Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/vOtbfOeTaJREpQt2RqTJxLQrd8U.roa
File: vOtbfOeTaJREpQt2RqTJxLQrd8U.roa (raw, json)
Hash identifier: DHJDmPOTGytM6A3TZu5MZF3TGiTayQZvY6pCv3Mb4w4=
Subject key identifier: BC:EB:5B:7C:E7:93:68:94:44:A5:0B:76:46:A4:C9:C4:B4:2B:77:C5
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0184E77344BD9409A8372B7A1B44925B8B80
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/vOtbfOeTaJREpQt2RqTJxLQrd8U.roa
Signing time: Tue 06 Dec 2022 12:40:01 +0000
ROA not before: Tue 06 Dec 2022 12:40:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200853
IP address blocks: 2a0a:6040:c600::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e7:73:44:bd:94:09:a8:37:2b:7a:1b:44:92:5b:8b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Dec 6 12:40:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bceb5b7ce793689444a50b7646a4c9c4b42b77c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:20:97:4b:ec:06:20:7b:8e:53:48:08:a5:6d:
92:f0:38:64:d0:4c:e3:28:53:da:82:a7:3d:82:e9:
82:31:60:d8:ff:70:3a:9c:b7:84:c9:80:1c:19:05:
e2:21:b8:81:d5:ae:88:c9:7d:de:53:be:64:21:5b:
84:8c:19:e9:8d:4d:fd:e5:98:21:7f:92:c7:b2:63:
f8:f0:13:9a:92:2f:36:c0:67:16:74:14:58:09:9b:
44:0e:23:d3:52:25:3c:2b:b7:4c:d8:9b:18:55:52:
94:8a:e7:43:0a:bb:54:04:90:4d:2e:71:50:d8:d1:
ff:7b:aa:ed:3e:09:84:4c:79:d5:04:52:0e:aa:bd:
ed:e8:42:a6:ad:95:e3:f1:56:2b:17:ed:e9:80:e4:
2f:18:ff:84:47:7b:fc:f7:a2:ac:be:e8:87:73:43:
c0:cc:16:9a:ee:cc:b0:1e:56:91:8c:4d:d6:d5:27:
14:39:0e:5f:10:28:f2:99:a7:37:c1:25:aa:99:a0:
67:b7:03:b8:4c:73:28:d1:68:a1:38:dc:7a:7a:d5:
a3:c0:fe:2f:11:11:e7:e0:55:29:d6:ab:2a:b5:1a:
88:39:cb:63:dd:26:fb:13:c8:6f:e9:19:a0:8f:00:
eb:8e:29:0f:48:03:de:45:20:52:af:46:d2:72:c6:
46:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:EB:5B:7C:E7:93:68:94:44:A5:0B:76:46:A4:C9:C4:B4:2B:77:C5
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/vOtbfOeTaJREpQt2RqTJxLQrd8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:c600::/40
Signature Algorithm: sha256WithRSAEncryption
60:56:d3:d6:15:27:8a:77:11:f3:e7:40:52:4c:aa:a1:2a:56:
f0:4c:07:2a:06:48:6a:78:08:fc:dd:8d:a0:fc:c7:bd:83:b1:
f5:e2:2e:f1:20:7a:1c:f7:8e:67:ff:49:eb:a0:71:af:4d:7e:
19:3e:eb:2f:3e:fa:64:7e:33:6f:dd:c8:ab:db:15:d4:e9:fd:
b0:7c:af:62:23:61:4e:a2:6a:60:58:af:01:b1:b8:ae:71:33:
d4:48:e4:87:d5:8e:a9:70:2b:c7:ed:c6:7f:87:07:63:a4:77:
90:e6:7a:47:c6:51:c9:0b:08:12:ac:17:b1:f6:f4:e3:58:ed:
b5:1b:2f:58:8d:6c:c6:f2:87:18:26:fb:5c:f8:89:d2:2e:41:
ac:ed:8e:2c:16:3d:80:52:9c:3c:03:4e:9d:6b:67:d3:95:36:
65:ac:d9:c8:f1:57:af:d4:de:15:22:75:d7:1e:1b:fd:02:27:
48:48:4d:51:aa:e4:65:6f:44:4f:a7:95:a0:a6:f5:23:2a:33:
55:aa:bc:53:af:cc:79:b5:82:74:83:c1:6b:d2:31:49:34:eb:
12:a0:0c:f1:20:10:fb:5b:ac:2f:cf:2f:b4:6e:13:8c:4f:04:
9e:88:f9:43:aa:f9:a2:cc:0f:c9:14:f9:86:fd:c4:33:2e:e8:
9e:bf:f3:e6
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYTnc0S9lAmoNyt6G0SSW4uAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIxMjA2MTI0MDAxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiY2ViNWI3Y2U3OTM2ODk0NDRhNTBiNzY0NmE0YzljNGI0MmI3N2M1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCCXS+wGIHuOU0gIpW2S8Dhk0Ezj
KFPagqc9gumCMWDY/3A6nLeEyYAcGQXiIbiB1a6IyX3eU75kIVuEjBnpjU395Zgh
f5LHsmP48BOaki82wGcWdBRYCZtEDiPTUiU8K7dM2JsYVVKUiudDCrtUBJBNLnFQ
2NH/e6rtPgmETHnVBFIOqr3t6EKmrZXj8VYrF+3pgOQvGP+ER3v896KsvuiHc0PA
zBaa7sywHlaRjE3W1ScUOQ5fECjymac3wSWqmaBntwO4THMo0WihONx6etWjwP4v
ERHn4FUp1qsqtRqIOctj3Sb7E8hv6RmgjwDrjikPSAPeRSBSr0bScsZGfwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFLzrW3znk2iURKULdkakycS0K3fFMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvdk90YmZPZVRhSlJFcFF0MlJxVEp4TFFyZDhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQMYw
DQYJKoZIhvcNAQELBQADggEBAGBW09YVJ4p3EfPnQFJMqqEqVvBMByoGSGp4CPzd
jaD8x72DsfXiLvEgehz3jmf/Seugca9Nfhk+6y8++mR+M2/dyKvbFdTp/bB8r2Ij
YU6iamBYrwGxuK5xM9RI5IfVjqlwK8ftxn+HB2Okd5DmekfGUckLCBKsF7H29ONY
7bUbL1iNbMbyhxgm+1z4idIuQaztjiwWPYBSnDwDTp1rZ9OVNmWs2cjxV6/U3hUi
ddceG/0CJ0hITVGq5GVvRE+nlaCm9SMqM1WqvFOvzHm1gnSDwWvSMUk06xKgDPEg
EPtbrC/PL7RuE4xPBJ6I+UOq+aLMD8kU+Yb9xDMu6J6/8+Y=
-----END CERTIFICATE-----
Generated at Fri Apr 18 09:59:27 2025 by rpki-client