Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/payqiY5G8AD6xIHzvbJ_V40_ftM.roa
File: payqiY5G8AD6xIHzvbJ_V40_ftM.roa (raw, json)
Hash identifier: D+VTSZicplxZ/gkWZONEa+ObFlCcsGb7X82TrCeGhRk=
Subject key identifier: A5:AC:AA:89:8E:46:F0:00:FA:C4:81:F3:BD:B2:7F:57:8D:3F:7E:D3
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 18E62C97
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/payqiY5G8AD6xIHzvbJ_V40_ftM.roa
Signing time: Fri 29 Apr 2022 02:25:39 +0000
ROA not before: Fri 29 Apr 2022 02:25:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 139328
IP address blocks: 2a06:a005:520::/44 maxlen: 48
2a06:a005:540::/44 maxlen: 48
2a06:a005:530::/44 maxlen: 48
2a06:a005:550::/44 maxlen: 48
2a06:a005:4c0::/44 maxlen: 48
2a06:a005:510::/44 maxlen: 48
2a06:a005:660::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 417737879 (0x18e62c97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Apr 29 02:25:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a5acaa898e46f000fac481f3bdb27f578d3f7ed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ae:39:37:03:7f:8e:b6:f5:c4:68:ce:ca:10:
58:56:1b:8d:4c:c9:ac:46:a0:ea:6b:6a:90:92:5c:
b2:45:55:55:93:d0:25:ff:5c:3b:8a:1b:74:41:75:
d3:85:c5:c7:ac:26:05:68:42:3c:51:b0:a8:a6:92:
dd:b0:52:f2:1e:d5:9e:4d:c6:dd:5e:85:4e:db:2f:
b0:22:3a:bf:e8:43:2a:c4:5c:d6:68:58:db:5c:a2:
2a:d2:30:94:ce:2f:99:4c:ae:11:a5:81:27:ae:50:
dd:cc:8d:73:2a:69:35:94:84:7f:39:31:33:77:90:
9b:b0:73:4a:2a:c5:2a:aa:a3:c9:af:8a:5f:92:60:
6a:ea:84:42:13:76:bc:9f:ab:b5:8d:48:4f:71:cf:
d6:0b:54:fb:04:55:8b:04:0d:3c:76:0e:b6:30:ee:
2d:61:f9:c5:21:aa:e9:b7:7e:bc:18:ab:1c:01:e6:
84:9e:fe:2c:4a:a7:32:52:1f:92:cf:07:20:8c:19:
92:60:a1:99:f0:a4:b1:9d:c2:42:99:b0:d5:a2:78:
0e:97:cf:2f:b5:76:76:1f:64:84:3c:93:ec:7e:e2:
e3:e4:25:01:55:ce:20:40:4e:e0:04:55:ab:1e:5a:
ca:f7:91:11:4f:36:a7:b0:f4:24:72:a7:4b:36:25:
b3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:AC:AA:89:8E:46:F0:00:FA:C4:81:F3:BD:B2:7F:57:8D:3F:7E:D3
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/payqiY5G8AD6xIHzvbJ_V40_ftM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:4c0::/44
2a06:a005:510::-2a06:a005:55f:ffff:ffff:ffff:ffff:ffff
2a06:a005:660::/44
Signature Algorithm: sha256WithRSAEncryption
6d:96:96:47:10:57:a9:e5:b9:63:8b:7a:c2:a3:87:92:7a:9c:
68:e5:9a:3e:64:c5:9a:d3:25:ab:ad:f5:8d:43:68:f3:e3:04:
46:84:17:a8:3e:6f:19:d8:38:01:22:7b:1d:2c:9d:ad:21:be:
b2:31:2f:fd:38:af:13:b2:9b:ec:7d:db:17:db:f3:db:35:25:
87:f5:6f:ab:6a:26:13:5a:f5:6c:f2:b9:de:e8:da:c8:76:cd:
e4:f8:e6:7c:7d:2d:1e:ea:33:a4:dd:8a:ce:44:90:b7:78:88:
85:15:f5:ea:0d:7c:18:42:3a:c9:6b:0d:8b:aa:8e:ff:cd:c3:
6f:b0:c4:c0:e7:2f:76:5f:4a:57:13:46:a4:05:86:47:f7:16:
55:aa:00:cc:ce:f4:f0:6b:6d:91:df:f9:e8:c5:b0:f0:2c:61:
61:eb:71:eb:be:83:d2:db:7f:49:ab:5e:3b:a6:ba:67:e3:e1:
d2:a8:f0:51:ea:42:90:e4:b4:c9:b2:dd:99:91:b1:ce:e6:3e:
49:12:2f:0b:0e:6c:9b:e0:4f:e1:14:c4:a3:c1:5f:bf:a4:75:
1c:91:4f:96:e3:ae:c9:76:0f:2e:01:b0:0c:e8:fe:1e:42:e5:
78:26:cb:98:cd:c5:06:c1:6e:68:43:a8:85:96:49:ad:f1:58:
1c:ee:a5:98
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgIEGOYslzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NDkxNDU0MWZkMWI5NWU3YzBhZmM4NzVmYmVmNzg3OTRmNTUzODZiMB4XDTIyMDQy
OTAyMjUzOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTVhY2FhODk4ZTQ2
ZjAwMGZhYzQ4MWYzYmRiMjdmNTc4ZDNmN2VkMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ2uOTcDf4629cRozsoQWFYbjUzJrEag6mtqkJJcskVVVZPQ
Jf9cO4obdEF104XFx6wmBWhCPFGwqKaS3bBS8h7Vnk3G3V6FTtsvsCI6v+hDKsRc
1mhY21yiKtIwlM4vmUyuEaWBJ65Q3cyNcyppNZSEfzkxM3eQm7BzSirFKqqjya+K
X5JgauqEQhN2vJ+rtY1IT3HP1gtU+wRViwQNPHYOtjDuLWH5xSGq6bd+vBirHAHm
hJ7+LEqnMlIfks8HIIwZkmChmfCksZ3CQpmw1aJ4DpfPL7V2dh9khDyT7H7i4+Ql
AVXOIEBO4ARVqx5ayveREU82p7D0JHKnSzYls20CAwEAAaOCAikwggIlMB0GA1Ud
DgQWBBSlrKqJjkbwAPrEgfO9sn9XjT9+0zAfBgNVHSMEGDAWgBRUkUVB/RuV58Cv
yHX773h5T1U4azAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ZKRkZRZjBibGVmQXI4aDEtLTk0ZVU5Vk9Hcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGEvNDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8x
L3BheXFpWTVHOEFENnhJSHp2YkpfVjQwX2Z0TS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEv
NDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8xL1ZKRkZRZjBibGVm
QXI4aDEtLTk0ZVU5Vk9Hcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA/
BggrBgEFBQcBBwEB/wQwMC4wLAQCAAIwJgMHBCoGoAUEwDASAwcEKgagBQUQAwcF
KgagBQVAAwcEKgagBQZgMA0GCSqGSIb3DQEBCwUAA4IBAQBtlpZHEFep5blji3rC
o4eSepxo5Zo+ZMWa0yWrrfWNQ2jz4wRGhBeoPm8Z2DgBInsdLJ2tIb6yMS/9OK8T
spvsfdsX2/PbNSWH9W+raiYTWvVs8rne6NrIds3k+OZ8fS0e6jOk3YrORJC3eIiF
FfXqDXwYQjrJaw2Lqo7/zcNvsMTA5y92X0pXE0akBYZH9xZVqgDMzvTwa22R3/no
xbDwLGFh63HrvoPS239Jq147prpn4+HSqPBR6kKQ5LTJst2ZkbHO5j5JEi8LDmyb
4E/hFMSjwV+/pHUckU+W467Jdg8uAbAM6P4eQuV4JsuYzcUGwW5oQ6iFlkmt8Vgc
7qWY
-----END CERTIFICATE-----
Generated at Fri Apr 18 10:03:29 2025 by rpki-client