Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/hTCI68FBBxuQ2-Im-KEQPSY8fps.roa
File: hTCI68FBBxuQ2-Im-KEQPSY8fps.roa (raw, json)
Hash identifier: +qkm1o38G+t+4KPWrZj4rFYwYU7tZIpGoo7hXzGTGJA=
Subject key identifier: 85:30:88:EB:C1:41:07:1B:90:DB:E2:26:F8:A1:10:3D:26:3C:7E:9B
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 196BF83B
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/hTCI68FBBxuQ2-Im-KEQPSY8fps.roa
Signing time: Sat 07 May 2022 10:05:21 +0000
ROA not before: Sat 07 May 2022 10:05:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44406
IP address blocks: 2a06:a005:740::/44 maxlen: 48
2a06:a005:4e0::/44 maxlen: 48
2a06:a005:780::/44 maxlen: 48
2a06:a005:670::/44 maxlen: 48
2a06:a005:760::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 426506299 (0x196bf83b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: May 7 10:05:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=853088ebc141071b90dbe226f8a1103d263c7e9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:32:22:fb:c6:9b:c5:e9:53:19:5f:85:31:4c:
6b:d3:df:5a:8a:7a:f6:d9:53:b4:e9:02:d3:f7:d4:
41:2d:27:ea:b7:0a:b4:6c:91:d7:fe:4a:7b:8b:78:
27:e5:05:c1:1e:d2:43:2b:f6:16:68:a7:d5:3c:cf:
9b:51:83:c5:4c:09:89:b3:79:a9:88:ee:b4:20:2e:
ed:ae:57:93:1e:56:53:5f:99:22:2e:6d:34:22:9a:
a0:18:92:55:0c:be:e7:3e:86:f1:18:93:74:21:15:
0b:42:40:a4:61:73:81:9f:b1:73:dc:48:86:1b:bf:
f2:e2:72:69:2d:10:20:bc:33:9c:db:0e:79:08:73:
1a:29:6a:1f:04:e4:f4:46:29:66:5d:e5:1d:71:a9:
b8:cd:a5:ce:2f:96:82:75:13:95:b1:f9:b1:4d:6f:
d9:77:ef:cc:a3:b6:13:33:af:d5:a2:1f:a5:1d:cb:
0f:d0:15:66:9c:a4:18:6c:b0:ba:78:f4:98:67:53:
84:0b:5d:7c:8b:cd:bc:8e:23:b8:64:72:0d:b0:5c:
e9:c2:3f:d3:82:9a:81:5c:f3:0e:03:65:56:58:7e:
3b:b9:af:cb:36:48:3d:77:97:5e:f8:8f:e0:9c:a6:
9b:d2:86:6e:ad:21:2f:a2:fd:02:ff:28:53:49:ac:
36:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:30:88:EB:C1:41:07:1B:90:DB:E2:26:F8:A1:10:3D:26:3C:7E:9B
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/hTCI68FBBxuQ2-Im-KEQPSY8fps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:4e0::/44
2a06:a005:670::/44
2a06:a005:740::/44
2a06:a005:760::/44
2a06:a005:780::/44
Signature Algorithm: sha256WithRSAEncryption
35:c5:b2:42:07:09:7c:fd:74:b0:0c:74:cb:1c:a6:8d:f5:da:
91:d8:03:65:ab:14:07:3f:e3:9d:bd:11:d8:a4:fd:75:cf:16:
46:ab:07:71:83:e2:aa:74:3b:10:93:56:f2:2d:aa:a8:ab:94:
25:fe:cf:89:c4:9d:e5:b9:14:aa:9e:82:e2:2e:60:01:6f:01:
0b:f0:8c:2e:03:eb:df:50:61:f6:1c:42:46:c8:e1:03:1e:87:
28:fb:65:87:3a:7a:35:5f:5a:ea:f6:e4:ef:2a:ea:07:6d:5a:
b6:49:5f:5c:b2:c2:a1:79:9a:4f:73:3a:3b:d7:8f:71:3f:e6:
d2:85:d9:08:83:e8:2f:73:ba:0f:6c:c8:7d:f9:86:3f:a4:9b:
48:86:0a:8f:ad:3e:eb:89:7d:a3:d0:c4:25:6f:99:64:84:c2:
0e:89:41:e6:5f:44:1b:a9:f0:28:d7:94:1e:38:8e:3e:dd:c2:
22:96:42:bb:1c:d0:9e:9e:1e:03:ec:be:14:2c:b3:55:b0:8c:
19:42:12:0e:2e:1d:51:d3:5f:b0:74:7e:a4:38:30:79:38:08:
f9:14:2d:c2:8c:7e:a3:d5:b5:b8:ad:47:88:a7:27:c6:69:92:
72:dd:6f:db:bb:1e:50:22:39:bb:66:c9:40:8e:33:0f:5d:0f:
d7:92:c2:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgIEGWv4OzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NDkxNDU0MWZkMWI5NWU3YzBhZmM4NzVmYmVmNzg3OTRmNTUzODZiMB4XDTIyMDUw
NzEwMDUyMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODUzMDg4ZWJjMTQx
MDcxYjkwZGJlMjI2ZjhhMTEwM2QyNjNjN2U5YjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAM0yIvvGm8XpUxlfhTFMa9PfWop69tlTtOkC0/fUQS0n6rcK
tGyR1/5Ke4t4J+UFwR7SQyv2Fmin1TzPm1GDxUwJibN5qYjutCAu7a5Xkx5WU1+Z
Ii5tNCKaoBiSVQy+5z6G8RiTdCEVC0JApGFzgZ+xc9xIhhu/8uJyaS0QILwznNsO
eQhzGilqHwTk9EYpZl3lHXGpuM2lzi+WgnUTlbH5sU1v2XfvzKO2EzOv1aIfpR3L
D9AVZpykGGywunj0mGdThAtdfIvNvI4juGRyDbBc6cI/04KagVzzDgNlVlh+O7mv
yzZIPXeXXviP4Jymm9KGbq0hL6L9Av8oU0msNqMCAwEAAaOCAjAwggIsMB0GA1Ud
DgQWBBSFMIjrwUEHG5Db4ib4oRA9Jjx+mzAfBgNVHSMEGDAWgBRUkUVB/RuV58Cv
yHX773h5T1U4azAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ZKRkZRZjBibGVmQXI4aDEtLTk0ZVU5Vk9Hcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGEvNDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8x
L2hUQ0k2OEZCQnh1UTItSW0tS0VRUFNZOGZwcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEv
NDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8xL1ZKRkZRZjBibGVm
QXI4aDEtLTk0ZVU5Vk9Hcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBG
BggrBgEFBQcBBwEB/wQ3MDUwMwQCAAIwLQMHBCoGoAUE4AMHBCoGoAUGcAMHBCoG
oAUHQAMHBCoGoAUHYAMHBCoGoAUHgDANBgkqhkiG9w0BAQsFAAOCAQEANcWyQgcJ
fP10sAx0yxymjfXakdgDZasUBz/jnb0R2KT9dc8WRqsHcYPiqnQ7EJNW8i2qqKuU
Jf7PicSd5bkUqp6C4i5gAW8BC/CMLgPr31Bh9hxCRsjhAx6HKPtlhzp6NV9a6vbk
7yrqB21atklfXLLCoXmaT3M6O9ePcT/m0oXZCIPoL3O6D2zIffmGP6SbSIYKj60+
64l9o9DEJW+ZZITCDolB5l9EG6nwKNeUHjiOPt3CIpZCuxzQnp4eA+y+FCyzVbCM
GUISDi4dUdNfsHR+pDgweTgI+RQtwox+o9W1uK1HiKcnxmmSct1v27seUCI5u2bJ
QI4zD10P15LCtw==
-----END CERTIFICATE-----
Generated at Fri Apr 18 10:02:16 2025 by rpki-client