Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/jeaZgyojAaKQE3s-Mv7XAD2fdvQ.roa
File: jeaZgyojAaKQE3s-Mv7XAD2fdvQ.roa (raw, json)
Hash identifier: ho5n9E/n495HVV6tu6l77ojWSlgwggch5gfRveu4vAg=
Subject key identifier: 8D:E6:99:83:2A:23:01:A2:90:13:7B:3E:32:FE:D7:00:3D:9F:76:F4
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 15E9573C
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/jeaZgyojAaKQE3s-Mv7XAD2fdvQ.roa
Signing time: Tue 04 Jan 2022 18:32:34 +0000
ROA not before: Tue 04 Jan 2022 18:32:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 5555
IP address blocks: 2a06:a005:10::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 367613756 (0x15e9573c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jan 4 18:32:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8de699832a2301a290137b3e32fed7003d9f76f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:cb:43:3d:3f:4d:fa:0b:af:04:20:7a:84:69:
3f:e4:05:20:e6:aa:df:0c:35:2e:c1:25:81:ec:19:
ee:9e:e1:f3:b4:ad:18:86:0d:ad:4c:b3:46:35:af:
8f:ac:42:8d:d5:48:78:c1:fe:cd:fc:b3:a9:b3:19:
c2:78:e9:f6:cf:f0:03:18:3f:75:59:ba:f2:20:eb:
10:33:ed:4a:57:d1:57:25:b6:fb:11:41:80:ad:45:
e3:36:d9:56:81:4d:5a:a3:57:32:3f:06:83:2d:e0:
b3:c5:18:a9:0f:a4:01:e6:a6:3e:f6:7a:01:a7:fa:
33:5c:60:88:60:1c:88:3f:81:8f:bf:69:41:cc:73:
f8:ca:ab:30:ef:21:54:72:d7:95:f7:ae:9e:dc:36:
f8:71:a3:40:02:9b:a4:32:51:b8:14:73:e8:52:41:
9a:79:e8:10:93:a0:ee:12:56:94:d0:97:23:25:5e:
32:4a:7b:ec:f0:1b:3a:15:7f:5c:37:41:aa:b0:71:
f9:1a:45:78:b8:de:aa:55:cf:dd:1c:fb:58:7a:7b:
ca:04:5a:de:c7:ed:65:08:a9:8c:7a:ce:ee:5d:35:
0e:d7:f2:bb:94:90:3d:08:f6:22:e1:b6:ea:b6:79:
83:82:7c:b5:24:f1:77:24:61:df:35:83:44:69:bb:
94:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:E6:99:83:2A:23:01:A2:90:13:7B:3E:32:FE:D7:00:3D:9F:76:F4
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/jeaZgyojAaKQE3s-Mv7XAD2fdvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:10::/44
Signature Algorithm: sha256WithRSAEncryption
36:ea:aa:00:85:47:f1:cb:31:09:01:ee:a5:9f:6e:2b:ff:18:
29:35:cb:96:18:48:28:df:45:a9:94:1e:6a:44:85:c7:c8:9d:
9a:b4:4b:19:f3:31:98:91:c6:e9:cf:dc:4f:e1:08:0e:82:3c:
78:d5:22:e9:35:94:ed:af:cd:d7:df:71:63:f2:d2:e2:40:50:
b0:39:91:36:3c:5e:e5:6d:f0:50:8d:af:0c:06:f4:a1:27:5d:
4c:30:a4:eb:38:55:34:5e:18:54:9f:bf:7d:6e:74:7d:57:89:
f6:ab:a3:47:50:8c:ee:40:33:6d:44:32:2b:e8:65:91:0c:3f:
a0:b7:d8:90:3f:7e:29:6a:c4:76:ef:4d:02:53:9c:ac:55:6c:
30:d3:fa:36:43:15:54:73:e7:0c:5a:da:98:e2:72:a1:a1:ee:
8f:bb:9c:2e:d4:35:95:e9:a2:81:15:fd:31:3e:64:9d:c3:1a:
d1:7a:18:9c:3b:e0:24:3a:53:d0:64:04:1f:5b:7a:df:e7:55:
fe:c8:23:c4:69:4a:96:e3:ec:5b:da:39:53:6b:c6:d8:af:0a:
20:e4:87:58:a4:f0:eb:2d:13:a6:41:17:b9:dc:ea:e6:61:fd:
62:b2:9b:c3:f6:ea:ac:01:7c:a9:8c:8b:62:9e:f5:83:f9:e3:
97:c2:ed:61
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEFelXPDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NDkxNDU0MWZkMWI5NWU3YzBhZmM4NzVmYmVmNzg3OTRmNTUzODZiMB4XDTIyMDEw
NDE4MzIzNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOGRlNjk5ODMyYTIz
MDFhMjkwMTM3YjNlMzJmZWQ3MDAzZDlmNzZmNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAO7LQz0/TfoLrwQgeoRpP+QFIOaq3ww1LsElgewZ7p7h87St
GIYNrUyzRjWvj6xCjdVIeMH+zfyzqbMZwnjp9s/wAxg/dVm68iDrEDPtSlfRVyW2
+xFBgK1F4zbZVoFNWqNXMj8Ggy3gs8UYqQ+kAeamPvZ6Aaf6M1xgiGAciD+Bj79p
Qcxz+MqrMO8hVHLXlfeuntw2+HGjQAKbpDJRuBRz6FJBmnnoEJOg7hJWlNCXIyVe
Mkp77PAbOhV/XDdBqrBx+RpFeLjeqlXP3Rz7WHp7ygRa3sftZQipjHrO7l01Dtfy
u5SQPQj2IuG26rZ5g4J8tSTxdyRh3zWDRGm7lAMCAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBSN5pmDKiMBopATez4y/tcAPZ929DAfBgNVHSMEGDAWgBRUkUVB/RuV58Cv
yHX773h5T1U4azAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ZKRkZRZjBibGVmQXI4aDEtLTk0ZVU5Vk9Hcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGEvNDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8x
L2plYVpneW9qQWFLUUUzcy1NdjdYQUQyZmR2US5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEv
NDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8xL1ZKRkZRZjBibGVm
QXI4aDEtLTk0ZVU5Vk9Hcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoGoAUAEDANBgkqhkiG9w0BAQsF
AAOCAQEANuqqAIVH8csxCQHupZ9uK/8YKTXLlhhIKN9FqZQeakSFx8idmrRLGfMx
mJHG6c/cT+EIDoI8eNUi6TWU7a/N199xY/LS4kBQsDmRNjxe5W3wUI2vDAb0oSdd
TDCk6zhVNF4YVJ+/fW50fVeJ9qujR1CM7kAzbUQyK+hlkQw/oLfYkD9+KWrEdu9N
AlOcrFVsMNP6NkMVVHPnDFramOJyoaHuj7ucLtQ1lemigRX9MT5kncMa0XoYnDvg
JDpT0GQEH1t63+dV/sgjxGlKluPsW9o5U2vG2K8KIOSHWKTw6y0TpkEXudzq5mH9
YrKbw/bqrAF8qYyLYp71g/njl8LtYQ==
-----END CERTIFICATE-----
Generated at Tue Apr 22 02:10:15 2025 by rpki-client