Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/RKXVyGrUfPtv94vLXHSHLLMeH8M.roa
File: RKXVyGrUfPtv94vLXHSHLLMeH8M.roa (raw, json)
Hash identifier: 0+6dITx/jffuLMvxsRzEGPpQK/7yDKr/TQTRUIjN3QM=
Subject key identifier: 44:A5:D5:C8:6A:D4:7C:FB:6F:F7:8B:CB:5C:74:87:2C:B3:1E:1F:C3
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0181EDE18831DC95A914A7F22CC2500BBE77
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/RKXVyGrUfPtv94vLXHSHLLMeH8M.roa
Signing time: Mon 11 Jul 2022 15:29:49 +0000
ROA not before: Mon 11 Jul 2022 15:29:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50833
IP address blocks: 2a02:128:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:ed:e1:88:31:dc:95:a9:14:a7:f2:2c:c2:50:0b:be:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jul 11 15:29:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=44a5d5c86ad47cfb6ff78bcb5c74872cb31e1fc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ae:55:f5:a1:93:08:1a:d7:83:b4:76:6e:92:
fb:b4:44:48:48:0f:c9:a3:06:f0:97:bf:44:33:1c:
2d:0c:5d:f0:57:75:2e:7c:f1:b5:99:45:53:b0:19:
70:8f:f3:0c:eb:c7:9d:e5:01:a1:ae:1c:08:11:2e:
bd:f4:49:e4:00:77:ef:88:d8:fd:b5:d9:de:0a:8a:
fb:08:48:39:39:4d:2b:d3:e5:29:10:25:d9:99:5f:
98:a4:26:7b:87:b0:77:7e:b8:20:77:7f:d1:26:00:
0a:3c:d0:7a:a3:96:33:ad:17:51:65:f0:f6:1d:0b:
d7:c4:18:e3:4b:e6:7a:37:6e:51:ba:13:26:17:8d:
83:cb:da:ec:48:36:da:e3:3c:2d:69:91:6a:93:a5:
e5:75:3b:ee:1a:15:42:cc:ea:6b:83:ee:ed:3e:b2:
12:e3:24:b4:9c:31:fc:50:c6:55:96:41:bb:c1:24:
c9:b8:e6:19:4b:1e:09:d7:1e:ce:e2:54:f2:63:85:
56:b3:ce:89:5c:14:63:a7:e7:4d:c4:cf:3d:a5:58:
58:45:c2:d5:64:9f:3e:a3:a9:29:91:84:8e:f1:53:
6c:e2:c8:18:1e:0c:b8:1f:65:53:6e:fa:cc:7b:47:
2d:c7:41:7a:f6:f1:cf:17:56:da:d1:88:11:b1:e2:
fe:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:A5:D5:C8:6A:D4:7C:FB:6F:F7:8B:CB:5C:74:87:2C:B3:1E:1F:C3
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/RKXVyGrUfPtv94vLXHSHLLMeH8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:128:1::/48
Signature Algorithm: sha256WithRSAEncryption
37:a0:52:42:d3:0c:37:ac:3e:21:f0:73:e0:c4:3c:8c:63:ac:
84:cc:46:ad:cd:ff:0a:aa:35:36:56:a9:f4:4e:67:9a:41:91:
20:d9:99:02:39:2c:cb:09:fa:dd:b6:17:48:3e:c3:d7:28:38:
4c:d4:f9:a1:63:a3:29:37:db:92:42:b6:5a:24:82:67:d1:0c:
86:71:ce:36:4c:5c:e7:2f:7e:2b:f9:1e:2e:bc:18:d1:b2:14:
b4:1a:a0:8e:10:c7:37:05:9d:3b:18:29:d1:54:2c:d3:f7:2d:
49:22:46:a7:51:b3:5c:6b:14:b2:15:11:87:db:68:d1:85:6d:
4d:56:27:6d:f9:4a:b8:51:79:de:a1:0e:96:90:55:fc:03:4f:
64:e6:c1:df:f0:69:b9:e6:1c:3b:d9:96:85:7c:4e:5c:8c:6b:
04:4a:d1:17:fa:b5:0b:01:44:57:c2:43:2c:b8:27:6a:f6:73:
2c:b0:75:15:70:4f:30:cc:1b:14:81:ce:79:3f:0d:92:7f:7b:
40:ec:cd:cc:eb:d3:70:44:ed:03:fd:e7:8f:bf:15:3f:77:a7:
1e:c2:e1:25:e0:0b:72:f2:f0:f0:f7:0d:df:bf:d9:59:59:54:
ef:bb:41:c6:81:db:1b:14:9f:81:3d:cd:8f:59:9a:6d:d9:5d:
f4:8f:7b:8b
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYHt4Ygx3JWpFKfyLMJQC753MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjIwNzExMTUyOTQ5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NGE1ZDVjODZhZDQ3Y2ZiNmZmNzhiY2I1Yzc0ODcyY2IzMWUxZmMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2q5V9aGTCBrXg7R2bpL7tERISA/J
owbwl79EMxwtDF3wV3UufPG1mUVTsBlwj/MM68ed5QGhrhwIES699EnkAHfviNj9
tdneCor7CEg5OU0r0+UpECXZmV+YpCZ7h7B3frggd3/RJgAKPNB6o5YzrRdRZfD2
HQvXxBjjS+Z6N25RuhMmF42Dy9rsSDba4zwtaZFqk6XldTvuGhVCzOprg+7tPrIS
4yS0nDH8UMZVlkG7wSTJuOYZSx4J1x7O4lTyY4VWs86JXBRjp+dNxM89pVhYRcLV
ZJ8+o6kpkYSO8VNs4sgYHgy4H2VTbvrMe0ctx0F69vHPF1ba0YgRseL+GwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFESl1chq1Hz7b/eLy1x0hyyzHh/DMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvUktYVnlHclVmUHR2OTR2TFhIU0hMTE1lSDhNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgIBKAAB
MA0GCSqGSIb3DQEBCwUAA4IBAQA3oFJC0ww3rD4h8HPgxDyMY6yEzEatzf8KqjU2
Vqn0TmeaQZEg2ZkCOSzLCfrdthdIPsPXKDhM1PmhY6MpN9uSQrZaJIJn0QyGcc42
TFznL34r+R4uvBjRshS0GqCOEMc3BZ07GCnRVCzT9y1JIkanUbNcaxSyFRGH22jR
hW1NVidt+Uq4UXneoQ6WkFX8A09k5sHf8Gm55hw72ZaFfE5cjGsEStEX+rULAURX
wkMsuCdq9nMssHUVcE8wzBsUgc55Pw2Sf3tA7M3M69NwRO0D/eePvxU/d6cewuEl
4Aty8vDw9w3fv9lZWVTvu0HGgdsbFJ+BPc2PWZpt2V30j3uL
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:29:35 2025 by rpki-client