Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/c5fjKxp_sAwLtuP2PUodkN0JXRQ.roa
File: c5fjKxp_sAwLtuP2PUodkN0JXRQ.roa (raw, json)
Hash identifier: 6KsRVL766VeDqPMMO99inH/zbtM5GAZlBhDJlrknupc=
Subject key identifier: 73:97:E3:2B:1A:7F:B0:0C:0B:B6:E3:F6:3D:4A:1D:90:DD:09:5D:14
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0184AB4640858E55AB9F7D10CF86595FAA4A
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/c5fjKxp_sAwLtuP2PUodkN0JXRQ.roa
Signing time: Thu 24 Nov 2022 20:13:38 +0000
ROA not before: Thu 24 Nov 2022 20:13:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213239
IP address blocks: 2a06:a005:d2f::/48 maxlen: 48
2a07:54c6::/32 maxlen: 48
2a06:a005:1086::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ab:46:40:85:8e:55:ab:9f:7d:10:cf:86:59:5f:aa:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Nov 24 20:13:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7397e32b1a7fb00c0bb6e3f63d4a1d90dd095d14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:37:3d:22:97:2d:85:3b:2e:3e:97:b2:1f:0c:
6b:ac:4f:3e:8f:7b:f4:c2:f4:83:1b:5b:f5:f5:8e:
42:dd:2f:ec:80:05:47:ff:cd:37:62:c7:e3:3e:f4:
7e:5f:a6:3e:2b:ad:ea:c5:1b:f1:37:08:f7:86:9a:
1c:85:50:6d:5f:57:5e:51:04:4a:e3:5e:a2:b7:2f:
b5:c3:5c:a9:5b:bb:1f:66:0b:c2:92:86:ee:59:8a:
19:f5:f4:1d:65:7f:b5:0d:eb:05:0f:1c:fd:c3:03:
a0:f5:be:fc:74:ca:dd:0c:8b:f2:06:bc:4f:bb:d6:
f4:e1:d8:31:9f:3b:f5:b3:ce:86:95:22:c9:b9:ca:
58:68:2c:d1:ff:19:1c:3f:b5:fc:80:72:71:77:b7:
97:13:e7:b0:db:ac:77:cb:da:fc:6b:43:8f:ee:7a:
29:46:56:16:d0:04:d2:7a:4f:37:96:c9:94:3c:51:
ca:cb:76:96:4e:9f:d7:af:15:b7:e7:03:c4:ac:93:
d0:0c:d1:16:ab:97:55:93:ea:a0:e4:05:a1:09:ba:
29:be:e8:68:a0:a8:fb:68:d2:eb:6f:72:ac:c1:52:
db:4c:e7:0f:67:27:5e:72:81:6f:4e:71:ee:b5:3d:
d1:7f:21:44:e4:0a:1e:74:98:f8:92:9f:23:d7:ce:
ca:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:97:E3:2B:1A:7F:B0:0C:0B:B6:E3:F6:3D:4A:1D:90:DD:09:5D:14
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/c5fjKxp_sAwLtuP2PUodkN0JXRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:d2f::/48
2a06:a005:1086::/48
2a07:54c6::/32
Signature Algorithm: sha256WithRSAEncryption
4d:db:bf:a0:6f:86:42:3c:b8:b3:a3:5e:0f:da:7d:d6:6e:59:
e2:c5:40:46:5d:17:9a:05:46:cd:81:02:ee:a4:ce:06:2d:f3:
b5:8e:81:c6:9a:95:0e:67:0c:de:ae:94:71:ae:a9:bc:78:d5:
fe:8d:4a:a3:9a:0d:b7:29:fc:a1:84:b2:e5:74:94:49:fd:c4:
a7:45:1b:bc:f2:39:2a:50:02:c4:fd:a6:d1:1b:94:13:be:e8:
ab:ca:42:59:bb:8c:e3:dc:d1:1c:f3:ba:63:90:28:55:d2:da:
f8:2f:0b:95:90:d8:b8:9a:ef:66:d9:ea:00:6c:45:5c:52:dc:
da:e9:b6:d0:01:7f:21:59:c3:f7:04:b8:fa:50:0d:31:d4:b3:
4a:ab:c7:73:e2:9a:67:de:68:98:3f:d9:06:be:b7:d8:d4:e2:
ee:b2:62:e2:34:50:d5:39:eb:b5:a1:97:47:e3:64:60:a8:bc:
9f:7f:fc:85:46:e2:63:67:e1:6c:6f:07:e7:fc:2a:fb:c5:02:
c9:19:18:74:c5:57:b7:d6:06:22:06:c6:48:d5:23:3b:83:31:
7e:ff:4c:03:a9:d2:fe:d4:79:1f:b9:f6:2d:dc:40:5e:36:fc:
82:78:61:76:9c:b6:dd:fe:df:b0:f5:0a:bf:95:5a:49:c2:e0:
ba:7b:8f:8f
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgISAYSrRkCFjlWrn30Qz4ZZX6pKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIxMTI0MjAxMzM4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Mzk3ZTMyYjFhN2ZiMDBjMGJiNmUzZjYzZDRhMWQ5MGRkMDk1ZDE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTc9IpcthTsuPpeyHwxrrE8+j3v0
wvSDG1v19Y5C3S/sgAVH/803YsfjPvR+X6Y+K63qxRvxNwj3hpochVBtX1deUQRK
416ity+1w1ypW7sfZgvCkobuWYoZ9fQdZX+1DesFDxz9wwOg9b78dMrdDIvyBrxP
u9b04dgxnzv1s86GlSLJucpYaCzR/xkcP7X8gHJxd7eXE+ew26x3y9r8a0OP7nop
RlYW0ATSek83lsmUPFHKy3aWTp/XrxW35wPErJPQDNEWq5dVk+qg5AWhCbopvuho
oKj7aNLrb3KswVLbTOcPZydecoFvTnHutT3RfyFE5AoedJj4kp8j187KzwIDAQAB
o4ICHDCCAhgwHQYDVR0OBBYEFHOX4ysaf7AMC7bj9j1KHZDdCV0UMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvYzVmakt4cF9zQXdMdHVQMlBVb2RrTjBKWFJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDIGCCsGAQUFBwEHAQH/BCMwITAfBAIAAjAZAwcAKgagBQ0v
AwcAKgagBRCGAwUAKgdUxjANBgkqhkiG9w0BAQsFAAOCAQEATdu/oG+GQjy4s6Ne
D9p91m5Z4sVARl0XmgVGzYEC7qTOBi3ztY6BxpqVDmcM3q6Uca6pvHjV/o1Ko5oN
tyn8oYSy5XSUSf3Ep0UbvPI5KlACxP2m0RuUE77oq8pCWbuM49zRHPO6Y5AoVdLa
+C8LlZDYuJrvZtnqAGxFXFLc2um20AF/IVnD9wS4+lANMdSzSqvHc+KaZ95omD/Z
Br632NTi7rJi4jRQ1TnrtaGXR+NkYKi8n3/8hUbiY2fhbG8H5/wq+8UCyRkYdMVX
t9YGIgbGSNUjO4Mxfv9MA6nS/tR5H7n2LdxAXjb8gnhhdpy23f7fsPUKv5VaScLg
unuPjw==
-----END CERTIFICATE-----
Generated at Fri Apr 18 09:59:26 2025 by rpki-client