Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/218311-4443-416f-99b6-badd619cf342/1/6g7tkLM4lQCiJjNynxaRdHivmQo.roa
File: 6g7tkLM4lQCiJjNynxaRdHivmQo.roa (raw, json)
Hash identifier: 3bT5E97OtzdBfEyP6VcCVL0RA4N3Zrk7mUBlPcJT8uo=
Subject key identifier: EA:0E:ED:90:B3:38:95:00:A2:26:33:72:9F:16:91:74:78:AF:99:0A
Certificate issuer: /CN=55b1f12ad2c470d8af372c58f4904e4c9fb684b5
Certificate serial: 01318E81
Authority key identifier: 55:B1:F1:2A:D2:C4:70:D8:AF:37:2C:58:F4:90:4E:4C:9F:B6:84:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbHxKtLEcNivNyxY9JBOTJ-2hLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/218311-4443-416f-99b6-badd619cf342/1/6g7tkLM4lQCiJjNynxaRdHivmQo.roa
Signing time: Sat 01 Jan 2022 01:56:59 +0000
ROA not before: Sat 01 Jan 2022 01:56:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48715
IP address blocks: 5.1.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20024961 (0x1318e81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55b1f12ad2c470d8af372c58f4904e4c9fb684b5
Validity
Not Before: Jan 1 01:56:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ea0eed90b3389500a22633729f16917478af990a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1e:39:3f:6a:a7:8a:80:b4:43:6e:bd:4f:3a:
e3:1f:8e:13:57:fd:f9:95:3e:f4:b6:08:e1:1d:16:
00:97:b6:d8:5d:07:f5:c3:02:97:57:e1:12:a8:69:
10:e0:23:ef:9a:c9:59:07:78:ab:42:d2:81:fc:34:
67:e2:19:22:e1:15:80:62:93:3d:5c:17:f8:41:ee:
2a:c8:de:7c:11:a0:35:b5:05:aa:23:05:10:0e:79:
89:3a:d8:cd:b1:9f:79:8b:31:53:2b:13:d0:63:a5:
a8:0b:b8:ef:bb:56:8a:e1:a8:54:42:06:6d:a8:b4:
50:d2:7d:37:cd:a9:7a:18:06:7c:50:e3:83:72:1a:
44:66:67:d8:09:3f:27:f2:18:73:98:44:60:18:ca:
56:4c:df:a2:09:a4:28:9f:d2:d5:d0:e6:92:45:fb:
31:f6:2e:a4:d3:9c:8a:25:58:fa:42:16:63:5c:ac:
86:71:b2:3c:1a:8d:ac:46:a7:3a:eb:8a:53:1c:b6:
96:6d:7b:33:7e:9b:6d:a0:45:a7:8e:2e:00:f8:32:
20:61:47:e4:89:1e:36:f8:97:8e:63:dc:76:29:8f:
e2:2d:8c:38:07:c2:1b:49:22:8e:be:93:7a:57:e2:
dd:61:fc:f0:ea:a3:69:47:98:2e:8e:a0:08:f8:25:
44:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:0E:ED:90:B3:38:95:00:A2:26:33:72:9F:16:91:74:78:AF:99:0A
X509v3 Authority Key Identifier:
keyid:55:B1:F1:2A:D2:C4:70:D8:AF:37:2C:58:F4:90:4E:4C:9F:B6:84:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbHxKtLEcNivNyxY9JBOTJ-2hLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/218311-4443-416f-99b6-badd619cf342/1/6g7tkLM4lQCiJjNynxaRdHivmQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/218311-4443-416f-99b6-badd619cf342/1/VbHxKtLEcNivNyxY9JBOTJ-2hLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.43.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:d6:82:28:a8:47:61:6d:c5:15:b5:94:66:00:13:38:ba:e0:
86:72:b2:ab:68:64:2d:4c:af:1a:1b:b3:7e:41:45:82:61:07:
df:8b:25:30:36:3c:ad:18:a7:e2:04:33:85:91:ef:70:5f:83:
bc:66:01:85:29:81:40:16:f9:e8:fb:72:35:b3:8f:8f:40:4e:
86:07:95:c8:cb:72:a9:00:98:d6:2c:f7:cc:ee:68:99:54:66:
11:4e:ae:21:ee:a7:7a:0f:7a:b2:98:69:59:c4:55:75:0a:bc:
03:77:6a:68:d8:3f:3a:c7:6b:33:b1:c0:f1:d8:ef:d3:8d:20:
9a:ca:03:45:2d:63:57:fc:3b:38:5f:6c:a8:ba:a1:3e:2a:72:
d0:4c:27:98:21:11:d7:2f:35:51:b7:fb:68:18:89:bf:58:69:
b3:81:63:e9:f2:66:69:5d:cb:83:06:81:c9:97:06:60:cb:23:
6b:c5:c4:e1:27:40:d7:a0:ee:d7:3d:f7:a9:b7:58:3f:6f:05:
29:ea:55:57:0e:a4:a3:1b:3a:ab:6c:bc:6f:ba:20:77:e2:62:
b3:1c:38:9f:60:40:a2:cb:b7:49:6b:82:40:a6:02:16:ad:f7:
cb:13:09:34:fe:04:3d:cf:e5:90:52:ab:a7:d7:c9:80:a7:62:
96:91:b2:3e
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEATGOgTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NWIxZjEyYWQyYzQ3MGQ4YWYzNzJjNThmNDkwNGU0YzlmYjY4NGI1MB4XDTIyMDEw
MTAxNTY1OVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZWEwZWVkOTBiMzM4
OTUwMGEyMjYzMzcyOWYxNjkxNzQ3OGFmOTkwYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALgeOT9qp4qAtENuvU864x+OE1f9+ZU+9LYI4R0WAJe22F0H
9cMCl1fhEqhpEOAj75rJWQd4q0LSgfw0Z+IZIuEVgGKTPVwX+EHuKsjefBGgNbUF
qiMFEA55iTrYzbGfeYsxUysT0GOlqAu477tWiuGoVEIGbai0UNJ9N82pehgGfFDj
g3IaRGZn2Ak/J/IYc5hEYBjKVkzfogmkKJ/S1dDmkkX7MfYupNOciiVY+kIWY1ys
hnGyPBqNrEanOuuKUxy2lm17M36bbaBFp44uAPgyIGFH5IkeNviXjmPcdimP4i2M
OAfCG0kijr6Telfi3WH88OqjaUeYLo6gCPglRMUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTqDu2QsziVAKImM3KfFpF0eK+ZCjAfBgNVHSMEGDAWgBRVsfEq0sRw2K83
LFj0kE5Mn7aEtTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ZiSHhLdExFY05pdk55eFk5SkJPVEotMmhMVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZmQvMjE4MzExLTQ0NDMtNDE2Zi05OWI2LWJhZGQ2MTljZjM0Mi8x
LzZnN3RrTE00bFFDaUpqTnlueGFSZEhpdm1Rby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmQv
MjE4MzExLTQ0NDMtNDE2Zi05OWI2LWJhZGQ2MTljZjM0Mi8xL1ZiSHhLdExFY05p
dk55eFk5SkJPVEotMmhMVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAAUBKzANBgkqhkiG9w0BAQsFAAOC
AQEAX9aCKKhHYW3FFbWUZgATOLrghnKyq2hkLUyvGhuzfkFFgmEH34slMDY8rRin
4gQzhZHvcF+DvGYBhSmBQBb56PtyNbOPj0BOhgeVyMtyqQCY1iz3zO5omVRmEU6u
Ie6neg96sphpWcRVdQq8A3dqaNg/OsdrM7HA8djv040gmsoDRS1jV/w7OF9sqLqh
Pipy0EwnmCER1y81Ubf7aBiJv1hps4Fj6fJmaV3LgwaByZcGYMsja8XE4SdA16Du
1z33qbdYP28FKepVVw6koxs6q2y8b7ogd+Jisxw4n2BAosu3SWuCQKYCFq33yxMJ
NP4EPc/lkFKrp9fJgKdilpGyPg==
-----END CERTIFICATE-----
Generated at Thu Apr 17 10:06:14 2025 by rpki-client