Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/yqRnTWWYeRozHTTlr4kuLpZwgUQ.roa
File: yqRnTWWYeRozHTTlr4kuLpZwgUQ.roa (raw, json)
Hash identifier: XXuULMNRZEyfrpStEOXj4Jr0vz/JCT1L7B3roBntjAc=
Subject key identifier: CA:A4:67:4D:65:98:79:1A:33:1D:34:E5:AF:89:2E:2E:96:70:81:44
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0182DCD177147F9650EBC99115847D6283D7
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/yqRnTWWYeRozHTTlr4kuLpZwgUQ.roa
Signing time: Sat 27 Aug 2022 01:01:31 +0000
ROA not before: Sat 27 Aug 2022 01:01:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210152
IP address blocks: 2a06:a005:17f0::/44 maxlen: 48
2a06:a005:1880::/44 maxlen: 48
2a06:a005:1290::/44 maxlen: 48
2a06:a005:1890::/44 maxlen: 48
2a06:a005:1870::/44 maxlen: 48
2a07:54c2:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:dc:d1:77:14:7f:96:50:eb:c9:91:15:84:7d:62:83:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Aug 27 01:01:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=caa4674d6598791a331d34e5af892e2e96708144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:7a:b7:93:b7:3b:96:25:27:97:16:72:ae:a3:
22:c9:22:13:bf:36:02:0e:e2:2f:f0:7d:8f:a1:36:
2c:5e:14:17:5d:da:8f:53:c8:96:ea:e3:91:40:ed:
3e:07:e1:02:7c:da:c9:01:9b:39:2d:f2:3e:e1:26:
6e:6b:1c:12:c3:1d:65:c4:a0:b5:4b:f6:ba:7a:8f:
6f:a1:84:f7:be:e9:87:a3:94:ba:4c:95:82:80:0a:
9d:b2:2b:f8:a0:33:ff:27:ab:81:78:f7:96:ca:85:
4d:bb:25:78:c0:b7:36:dc:e7:21:59:e9:28:35:ad:
e8:3a:92:ff:6e:ae:45:9c:e7:79:47:62:2c:3a:3b:
16:77:96:e0:ec:9b:a7:5b:40:d3:5d:9e:3d:01:27:
b8:16:fc:81:f0:80:19:61:11:99:6a:05:86:96:30:
d0:92:83:37:f6:ef:3d:05:5a:66:8b:6f:5e:2b:a3:
ef:5c:83:53:21:03:4f:3d:74:6c:ef:e0:ac:70:b2:
76:e4:35:d3:9a:86:9e:26:12:bb:60:06:17:74:78:
e3:22:c4:5e:11:41:f2:2f:c0:4b:d1:ca:6b:96:eb:
29:93:85:6b:cf:d8:0b:4d:36:e8:de:de:c4:ca:96:
fc:b0:4e:e0:aa:ba:d9:3b:08:d8:c1:55:a8:d9:01:
ba:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:A4:67:4D:65:98:79:1A:33:1D:34:E5:AF:89:2E:2E:96:70:81:44
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/yqRnTWWYeRozHTTlr4kuLpZwgUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1290::/44
2a06:a005:17f0::/44
2a06:a005:1870::-2a06:a005:189f:ffff:ffff:ffff:ffff:ffff
2a07:54c2:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
04:f1:bb:e6:d0:fb:b9:2a:8a:90:fb:f0:18:94:80:58:ad:09:
3c:ed:a2:5b:5a:fd:fc:cc:9b:ff:7b:60:80:39:9d:1d:1c:bc:
c8:82:0a:99:e2:3f:df:1b:07:eb:b8:3a:ce:c2:3c:2c:1f:06:
3d:2e:2c:46:5e:83:e8:ce:cb:52:47:9b:26:bc:ac:1a:5c:25:
3e:ca:3c:98:73:2d:0e:67:87:f1:5c:25:25:8d:e4:8e:6c:42:
82:12:e1:4e:e2:d9:a0:20:a1:39:a5:b2:28:20:75:f0:51:9a:
bb:c2:2b:bc:72:9f:ee:73:02:07:5e:0d:3a:cb:d3:f3:50:60:
16:4e:d6:1b:fa:42:43:d0:48:98:19:70:71:ef:f7:0e:3f:56:
7f:90:12:d7:a6:c4:20:8b:2f:27:26:a4:ba:a3:92:87:c2:3f:
52:35:36:6d:a4:bb:91:50:66:e6:a5:4e:42:8a:15:0d:87:60:
be:95:54:14:d2:83:e2:e1:68:73:93:9d:99:d5:ab:79:02:06:
f1:d9:72:0b:2d:5e:9c:2d:9a:9d:46:d8:e4:3c:67:fe:84:58:
19:07:07:01:4c:40:1d:ee:44:b2:80:0a:e3:2b:1c:cc:fa:fc:
3d:0f:3e:d0:ab:a9:68:7c:54:c1:29:e1:6e:1c:f5:21:20:a7:
6f:4f:77:33
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgISAYLc0XcUf5ZQ68mRFYR9YoPXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIwODI3MDEwMTMxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYWE0Njc0ZDY1OTg3OTFhMzMxZDM0ZTVhZjg5MmUyZTk2NzA4MTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXq3k7c7liUnlxZyrqMiySITvzYC
DuIv8H2PoTYsXhQXXdqPU8iW6uORQO0+B+ECfNrJAZs5LfI+4SZuaxwSwx1lxKC1
S/a6eo9voYT3vumHo5S6TJWCgAqdsiv4oDP/J6uBePeWyoVNuyV4wLc23OchWeko
Na3oOpL/bq5FnOd5R2IsOjsWd5bg7JunW0DTXZ49ASe4FvyB8IAZYRGZagWGljDQ
koM39u89BVpmi29eK6PvXINTIQNPPXRs7+CscLJ25DXTmoaeJhK7YAYXdHjjIsRe
EUHyL8BL0cprluspk4Vrz9gLTTbo3t7Eypb8sE7gqrrZOwjYwVWo2QG6aQIDAQAB
o4ICMjCCAi4wHQYDVR0OBBYEFMqkZ01lmHkaMx005a+JLi6WcIFEMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEveXFSblRXV1llUm96SFRUbHI0a3VMcFp3Z1VRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzA1BAIAAjAvAwcEKgagBRKQ
AwcEKgagBRfwMBIDBwQqBqAFGHADBwUqBqAFGIADBwAqB1TCsAswDQYJKoZIhvcN
AQELBQADggEBAATxu+bQ+7kqipD78BiUgFitCTztolta/fzMm/97YIA5nR0cvMiC
CpniP98bB+u4Os7CPCwfBj0uLEZeg+jOy1JHmya8rBpcJT7KPJhzLQ5nh/FcJSWN
5I5sQoIS4U7i2aAgoTmlsiggdfBRmrvCK7xyn+5zAgdeDTrL0/NQYBZO1hv6QkPQ
SJgZcHHv9w4/Vn+QEtemxCCLLycmpLqjkofCP1I1Nm2ku5FQZualTkKKFQ2HYL6V
VBTSg+LhaHOTnZnVq3kCBvHZcgstXpwtmp1G2OQ8Z/6EWBkHBwFMQB3uRLKACuMr
HMz6/D0PPtCrqWh8VMEp4W4c9SEgp29PdzM=
-----END CERTIFICATE-----
Generated at Fri Apr 18 10:17:18 2025 by rpki-client