Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/yz3PR5LXXXKStRA2IhML8ohuHEo.roa
File: yz3PR5LXXXKStRA2IhML8ohuHEo.roa (raw, json)
Hash identifier: RE0mWNB+E0Wj9O4LRrPljbWiAQVwfSd7qEfHwV6V/QQ=
Subject key identifier: CB:3D:CF:47:92:D7:5D:72:92:B5:10:36:22:13:0B:F2:88:6E:1C:4A
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0184660415E2D94750696722C2B3F44A0F9F
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/yz3PR5LXXXKStRA2IhML8ohuHEo.roa
Signing time: Fri 11 Nov 2022 09:27:34 +0000
ROA not before: Fri 11 Nov 2022 09:27:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44570
IP address blocks: 2a06:a004::/32 maxlen: 48
2a06:a000::/32 maxlen: 48
2a06:1280:1000::/36 maxlen: 48
2a06:a003::/32 maxlen: 48
2a06:a005::/32 maxlen: 48
2a06:a005:18b0::/44 maxlen: 48
2a06:a005:1a70::/44 maxlen: 48
2a07:54c2:b00b::/48 maxlen: 48
2a05:dfc7:1300::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:66:04:15:e2:d9:47:50:69:67:22:c2:b3:f4:4a:0f:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Nov 11 09:27:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cb3dcf4792d75d7292b5103622130bf2886e1c4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ba:3e:92:36:69:5b:b8:87:03:5f:5d:81:4d:
52:7d:79:62:2e:bf:5d:9e:94:c1:aa:ee:03:86:bc:
54:b2:12:d7:21:6c:69:5f:8e:fd:d2:32:a0:ff:31:
47:e9:41:66:c2:d3:fd:c6:1b:ef:8b:7d:6f:ee:b5:
e1:2e:13:e3:1d:c3:10:24:51:1a:fe:62:95:38:6b:
37:6d:f1:56:2a:ba:31:ef:ff:66:bb:fa:7f:d2:fc:
bc:97:c9:5b:9c:88:35:49:9a:67:e2:b1:a0:77:2c:
8b:f4:d2:a4:f4:cd:34:2c:61:25:48:4d:65:02:62:
34:d4:65:3d:1e:69:03:cd:73:b9:3d:18:36:bc:41:
42:e2:34:17:84:89:be:fe:0a:f0:82:12:04:fa:0f:
cd:df:c0:67:85:07:39:08:fb:aa:bc:c3:d4:b6:f6:
7e:33:ae:38:7c:57:3c:da:df:c0:95:7d:97:55:67:
6b:4b:9d:d6:42:c3:75:01:0b:de:28:c3:8c:58:17:
8a:3f:26:26:26:47:fe:d1:8c:ae:6a:3f:42:85:9d:
f4:e1:03:44:ae:11:38:5c:5a:98:05:d7:a2:4f:a9:
d5:2c:43:1a:08:eb:b1:b4:37:7a:0a:44:cd:94:d3:
08:a5:9a:9e:e0:8f:7a:25:6d:35:a8:4e:b1:9e:98:
62:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:3D:CF:47:92:D7:5D:72:92:B5:10:36:22:13:0B:F2:88:6E:1C:4A
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/yz3PR5LXXXKStRA2IhML8ohuHEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc7:1300::/40
2a06:1280:1000::/36
2a06:a000::/32
2a06:a003::-2a06:a005:ffff:ffff:ffff:ffff:ffff:ffff
2a07:54c2:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
0c:38:a6:0b:1e:f8:af:a6:39:6c:4f:65:e7:f3:9b:53:32:c9:
8f:f7:85:51:c9:d0:a0:d0:e3:6b:ec:b5:8e:73:67:9e:18:d6:
d3:54:04:2f:3d:db:8d:c2:55:f8:c9:8e:bd:e9:8c:c6:59:a0:
9b:42:eb:75:5e:c1:a6:eb:d6:f0:a4:ac:5a:e5:a4:5e:6a:81:
9e:6e:50:61:5e:42:5e:49:e4:c0:78:9a:56:0c:f2:93:63:70:
09:09:b2:c2:25:da:a7:f3:e2:f8:65:5c:04:e2:79:5c:c5:a5:
18:4f:25:04:92:b9:1e:c9:df:6d:7c:72:3d:32:3c:35:cb:3e:
08:7e:4b:df:dc:f2:b0:91:66:09:77:78:a5:cd:08:e2:1c:86:
09:19:e0:f5:4d:22:27:6f:bb:83:8f:cb:20:8d:1a:d5:45:a6:
90:45:3d:3e:2a:76:e3:8c:f2:a7:00:da:8d:64:3d:9f:33:26:
f5:88:d1:c3:bc:28:5c:a5:85:85:d7:6b:e7:13:35:e9:75:fa:
6d:4c:fa:61:fd:ef:04:6d:e4:23:29:d2:3a:cc:87:0e:af:1d:
45:93:19:69:ee:99:a6:e0:2c:0c:63:c0:39:21:64:f1:0e:c9:
db:63:a8:d0:8f:68:ce:68:59:15:88:5c:e9:5e:12:31:c1:43:
83:28:04:e8
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAYRmBBXi2UdQaWciwrP0Sg+fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIxMTExMDkyNzM0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYjNkY2Y0NzkyZDc1ZDcyOTJiNTEwMzYyMjEzMGJmMjg4NmUxYzRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Lo+kjZpW7iHA19dgU1SfXliLr9d
npTBqu4DhrxUshLXIWxpX4790jKg/zFH6UFmwtP9xhvvi31v7rXhLhPjHcMQJFEa
/mKVOGs3bfFWKrox7/9mu/p/0vy8l8lbnIg1SZpn4rGgdyyL9NKk9M00LGElSE1l
AmI01GU9HmkDzXO5PRg2vEFC4jQXhIm+/grwghIE+g/N38BnhQc5CPuqvMPUtvZ+
M644fFc82t/AlX2XVWdrS53WQsN1AQveKMOMWBeKPyYmJkf+0Yyuaj9ChZ304QNE
rhE4XFqYBdeiT6nVLEMaCOuxtDd6CkTNlNMIpZqe4I96JW01qE6xnphi/wIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFMs9z0eS111ykrUQNiITC/KIbhxKMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEveXozUFI1TFhYWEtTdFJBMkloTUw4b2h1SEVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAAjAwAwYAKgXfxxMD
BgQqBhKAEAMFACoGoAAwDgMFACoGoAMDBQEqBqAEAwcAKgdUwrALMA0GCSqGSIb3
DQEBCwUAA4IBAQAMOKYLHvivpjlsT2Xn85tTMsmP94VRydCg0ONr7LWOc2eeGNbT
VAQvPduNwlX4yY696YzGWaCbQut1XsGm69bwpKxa5aReaoGeblBhXkJeSeTAeJpW
DPKTY3AJCbLCJdqn8+L4ZVwE4nlcxaUYTyUEkrkeyd9tfHI9Mjw1yz4Ifkvf3PKw
kWYJd3ilzQjiHIYJGeD1TSInb7uDj8sgjRrVRaaQRT0+KnbjjPKnANqNZD2fMyb1
iNHDvChcpYWF12vnEzXpdfptTPph/e8EbeQjKdI6zIcOrx1Fkxlp7pmm4CwMY8A5
IWTxDsnbY6jQj2jOaFkViFzpXhIxwUODKATo
-----END CERTIFICATE-----
Generated at Fri Apr 18 10:10:59 2025 by rpki-client