Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/nAPZKIMIKTN7t4yjVFuCc0w2kOg.roa
File: nAPZKIMIKTN7t4yjVFuCc0w2kOg.roa (raw, json)
Hash identifier: jLffo/wpuiVsUK8VZgq28NBK07GIoY2s/znEsN4f24M=
Subject key identifier: 9C:03:D9:28:83:08:29:33:7B:B7:8C:A3:54:5B:82:73:4C:36:90:E8
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0184971D1BE4AE52F1EF98AF898916D0303F
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/nAPZKIMIKTN7t4yjVFuCc0w2kOg.roa
Signing time: Sun 20 Nov 2022 22:16:18 +0000
ROA not before: Sun 20 Nov 2022 22:16:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212715
IP address blocks: 2a06:a005:2380::/44 maxlen: 48
2a06:a005:2390::/44 maxlen: 48
2a06:a005:23a0::/44 maxlen: 48
2a06:a005:23b0::/44 maxlen: 48
2a06:a005:2370::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:97:1d:1b:e4:ae:52:f1:ef:98:af:89:89:16:d0:30:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Nov 20 22:16:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9c03d928830829337bb78ca3545b82734c3690e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ac:cc:8f:7a:25:a9:93:a2:04:1c:36:15:b5:
0e:03:30:4e:1b:16:8e:46:0a:8c:d7:e7:63:7b:82:
97:bf:df:19:8b:37:dc:c8:c0:83:e4:e0:9f:44:6a:
f8:cf:43:14:76:b2:6c:d4:da:c8:eb:c2:57:21:2e:
4f:f9:68:7c:4c:eb:74:f7:6e:3a:40:38:56:2e:b0:
b4:a2:9f:52:75:71:9e:18:c4:8b:c3:86:61:7f:6a:
50:d1:30:54:27:d7:54:53:2f:47:65:b4:a7:07:2d:
f7:8a:5e:56:f4:f6:ec:18:65:b4:29:ed:f0:9e:46:
78:3a:a7:59:ff:8d:3d:41:39:7f:1f:73:20:56:e6:
d7:c4:ad:d8:62:ed:e3:cd:8f:e3:83:e3:bb:8f:5e:
bb:54:63:46:47:b0:58:27:ae:8f:9b:c3:98:8b:2e:
9e:6a:c9:04:6a:c8:ff:aa:f4:7e:4f:5f:62:57:85:
99:d3:db:57:29:8d:c0:a4:7c:49:13:c9:8e:e6:36:
2a:a0:20:35:e3:43:e6:95:56:10:97:2a:59:7a:66:
4e:0a:0b:e0:ea:11:dc:59:f8:ea:5f:56:d7:e9:36:
ed:9d:95:70:5d:0b:d1:eb:d4:3b:1c:88:e7:75:24:
4d:b2:a8:35:37:5f:a3:49:39:fe:97:25:bf:53:f3:
c3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:03:D9:28:83:08:29:33:7B:B7:8C:A3:54:5B:82:73:4C:36:90:E8
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/nAPZKIMIKTN7t4yjVFuCc0w2kOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2370::-2a06:a005:23bf:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
2e:b7:ca:b8:80:ec:c6:b8:62:02:cb:2c:5f:86:25:2a:c2:d5:
e7:ba:ce:36:fa:21:db:81:0d:9c:a5:73:65:db:54:c6:b1:31:
bd:fc:5c:c1:2e:db:2e:74:5f:43:5e:5a:88:8b:9b:11:51:58:
cf:ae:b2:4d:27:20:0b:21:30:cc:e3:b3:0a:0b:5e:7b:a6:66:
00:35:06:ab:b2:ff:57:22:13:c3:7f:36:2e:2a:a5:0a:39:f2:
2d:8b:05:59:91:3a:2d:26:ad:2a:07:ad:39:3e:77:76:7f:86:
63:ce:81:9a:9f:4c:c3:bc:e5:f8:52:69:2c:28:f6:dd:ea:8e:
2d:ed:0c:9c:c2:d6:b4:fa:52:94:6f:24:a4:7d:75:a0:e7:2a:
2b:d8:ce:79:01:cb:1f:77:58:74:99:87:45:ef:b2:33:04:f7:
31:51:d9:f4:8e:57:c4:b5:9e:94:4e:16:af:07:6d:d9:a7:26:
fb:bb:11:b0:f4:ef:53:01:af:a1:b9:e7:e6:8d:c1:fa:1a:8f:
fd:aa:2e:b9:60:cd:f8:8a:96:07:f7:68:7b:43:e2:5a:05:c2:
88:54:c0:58:de:9a:39:b7:99:c2:f0:fc:78:41:b5:9f:cd:24:
03:5a:5e:86:81:63:07:a0:50:19:dc:e1:60:0e:6e:5b:9d:43:
9b:f4:45:11
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYSXHRvkrlLx75iviYkW0DA/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIxMTIwMjIxNjE4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YzAzZDkyODgzMDgyOTMzN2JiNzhjYTM1NDViODI3MzRjMzY5MGU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkazMj3olqZOiBBw2FbUOAzBOGxaO
RgqM1+dje4KXv98ZizfcyMCD5OCfRGr4z0MUdrJs1NrI68JXIS5P+Wh8TOt09246
QDhWLrC0op9SdXGeGMSLw4Zhf2pQ0TBUJ9dUUy9HZbSnBy33il5W9PbsGGW0Ke3w
nkZ4OqdZ/409QTl/H3MgVubXxK3YYu3jzY/jg+O7j167VGNGR7BYJ66Pm8OYiy6e
askEasj/qvR+T19iV4WZ09tXKY3ApHxJE8mO5jYqoCA140PmlVYQlypZemZOCgvg
6hHcWfjqX1bX6TbtnZVwXQvR69Q7HIjndSRNsqg1N1+jSTn+lyW/U/PDuwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFJwD2SiDCCkze7eMo1RbgnNMNpDoMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvbkFQWktJTUlLVE43dDR5alZGdUNjMHcya09nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwQqBqAF
I3ADBwYqBqAFI4AwDQYJKoZIhvcNAQELBQADggEBAC63yriA7Ma4YgLLLF+GJSrC
1ee6zjb6IduBDZylc2XbVMaxMb38XMEu2y50X0NeWoiLmxFRWM+usk0nIAshMMzj
swoLXnumZgA1Bquy/1ciE8N/Ni4qpQo58i2LBVmROi0mrSoHrTk+d3Z/hmPOgZqf
TMO85fhSaSwo9t3qji3tDJzC1rT6UpRvJKR9daDnKivYznkByx93WHSZh0XvsjME
9zFR2fSOV8S1npROFq8HbdmnJvu7EbD071MBr6G55+aNwfoaj/2qLrlgzfiKlgf3
aHtD4loFwohUwFjemjm3mcLw/HhBtZ/NJANaXoaBYwegUBnc4WAObludQ5v0RRE=
-----END CERTIFICATE-----
Generated at Fri Apr 18 09:59:32 2025 by rpki-client