Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/pubs4Loj19VHEm3B1iDWVxQ7UlY.roa
File: pubs4Loj19VHEm3B1iDWVxQ7UlY.roa (raw, json)
Hash identifier: md5quQ/8okCubGr074xPD5xQ+++4GgMT7ItE3/V28OY=
Subject key identifier: A6:E6:EC:E0:BA:23:D7:D5:47:12:6D:C1:D6:20:D6:57:14:3B:52:56
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 15C53679
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/pubs4Loj19VHEm3B1iDWVxQ7UlY.roa
Signing time: Sat 01 Jan 2022 05:59:12 +0000
ROA not before: Sat 01 Jan 2022 05:59:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212085
IP address blocks: 2a06:a001:a070::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 365246073 (0x15c53679)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jan 1 05:59:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a6e6ece0ba23d7d547126dc1d620d657143b5256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:62:cd:b0:45:3e:5e:d7:a2:4d:12:0f:75:bd:
64:ab:57:53:a1:82:d0:15:96:17:41:b3:b3:76:e3:
7f:57:5e:41:77:b7:16:52:ed:b2:cf:00:79:73:d2:
7d:d0:6f:e5:c3:29:b8:77:d9:9f:b0:1d:23:c6:80:
81:0a:fb:4c:de:ac:06:96:a7:2b:5a:91:45:67:99:
50:a3:4a:96:50:54:fc:46:29:13:01:8e:dd:9b:db:
31:9a:3c:db:b2:4c:fb:fb:4f:73:95:0b:ab:78:d7:
6e:80:de:b7:b6:5d:80:ff:c8:35:1a:0e:08:d0:ed:
ff:f4:4b:6d:73:9c:ae:4d:b0:f2:e6:fd:6e:8f:a4:
a7:1c:6b:ae:ef:09:ac:cb:d7:9e:13:17:17:b6:16:
48:88:11:17:eb:98:d7:37:27:9a:a2:f5:87:75:0d:
30:11:cc:96:42:cd:bd:ef:3e:6d:aa:14:3d:11:57:
ab:cc:6f:74:6e:f1:ca:1f:a6:b1:ba:7d:b1:44:25:
b7:e7:4c:f5:92:55:88:6a:b9:fa:3b:ac:d8:54:d2:
6f:86:7a:c3:a1:d6:2c:b4:b4:b4:e2:5b:c9:97:c0:
0c:42:8d:42:86:1e:49:5e:0d:c9:eb:af:e8:b0:55:
46:4c:1b:67:5f:2e:b7:e6:6f:e1:b3:d5:be:45:4d:
7f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:E6:EC:E0:BA:23:D7:D5:47:12:6D:C1:D6:20:D6:57:14:3B:52:56
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/pubs4Loj19VHEm3B1iDWVxQ7UlY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a001:a070::/44
Signature Algorithm: sha256WithRSAEncryption
0f:de:6a:d2:71:8d:34:c5:de:a9:4d:05:0a:9b:7a:11:fc:3a:
5c:82:ef:98:5e:ef:ef:42:84:b1:c8:7c:68:e3:ba:d1:cc:16:
df:ba:f2:4b:a2:e3:80:a0:7d:d9:80:ff:27:19:21:7a:9d:c6:
7a:1a:57:34:05:69:f3:cd:73:29:97:09:3a:fb:4f:90:4f:9e:
e9:94:75:50:a4:93:5b:e3:0f:71:47:51:dd:5f:4b:45:a1:da:
45:11:16:6f:c4:d4:3c:bb:28:92:df:7a:f8:ba:ee:1f:08:e1:
81:23:60:a4:3b:68:d9:08:e1:04:b9:14:57:96:9c:45:1a:dc:
e6:af:5d:82:ea:da:de:0b:64:c1:28:c7:c2:4c:63:4e:99:2a:
57:8c:a7:9a:45:95:6f:4a:c4:fe:a0:d3:c6:a5:39:03:3f:bc:
c3:e9:41:14:d8:e4:d9:1a:b6:ff:54:71:31:a1:78:3d:ea:fe:
67:61:3a:52:63:97:df:88:b1:43:53:84:a9:79:b5:b9:82:09:
24:93:c8:eb:ff:86:68:17:2e:50:f8:1f:36:2d:14:71:eb:7c:
57:99:f9:a8:ea:3a:92:56:8d:fc:57:ef:07:e4:e9:5d:fe:dd:
92:f8:c5:a2:8a:29:02:ed:d4:42:06:9e:f1:1d:be:58:72:82:
ab:1b:32:55
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEFcU2eTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NDkxNDU0MWZkMWI5NWU3YzBhZmM4NzVmYmVmNzg3OTRmNTUzODZiMB4XDTIyMDEw
MTA1NTkxMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTZlNmVjZTBiYTIz
ZDdkNTQ3MTI2ZGMxZDYyMGQ2NTcxNDNiNTI1NjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMBizbBFPl7Xok0SD3W9ZKtXU6GC0BWWF0Gzs3bjf1deQXe3
FlLtss8AeXPSfdBv5cMpuHfZn7AdI8aAgQr7TN6sBpanK1qRRWeZUKNKllBU/EYp
EwGO3ZvbMZo827JM+/tPc5ULq3jXboDet7ZdgP/INRoOCNDt//RLbXOcrk2w8ub9
bo+kpxxrru8JrMvXnhMXF7YWSIgRF+uY1zcnmqL1h3UNMBHMlkLNve8+baoUPRFX
q8xvdG7xyh+msbp9sUQlt+dM9ZJViGq5+jus2FTSb4Z6w6HWLLS0tOJbyZfADEKN
QoYeSV4Nyeuv6LBVRkwbZ18ut+Zv4bPVvkVNf1kCAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBSm5uzguiPX1UcSbcHWINZXFDtSVjAfBgNVHSMEGDAWgBRUkUVB/RuV58Cv
yHX773h5T1U4azAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ZKRkZRZjBibGVmQXI4aDEtLTk0ZVU5Vk9Hcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGEvNDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8x
L3B1YnM0TG9qMTlWSEVtM0IxaURXVnhRN1VsWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEv
NDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8xL1ZKRkZRZjBibGVm
QXI4aDEtLTk0ZVU5Vk9Hcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoGoAGgcDANBgkqhkiG9w0BAQsF
AAOCAQEAD95q0nGNNMXeqU0FCpt6Efw6XILvmF7v70KEsch8aOO60cwW37ryS6Lj
gKB92YD/Jxkhep3GehpXNAVp881zKZcJOvtPkE+e6ZR1UKSTW+MPcUdR3V9LRaHa
RREWb8TUPLsokt96+LruHwjhgSNgpDto2QjhBLkUV5acRRrc5q9dgura3gtkwSjH
wkxjTpkqV4ynmkWVb0rE/qDTxqU5Az+8w+lBFNjk2Rq2/1RxMaF4Per+Z2E6UmOX
34ixQ1OEqXm1uYIJJJPI6/+GaBcuUPgfNi0Ucet8V5n5qOo6klaN/FfvB+TpXf7d
kvjFooopAu3UQgae8R2+WHKCqxsyVQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 07:19:10 2025 by rpki-client