Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/olhbId8kZxaw6TZZn36ZcHk_o2Y.roa
File: olhbId8kZxaw6TZZn36ZcHk_o2Y.roa (raw, json)
Hash identifier: nG4acbRq8T+15jnRV+j+BseGnFHXGCp2O8AqAcfYChs=
Subject key identifier: A2:58:5B:21:DF:24:67:16:B0:E9:36:59:9F:7E:99:70:79:3F:A3:66
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0182936C45059184E5EC33230D8EEBA2460A
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/olhbId8kZxaw6TZZn36ZcHk_o2Y.roa
Signing time: Fri 12 Aug 2022 18:58:42 +0000
ROA not before: Fri 12 Aug 2022 18:58:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211431
IP address blocks: 2a06:a005:1790::/44 maxlen: 48
2a06:a005:1720::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:93:6c:45:05:91:84:e5:ec:33:23:0d:8e:eb:a2:46:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Aug 12 18:58:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a2585b21df246716b0e936599f7e9970793fa366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:09:69:2b:b9:ac:21:0d:3c:eb:3a:e3:d1:cd:
72:76:7d:23:81:dd:8a:d7:52:dd:92:86:5e:2c:2f:
81:39:2f:70:0f:ec:fb:34:be:fe:86:23:ab:93:84:
16:83:58:66:d3:53:34:29:03:a8:ef:7a:85:f3:ba:
42:01:23:54:a4:5d:c1:e1:a9:3a:67:24:ce:ac:09:
8c:6c:92:8d:43:0a:03:50:e7:0e:d6:d8:b9:29:45:
c5:c2:12:e2:82:57:08:59:f3:e4:ce:1d:81:cf:de:
9e:78:d3:ad:f4:ae:01:b6:57:05:38:78:7e:d5:2a:
53:09:84:91:70:9c:be:f8:08:fb:fb:59:46:a4:16:
1e:70:b4:0d:89:02:02:7e:2a:68:2a:c1:a6:25:3a:
10:9a:1e:0a:2a:8e:e3:5f:cc:f3:1d:8c:42:a6:14:
20:fa:6e:0b:f4:bb:32:e5:de:01:f5:d4:27:65:a4:
f7:a0:5d:82:68:9a:c2:68:43:2d:48:f4:7c:f3:ed:
5d:7a:63:4f:86:ce:d3:ab:34:5c:03:01:f6:6b:9a:
d3:d0:84:3f:96:f5:e9:7a:13:26:58:4d:44:1c:6c:
09:bd:55:e9:62:0e:ba:ec:12:79:cd:ed:5e:44:5c:
9f:49:30:ef:2f:25:09:af:33:9b:3f:c8:3a:53:b1:
48:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:58:5B:21:DF:24:67:16:B0:E9:36:59:9F:7E:99:70:79:3F:A3:66
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/olhbId8kZxaw6TZZn36ZcHk_o2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1720::/44
2a06:a005:1790::/44
Signature Algorithm: sha256WithRSAEncryption
50:f4:55:d7:33:65:64:94:1f:5b:36:23:e1:c7:0f:56:23:a7:
36:01:1c:41:ad:d5:eb:50:ee:0f:9b:bf:c1:20:27:c0:f8:75:
82:5a:f4:78:68:b2:bb:eb:e8:71:54:fc:87:7d:3f:fd:e0:e3:
4a:50:e2:5e:52:f5:6e:c5:ea:49:4e:72:53:9d:fa:01:6b:69:
c2:db:13:03:db:31:5f:e8:35:08:67:ca:01:0b:26:90:9c:de:
8a:a7:bf:56:b6:c1:c4:f2:36:7b:17:24:47:fc:68:10:61:ab:
ab:ef:fe:2e:9c:82:19:60:d2:1d:64:f4:d9:6e:51:1f:d7:f6:
18:3e:2c:fe:10:f4:70:95:54:0e:a6:5c:6b:40:14:8b:35:ea:
e5:39:88:30:4c:89:11:c7:a2:16:e3:0b:2b:f0:57:5f:4a:9c:
1f:4e:14:1d:f0:0d:8c:9e:0c:1c:7e:69:33:84:e9:59:8e:48:
07:60:a1:59:92:aa:b7:cb:16:1d:50:4e:2a:0b:fe:f4:6b:79:
59:ad:10:34:99:34:1a:1f:82:c9:48:25:bf:f1:0c:2a:7f:c0:
54:0a:3d:46:ab:f7:cd:19:4c:c6:38:44:b9:e0:5c:68:ed:cb:
fb:a4:f9:a5:0a:34:ea:e8:82:a7:d3:c8:7c:db:2b:c3:00:ef:
aa:b2:de:62
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYKTbEUFkYTl7DMjDY7rokYKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIwODEyMTg1ODQyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMjU4NWIyMWRmMjQ2NzE2YjBlOTM2NTk5ZjdlOTk3MDc5M2ZhMzY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAlpK7msIQ086zrj0c1ydn0jgd2K
11LdkoZeLC+BOS9wD+z7NL7+hiOrk4QWg1hm01M0KQOo73qF87pCASNUpF3B4ak6
ZyTOrAmMbJKNQwoDUOcO1ti5KUXFwhLiglcIWfPkzh2Bz96eeNOt9K4BtlcFOHh+
1SpTCYSRcJy++Aj7+1lGpBYecLQNiQICfipoKsGmJToQmh4KKo7jX8zzHYxCphQg
+m4L9Lsy5d4B9dQnZaT3oF2CaJrCaEMtSPR88+1demNPhs7TqzRcAwH2a5rT0IQ/
lvXpehMmWE1EHGwJvVXpYg667BJ5ze1eRFyfSTDvLyUJrzObP8g6U7FIiwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFKJYWyHfJGcWsOk2WZ9+mXB5P6NmMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvb2xoYklkOGtaeGF3NlRaWm4zNlpjSGtfbzJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKgagBRcg
AwcEKgagBReQMA0GCSqGSIb3DQEBCwUAA4IBAQBQ9FXXM2VklB9bNiPhxw9WI6c2
ARxBrdXrUO4Pm7/BICfA+HWCWvR4aLK76+hxVPyHfT/94ONKUOJeUvVuxepJTnJT
nfoBa2nC2xMD2zFf6DUIZ8oBCyaQnN6Kp79WtsHE8jZ7FyRH/GgQYaur7/4unIIZ
YNIdZPTZblEf1/YYPiz+EPRwlVQOplxrQBSLNerlOYgwTIkRx6IW4wsr8FdfSpwf
ThQd8A2MngwcfmkzhOlZjkgHYKFZkqq3yxYdUE4qC/70a3lZrRA0mTQaH4LJSCW/
8Qwqf8BUCj1Gq/fNGUzGOES54Fxo7cv7pPmlCjTq6IKn08h82yvDAO+qst5i
-----END CERTIFICATE-----
Generated at Fri Apr 18 10:10:59 2025 by rpki-client