Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/owmr7QaXK1y6U4-XSjPdpWwcanw.roa
File: owmr7QaXK1y6U4-XSjPdpWwcanw.roa (raw, json)
Hash identifier: C/n54kNJkyNzZYehMw2o3qRNPx320HRaD/Opl/ZC3Fg=
Subject key identifier: A3:09:AB:ED:06:97:2B:5C:BA:53:8F:97:4A:33:DD:A5:6C:1C:6A:7C
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01823A345A64025ADC6A7A84FA4D12AAA647
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/owmr7QaXK1y6U4-XSjPdpWwcanw.roa
Signing time: Tue 26 Jul 2022 11:11:25 +0000
ROA not before: Tue 26 Jul 2022 11:11:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203888
IP address blocks: 2a06:a005:45a::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:3a:34:5a:64:02:5a:dc:6a:7a:84:fa:4d:12:aa:a6:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jul 26 11:11:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a309abed06972b5cba538f974a33dda56c1c6a7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:9d:f4:10:5c:ea:3b:67:e7:83:36:29:93:7e:
20:d4:ae:46:76:50:9e:bd:8a:87:f1:c0:ab:f9:cd:
82:28:87:16:6e:26:46:f1:87:a5:38:ef:8f:70:93:
52:2a:92:b5:ef:09:09:a4:b6:60:91:72:6c:2d:2c:
a5:9b:5d:4f:da:8b:0e:c0:b8:06:47:05:56:51:54:
3a:7c:c8:f5:81:51:3d:d8:19:de:25:8f:34:1d:62:
27:7d:6e:e7:da:03:65:5f:b5:b8:fd:fc:49:f6:4d:
12:b2:e5:c6:86:26:e1:fd:b4:e3:4f:5e:68:38:c4:
b0:9c:df:f7:1a:81:cd:de:20:e8:44:21:99:65:e3:
b1:11:56:78:1e:5f:ed:f5:c1:cf:6b:43:3e:93:e9:
05:a6:87:ca:17:c5:9f:7f:4c:0c:9b:f4:ca:41:41:
be:ca:eb:c5:70:0a:8a:44:df:db:e3:8a:d0:5d:40:
79:76:96:12:fc:08:be:00:58:a4:87:2e:d2:f3:1a:
97:26:0a:45:61:22:82:8c:32:30:e5:e0:cc:3b:a8:
e1:6b:77:62:05:bc:4b:be:ee:93:6e:a0:1b:81:9a:
76:ba:6b:fb:4a:0d:e7:00:07:a3:e3:1b:fd:20:9b:
ba:d4:36:75:ca:bb:aa:24:e2:0f:e0:a4:db:a6:8d:
93:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:09:AB:ED:06:97:2B:5C:BA:53:8F:97:4A:33:DD:A5:6C:1C:6A:7C
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/owmr7QaXK1y6U4-XSjPdpWwcanw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:45a::/48
Signature Algorithm: sha256WithRSAEncryption
39:c4:74:58:2e:7d:9d:a6:2e:78:22:d8:67:8d:83:1a:9f:d4:
2a:e2:24:96:ff:90:92:ae:17:18:ae:4f:86:4a:ab:c0:81:0b:
f7:89:0e:05:7b:90:0e:02:dd:6d:31:66:d9:e7:f2:dd:46:ed:
a4:dc:bc:a0:6f:90:d2:a1:95:66:66:46:f6:cb:6c:f0:ee:c7:
4c:b5:da:a7:76:8f:61:c6:3e:66:d6:28:f2:c9:69:8f:46:b8:
b5:28:36:9d:05:8c:bb:18:e9:b2:46:55:5e:15:c7:1b:7e:f2:
49:5e:27:46:04:ac:da:b0:db:a9:ce:a8:f5:8a:e8:c0:67:cd:
f9:af:74:14:ed:d2:21:08:e6:e4:c6:46:22:1e:b7:be:60:69:
90:78:d5:cd:c7:dc:1a:61:7a:d5:32:a9:c7:63:fd:7c:51:18:
00:dc:24:63:fd:f1:18:90:d1:9a:02:ea:2c:5e:32:df:98:5f:
6c:09:69:06:44:7b:da:73:7b:c4:4a:b1:09:93:1c:71:19:ba:
98:f4:c4:8a:a8:33:ad:41:02:5e:7d:bf:ea:82:9c:98:4f:8b:
a3:1a:e3:87:9b:ac:6d:10:4d:55:a1:91:71:19:31:e4:5c:e0:
ef:43:e0:2b:21:38:98:cd:6a:19:af:e3:97:26:ce:a1:7c:12:
ab:31:8d:20
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYI6NFpkAlrcanqE+k0SqqZHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIwNzI2MTExMTI1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMzA5YWJlZDA2OTcyYjVjYmE1MzhmOTc0YTMzZGRhNTZjMWM2YTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh530EFzqO2fngzYpk34g1K5GdlCe
vYqH8cCr+c2CKIcWbiZG8YelOO+PcJNSKpK17wkJpLZgkXJsLSylm11P2osOwLgG
RwVWUVQ6fMj1gVE92BneJY80HWInfW7n2gNlX7W4/fxJ9k0SsuXGhibh/bTjT15o
OMSwnN/3GoHN3iDoRCGZZeOxEVZ4Hl/t9cHPa0M+k+kFpofKF8Wff0wMm/TKQUG+
yuvFcAqKRN/b44rQXUB5dpYS/Ai+AFikhy7S8xqXJgpFYSKCjDIw5eDMO6jha3di
BbxLvu6TbqAbgZp2umv7Sg3nAAej4xv9IJu61DZ1yruqJOIP4KTbpo2TuwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFKMJq+0GlytculOPl0oz3aVsHGp8MB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvb3dtcjdRYVhLMXk2VTQtWFNqUGRwV3djYW53LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgagBQRa
MA0GCSqGSIb3DQEBCwUAA4IBAQA5xHRYLn2dpi54IthnjYMan9Qq4iSW/5CSrhcY
rk+GSqvAgQv3iQ4Fe5AOAt1tMWbZ5/LdRu2k3Lygb5DSoZVmZkb2y2zw7sdMtdqn
do9hxj5m1ijyyWmPRri1KDadBYy7GOmyRlVeFccbfvJJXidGBKzasNupzqj1iujA
Z835r3QU7dIhCObkxkYiHre+YGmQeNXNx9waYXrVMqnHY/18URgA3CRj/fEYkNGa
AuosXjLfmF9sCWkGRHvac3vESrEJkxxxGbqY9MSKqDOtQQJefb/qgpyYT4ujGuOH
m6xtEE1VoZFxGTHkXODvQ+ArITiYzWoZr+OXJs6hfBKrMY0g
-----END CERTIFICATE-----
Generated at Tue Apr 22 02:55:25 2025 by rpki-client