Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/f9Sk2en2PpAc-2Q_QclrnOJ7aGQ.roa
File: f9Sk2en2PpAc-2Q_QclrnOJ7aGQ.roa (raw, json)
Hash identifier: Xs4gtbmQlOfItGeUfEdga7ETsj6Y4SkQD51WYNY1Omg=
Subject key identifier: 7F:D4:A4:D9:E9:F6:3E:90:1C:FB:64:3F:41:C9:6B:9C:E2:7B:68:64
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0182360AA6BCEDFD3CCAE6FFC21325248F5D
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/f9Sk2en2PpAc-2Q_QclrnOJ7aGQ.roa
Signing time: Mon 25 Jul 2022 15:47:23 +0000
ROA not before: Mon 25 Jul 2022 15:47:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208223
IP address blocks: 2a06:a005:890::/44 maxlen: 48
2a06:1287:3900::/40 maxlen: 48
2a06:a005:770::/44 maxlen: 48
2a06:a005:4de::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:36:0a:a6:bc:ed:fd:3c:ca:e6:ff:c2:13:25:24:8f:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jul 25 15:47:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7fd4a4d9e9f63e901cfb643f41c96b9ce27b6864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:66:97:c0:2c:ff:c6:5f:ee:33:e5:9d:6a:ae:
97:57:db:b9:f4:1b:8b:6c:0d:d0:b9:00:dd:88:c4:
6a:3e:83:28:53:4d:24:8b:e1:80:43:ba:bc:d8:5c:
61:f7:32:eb:27:11:04:87:0e:04:c3:63:13:e0:20:
99:51:74:31:b2:c7:32:e0:67:f5:c1:9f:64:57:ef:
9d:de:c5:68:e3:18:91:cb:06:c8:26:14:ba:a2:69:
7a:e3:a9:c7:28:32:b4:e3:ec:8c:31:e6:55:60:58:
57:f3:28:56:f4:cf:b7:02:79:82:78:a4:9a:ed:8d:
ab:1e:6f:94:48:71:52:1d:67:8b:db:cd:5b:a2:67:
60:fa:a2:34:f0:2d:5a:5a:84:42:85:ce:db:fb:dc:
4f:b5:02:d5:c7:3e:5b:f3:7f:ba:81:b9:df:9f:b0:
fc:9d:cb:cd:5f:68:2e:73:3e:ff:ea:08:9c:68:f8:
91:ae:a8:a5:78:97:59:b6:6d:57:f6:70:b8:2c:fd:
5e:7d:a0:dc:58:f2:30:cb:ea:4c:1f:fb:e0:21:30:
a4:10:00:fc:92:d4:39:e5:a7:08:49:c2:81:33:8d:
be:56:6c:b0:67:14:15:4f:5a:2c:fd:86:42:5d:4c:
09:0a:c5:be:96:f6:06:4f:11:93:29:f0:7e:9b:92:
c7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:D4:A4:D9:E9:F6:3E:90:1C:FB:64:3F:41:C9:6B:9C:E2:7B:68:64
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/f9Sk2en2PpAc-2Q_QclrnOJ7aGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1287:3900::/40
2a06:a005:4de::/48
2a06:a005:770::/44
2a06:a005:890::/44
Signature Algorithm: sha256WithRSAEncryption
37:2b:30:c5:b5:75:cd:72:2e:de:d3:f1:45:c8:4c:69:e0:67:
40:51:f5:e5:d5:5a:75:20:6c:07:1a:e1:7d:d4:c0:9e:b1:88:
6c:19:d2:a5:aa:01:a0:2f:e4:7e:f4:19:0a:a4:97:c8:67:47:
35:21:30:41:29:fb:7d:84:a4:03:fa:1f:61:c6:38:50:f7:12:
84:5f:2f:86:70:00:42:63:04:60:de:49:84:d5:c3:a9:f2:5e:
f7:a3:ec:2c:78:ff:97:24:0c:2a:05:c2:c3:fd:2e:9f:b2:8d:
4a:8b:d6:26:8e:84:93:36:3d:0e:75:78:e2:5d:9e:be:40:a1:
ba:64:ef:9f:a0:e3:c9:73:86:18:ed:a9:3e:bc:41:f8:41:4c:
3a:a2:97:f9:f9:b3:bf:0a:18:99:9d:f9:cf:56:a5:86:44:21:
a0:c8:17:2e:a4:e0:99:26:5a:c0:65:0f:46:60:d7:ec:f3:88:
2b:53:ff:5b:19:40:39:8d:35:36:30:8b:d7:1f:ca:fb:39:c4:
ba:e0:1d:a9:7e:9f:9f:6a:bb:93:90:14:3f:57:b7:e9:3f:3b:
9a:b5:82:40:59:08:52:93:29:9d:37:1e:6c:7a:da:9f:f5:d0:
c6:e1:e4:73:3c:23:0f:db:5a:c5:d5:ac:d3:0c:87:85:29:5e:
c3:10:50:6d
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgISAYI2Cqa87f08yub/whMlJI9dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIwNzI1MTU0NzIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZmQ0YTRkOWU5ZjYzZTkwMWNmYjY0M2Y0MWM5NmI5Y2UyN2I2ODY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2aXwCz/xl/uM+Wdaq6XV9u59BuL
bA3QuQDdiMRqPoMoU00ki+GAQ7q82Fxh9zLrJxEEhw4Ew2MT4CCZUXQxsscy4Gf1
wZ9kV++d3sVo4xiRywbIJhS6oml646nHKDK04+yMMeZVYFhX8yhW9M+3AnmCeKSa
7Y2rHm+USHFSHWeL281bomdg+qI08C1aWoRChc7b+9xPtQLVxz5b83+6gbnfn7D8
ncvNX2gucz7/6gicaPiRrqileJdZtm1X9nC4LP1efaDcWPIwy+pMH/vgITCkEAD8
ktQ55acIScKBM42+VmywZxQVT1os/YZCXUwJCsW+lvYGTxGTKfB+m5LHLQIDAQAB
o4ICJjCCAiIwHQYDVR0OBBYEFH/UpNnp9j6QHPtkP0HJa5zie2hkMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvZjlTazJlbjJQcEFjLTJRX1FjbHJuT0o3YUdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzApBAIAAjAjAwYAKgYShzkD
BwAqBqAFBN4DBwQqBqAFB3ADBwQqBqAFCJAwDQYJKoZIhvcNAQELBQADggEBADcr
MMW1dc1yLt7T8UXITGngZ0BR9eXVWnUgbAca4X3UwJ6xiGwZ0qWqAaAv5H70GQqk
l8hnRzUhMEEp+32EpAP6H2HGOFD3EoRfL4ZwAEJjBGDeSYTVw6nyXvej7Cx4/5ck
DCoFwsP9Lp+yjUqL1iaOhJM2PQ51eOJdnr5Aobpk75+g48lzhhjtqT68QfhBTDqi
l/n5s78KGJmd+c9WpYZEIaDIFy6k4JkmWsBlD0Zg1+zziCtT/1sZQDmNNTYwi9cf
yvs5xLrgHal+n59qu5OQFD9Xt+k/O5q1gkBZCFKTKZ03Hmx62p/10Mbh5HM8Iw/b
WsXVrNMMh4UpXsMQUG0=
-----END CERTIFICATE-----
Generated at Fri Apr 18 10:03:32 2025 by rpki-client