Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/pt0gk8lTZbOCqpWOrcBH_chnXf8.roa
File: pt0gk8lTZbOCqpWOrcBH_chnXf8.roa (raw, json)
Hash identifier: HYpCq2dUOrodT6+kbY0z6SnUFYb/INLVcvvkEfFaDD4=
Subject key identifier: A6:DD:20:93:C9:53:65:B3:82:AA:95:8E:AD:C0:47:FD:C8:67:5D:FF
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 1AF49517
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/pt0gk8lTZbOCqpWOrcBH_chnXf8.roa
Signing time: Fri 17 Jun 2022 01:05:45 +0000
ROA not before: Fri 17 Jun 2022 01:05:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 924
IP address blocks: 2a06:a005:d30::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 452236567 (0x1af49517)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jun 17 01:05:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a6dd2093c95365b382aa958eadc047fdc8675dff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:32:3a:af:de:eb:06:9a:13:32:e5:18:53:42:
f5:0e:4b:f9:e4:71:e2:7c:21:3c:f5:ba:18:d5:b3:
17:28:56:2a:91:16:a0:86:c7:3e:50:8b:5c:03:ae:
e6:de:8d:3e:28:36:08:d4:27:8b:35:d2:80:11:d3:
6f:8d:83:53:5b:a5:62:4a:76:c2:1b:f6:2a:c8:d7:
46:3c:81:e0:a6:9a:4b:16:45:e7:28:de:72:27:86:
c1:e8:05:f6:40:a4:97:a6:8a:d6:66:21:52:59:5a:
f3:88:52:65:56:8b:1d:0d:8d:76:62:5f:58:ff:4e:
d2:47:4d:31:5a:0a:82:71:8b:14:50:91:5a:55:6e:
1d:10:5d:7e:56:0a:1b:37:b3:ba:3f:57:8c:9a:c4:
73:96:50:bc:82:a4:a3:b8:91:e1:f5:f9:e9:82:81:
01:06:be:c2:ad:b2:4c:e7:ca:40:8f:0e:64:a8:33:
1e:0b:d2:23:2d:c6:54:b2:b1:e3:1b:24:ae:40:b1:
33:57:38:63:b2:d5:24:ba:83:9d:9b:f7:e2:2e:b3:
5d:99:35:e8:da:6a:2b:0d:eb:f4:c4:51:31:79:00:
e0:8a:43:60:d7:d5:78:c1:58:ad:3d:50:e4:63:3c:
d3:8a:b2:d0:26:a1:c1:58:7b:00:0b:74:00:8e:de:
f1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:DD:20:93:C9:53:65:B3:82:AA:95:8E:AD:C0:47:FD:C8:67:5D:FF
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/pt0gk8lTZbOCqpWOrcBH_chnXf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:d30::/44
Signature Algorithm: sha256WithRSAEncryption
65:70:5c:37:b0:d7:ef:2d:2f:fa:8e:da:d5:63:29:d5:c4:e8:
7e:6d:93:5b:13:62:92:4b:1f:39:ec:c3:73:45:96:d5:ab:a5:
26:9a:9e:16:0c:61:2c:18:2d:bc:5d:08:7f:a0:de:c7:0d:7f:
f1:f3:42:b1:f8:63:cd:97:b7:4b:97:a6:e0:c0:d6:a2:5a:f6:
6e:35:bc:b2:33:87:0c:7e:a7:7b:93:a9:b6:08:e7:41:68:5e:
c3:b6:3c:f4:8d:cf:34:9a:89:b8:45:56:3d:09:e3:83:c5:d2:
dc:e9:3e:37:49:eb:64:60:b4:4c:2a:fc:9c:1b:36:d4:4f:c7:
8f:25:cc:3d:eb:b4:60:67:43:ee:74:3b:a4:d1:9e:a5:73:57:
ff:fc:18:c3:34:cb:dc:5f:ee:91:98:33:73:02:92:2e:44:0c:
e9:34:8e:92:07:3b:33:51:0e:05:5c:ff:0e:48:8d:10:15:65:
06:83:75:bd:5a:aa:ce:94:00:3f:1a:1b:74:22:8e:ea:c4:52:
9b:37:1f:01:f2:13:ff:19:26:14:c5:4e:d2:a3:2a:4e:43:30:
92:f8:54:00:2b:11:32:49:2a:d1:f6:2b:d3:6b:89:9b:17:45:
7c:31:5c:19:1e:5d:b2:7f:f2:07:1c:30:9c:7e:a8:9d:fc:de:
29:bf:5f:88
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEGvSVFzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NDkxNDU0MWZkMWI5NWU3YzBhZmM4NzVmYmVmNzg3OTRmNTUzODZiMB4XDTIyMDYx
NzAxMDU0NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTZkZDIwOTNjOTUz
NjViMzgyYWE5NThlYWRjMDQ3ZmRjODY3NWRmZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANUyOq/e6waaEzLlGFNC9Q5L+eRx4nwhPPW6GNWzFyhWKpEW
oIbHPlCLXAOu5t6NPig2CNQnizXSgBHTb42DU1ulYkp2whv2KsjXRjyB4KaaSxZF
5yjecieGwegF9kCkl6aK1mYhUlla84hSZVaLHQ2NdmJfWP9O0kdNMVoKgnGLFFCR
WlVuHRBdflYKGzezuj9XjJrEc5ZQvIKko7iR4fX56YKBAQa+wq2yTOfKQI8OZKgz
HgvSIy3GVLKx4xskrkCxM1c4Y7LVJLqDnZv34i6zXZk16NpqKw3r9MRRMXkA4IpD
YNfVeMFYrT1Q5GM804qy0CahwVh7AAt0AI7e8QMCAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBSm3SCTyVNls4KqlY6twEf9yGdd/zAfBgNVHSMEGDAWgBRUkUVB/RuV58Cv
yHX773h5T1U4azAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ZKRkZRZjBibGVmQXI4aDEtLTk0ZVU5Vk9Hcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGEvNDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8x
L3B0MGdrOGxUWmJPQ3FwV09yY0JIX2NoblhmOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEv
NDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8xL1ZKRkZRZjBibGVm
QXI4aDEtLTk0ZVU5Vk9Hcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoGoAUNMDANBgkqhkiG9w0BAQsF
AAOCAQEAZXBcN7DX7y0v+o7a1WMp1cTofm2TWxNikksfOezDc0WW1aulJpqeFgxh
LBgtvF0If6Dexw1/8fNCsfhjzZe3S5em4MDWolr2bjW8sjOHDH6ne5OptgjnQWhe
w7Y89I3PNJqJuEVWPQnjg8XS3Ok+N0nrZGC0TCr8nBs21E/HjyXMPeu0YGdD7nQ7
pNGepXNX//wYwzTL3F/ukZgzcwKSLkQM6TSOkgc7M1EOBVz/DkiNEBVlBoN1vVqq
zpQAPxobdCKO6sRSmzcfAfIT/xkmFMVO0qMqTkMwkvhUACsRMkkq0fYr02uJmxdF
fDFcGR5dsn/yBxwwnH6onfzeKb9fiA==
-----END CERTIFICATE-----
Generated at Fri Apr 18 10:18:31 2025 by rpki-client