Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/s9PcVZR1i5FoQIdeXCFZ2lUrxHg.roa
File: s9PcVZR1i5FoQIdeXCFZ2lUrxHg.roa (raw, json)
Hash identifier: oKVdlygA+8jF8vTxs3hkVR8wNrfPcEvDlTd7Hb2B1jo=
Subject key identifier: B3:D3:DC:55:94:75:8B:91:68:40:87:5E:5C:21:59:DA:55:2B:C4:78
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01834175B82DD2BF94AC8F09606B880FBDD1
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/s9PcVZR1i5FoQIdeXCFZ2lUrxHg.roa
Signing time: Thu 15 Sep 2022 14:02:57 +0000
ROA not before: Thu 15 Sep 2022 14:02:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205848
IP address blocks: 2a06:a005:1271::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:41:75:b8:2d:d2:bf:94:ac:8f:09:60:6b:88:0f:bd:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Sep 15 14:02:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b3d3dc5594758b916840875e5c2159da552bc478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:f4:ca:2c:26:49:72:ac:fa:d7:7f:85:ae:b9:
9a:b9:5c:41:68:02:9c:75:56:e6:18:51:62:7c:67:
f8:c7:d6:df:9e:6e:fa:df:b4:8c:49:93:3b:9c:d3:
39:80:32:8f:bd:d4:8c:29:07:10:09:33:bb:f8:07:
ac:58:0b:03:e2:7f:a2:02:5d:ff:da:39:1b:fe:24:
0f:1b:69:b5:cd:cc:a1:c5:8a:55:4c:0a:ef:90:01:
b5:a1:d5:bc:63:eb:49:86:04:f4:b0:70:90:33:74:
2a:b2:fb:a6:7d:e9:c9:df:99:c3:60:78:30:39:98:
7f:b3:de:73:d2:42:f5:39:0c:ac:4d:a9:cc:b6:44:
90:e1:2b:9d:00:6b:89:39:29:5e:52:c0:05:47:53:
8c:45:1d:4b:7e:4a:be:23:f2:ed:ec:d8:3d:41:34:
31:5a:51:f6:f1:45:1b:71:2d:fd:4f:17:f0:e3:8b:
da:4e:e0:60:6e:93:43:12:ad:2f:fb:1f:d3:be:59:
91:27:04:8c:c5:c2:ed:8e:4f:36:0d:48:31:fc:da:
31:91:42:6b:ff:a8:b0:74:ea:fa:8a:6e:9d:e9:5a:
09:f1:21:54:2f:08:ec:82:42:69:52:a2:36:68:d6:
33:f2:f9:53:e3:6a:7f:ea:74:a9:89:56:4a:8f:d8:
16:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:D3:DC:55:94:75:8B:91:68:40:87:5E:5C:21:59:DA:55:2B:C4:78
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/s9PcVZR1i5FoQIdeXCFZ2lUrxHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1271::/48
Signature Algorithm: sha256WithRSAEncryption
6a:af:83:53:fc:90:4c:d0:b5:9f:39:4d:84:09:f5:41:08:6e:
df:a9:d6:96:4b:13:9c:ac:ca:d7:b1:97:05:24:bc:dc:1a:9e:
78:de:a9:c6:e1:12:48:07:5c:97:be:5b:e6:c8:12:ac:e7:12:
86:51:34:62:d7:84:e6:6e:d2:0a:65:c8:a3:68:fa:77:49:59:
ad:bb:8c:52:29:c5:c5:c8:ec:e9:a7:71:23:4e:fd:66:9e:f7:
03:df:16:d5:81:4c:2f:31:9e:a5:9c:ef:93:0c:59:24:a0:56:
4d:22:9f:6f:fa:b6:32:ee:f2:19:3b:74:25:16:73:c0:a9:b3:
7f:be:da:c0:ce:59:6a:07:1a:36:b6:bf:51:de:ac:27:35:2d:
77:cc:5f:8f:13:c1:b2:ea:e4:5b:f6:8c:92:7a:e2:a9:79:c6:
f0:a8:b1:3f:d4:e8:a1:e4:5b:b9:9e:68:2f:99:6a:45:bb:ab:
14:ed:02:ea:82:5a:1a:6c:2d:94:42:1c:e8:60:31:1f:f4:47:
c2:59:c3:a9:f3:c5:59:1a:0b:d6:6e:a6:1d:8e:76:5c:8b:db:
94:48:f9:a9:a1:4e:16:34:08:04:2e:ef:9d:86:b5:c9:a4:7c:
fb:36:50:b2:a4:cf:14:bf:bb:5e:4f:a9:29:59:9f:a6:88:d4:
3b:ee:1f:61
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYNBdbgt0r+UrI8JYGuID73RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIwOTE1MTQwMjU3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiM2QzZGM1NTk0NzU4YjkxNjg0MDg3NWU1YzIxNTlkYTU1MmJjNDc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfTKLCZJcqz613+FrrmauVxBaAKc
dVbmGFFifGf4x9bfnm7637SMSZM7nNM5gDKPvdSMKQcQCTO7+AesWAsD4n+iAl3/
2jkb/iQPG2m1zcyhxYpVTArvkAG1odW8Y+tJhgT0sHCQM3QqsvumfenJ35nDYHgw
OZh/s95z0kL1OQysTanMtkSQ4SudAGuJOSleUsAFR1OMRR1Lfkq+I/Lt7Ng9QTQx
WlH28UUbcS39Txfw44vaTuBgbpNDEq0v+x/TvlmRJwSMxcLtjk82DUgx/NoxkUJr
/6iwdOr6im6d6VoJ8SFULwjsgkJpUqI2aNYz8vlT42p/6nSpiVZKj9gWUwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFLPT3FWUdYuRaECHXlwhWdpVK8R4MB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvczlQY1ZaUjFpNUZvUUlkZVhDRloybFVyeEhnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgagBRJx
MA0GCSqGSIb3DQEBCwUAA4IBAQBqr4NT/JBM0LWfOU2ECfVBCG7fqdaWSxOcrMrX
sZcFJLzcGp543qnG4RJIB1yXvlvmyBKs5xKGUTRi14TmbtIKZcijaPp3SVmtu4xS
KcXFyOzpp3EjTv1mnvcD3xbVgUwvMZ6lnO+TDFkkoFZNIp9v+rYy7vIZO3QlFnPA
qbN/vtrAzllqBxo2tr9R3qwnNS13zF+PE8Gy6uRb9oySeuKpecbwqLE/1Oih5Fu5
nmgvmWpFu6sU7QLqgloabC2UQhzoYDEf9EfCWcOp88VZGgvWbqYdjnZci9uUSPmp
oU4WNAgELu+dhrXJpHz7NlCypM8Uv7teT6kpWZ+miNQ77h9h
-----END CERTIFICATE-----
Generated at Fri Apr 18 10:18:50 2025 by rpki-client