:21:c8:27:83:66:ae:b9:ea:1c:
28:09:0f:57:ac:43:1c:a2:f7:86:7b:2e:e9:36:df:82:84:56:
a7:1d:8f:88:79:9e:5a:75:ca:88:fa:c4:4e:da:fa:7f:bd:a1:
4e:a3:bc:87:a3:2e:e6:4c:72:a5:22:8a:de:a7:01:bf:a0:78:
54:6c:2a:04:5b:65:21:8c:e7:4f:dc:2b:fb:4b:24:ef:7b:50:
0a:49:23:57:97:d0:69:d4:c1:0b:ee:70:ed:6c:0c:c6:8d:1c:
5d:d4:11:ba
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYTi0ZCtE7ZGV7qZtvM/p2t5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIxMjA1MTUwNDU1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZjBmNDBhNjFlNThjZmJiNWM3YWE1NmRkMGJiZmIxYzI3MjA1OGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZKpC8UYuqjHcNUc9nwXc+vsGOvc
968tumfp8NYMfbomos5uewQ9Sdedoib/3/O16N5MSxe+X70DmtnwE9aENOb6jwWi
AD+HgG6b0tSzm/BtJLwGg3lErK7l861x5g4VNcth54zm2oPSj9x97ia0bMLqmz4D
S8fabiQVk+YYOlrUubP+DQTW4Rb50137ASwbI9dwMjJXQf8F0vJh7+gQysZDCe6g
/Gcydzny/uCu6LnwJI+04Rtzylb+w/4CaS7GtRFsli9m+ABM5CvG+hGesW6fEAAY
5R75asfVx9myDikQ9+ntxqtosSa5/e3fYvm5ikUrQdfKfpQZCZBiJY+PPQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFP8PQKYeWM+7XHqlbdC7+xwnIFipMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvX3c5QXBoNVl6N3RjZXFWdDBMdjdIQ2NnV0trLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQNIw
DQYJKoZIhvcNAQELBQADggEBABHkkWWOWJGQPrCaNGMO8LZ8xTYtHF4draP23haK
HqNfe5ocUy+S9g9JmqVUclr17qlx8jd+QuRxzoeY+dYaO1fZ5sndDe44ZSMgkaCb
uIGpsSiu4HM2JkCyAflUGx8HO6j2pLAvmi6WBanqrn/3fFqhS2qBuog/kBRE+AYM
Q03zGKTxIsieTJs/59iogzbScYO+0fe+ms4OzCHIJ4NmrrnqHCgJD1esQxyi94Z7
Luk234KEVqcdj4h5nlp1yoj6xE7a+n+9oU6jvIejLuZMcqUiit6nAb+geFRsKgRb
ZSGM50/cK/tLJO97UApJI1eX0GnUwQvucO1sDMaNHF3UEbo=
-----END CERTIFICATE-----
Generated at Tue Apr 22 22:42:59 2025 by rpki-client