Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/PBDkC4SbPTysw62GDgb0q2MWSxk.roa
File: PBDkC4SbPTysw62GDgb0q2MWSxk.roa (raw, json)
Hash identifier: yZ+3bhqdipnXMhqnOuP/eSOeVYyjF7tE9VO8kfVLbHk=
Subject key identifier: 3C:10:E4:0B:84:9B:3D:3C:AC:C3:AD:86:0E:06:F4:AB:63:16:4B:19
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0183F2682A54F7628FD4A229DFBE0B5B25FD
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/PBDkC4SbPTysw62GDgb0q2MWSxk.roa
Signing time: Wed 19 Oct 2022 22:40:56 +0000
ROA not before: Wed 19 Oct 2022 22:40:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1018
IP address blocks: 2a06:a005:5f8::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f2:68:2a:54:f7:62:8f:d4:a2:29:df:be:0b:5b:25:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Oct 19 22:40:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3c10e40b849b3d3cacc3ad860e06f4ab63164b19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:dd:32:8a:9a:d1:83:56:eb:1e:49:ce:64:32:
d0:c1:5a:71:59:30:f7:2a:c1:7e:9c:bf:2c:8e:6e:
a6:65:45:04:d5:2f:ea:9b:28:9d:02:57:1c:c2:38:
9a:55:d8:39:f6:90:1f:7a:e5:bd:ec:89:14:bf:7d:
83:6d:06:7b:61:d3:ec:ae:b8:1c:2d:56:70:dd:a7:
68:91:aa:79:a2:98:9e:81:07:94:e1:31:f0:03:be:
24:0d:19:df:18:ff:16:47:0d:d5:21:78:fb:db:28:
97:1c:98:0f:01:91:02:09:68:6b:41:e1:cb:65:65:
6c:b6:03:05:6d:66:88:4c:48:54:0d:05:d3:8f:b5:
a6:e0:23:17:c7:7c:43:b3:fb:ae:ed:59:6c:fa:03:
6f:84:19:3f:fe:fa:d3:4a:17:4a:8b:fa:01:19:7f:
90:4d:d5:43:f6:6c:53:18:13:a2:47:5f:db:f1:7a:
6f:a5:c4:04:2a:5a:05:6a:32:4c:22:b5:eb:97:db:
26:82:fd:39:3e:2a:9d:98:9e:07:90:4e:92:69:44:
5c:08:90:f8:3c:03:57:c2:4f:9f:c2:fe:54:6e:b7:
10:b0:25:0b:23:5e:64:1c:ee:c2:16:f6:fa:5b:10:
27:3c:83:ea:96:e2:67:90:03:aa:bd:2f:a4:27:a9:
2a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:10:E4:0B:84:9B:3D:3C:AC:C3:AD:86:0E:06:F4:AB:63:16:4B:19
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/PBDkC4SbPTysw62GDgb0q2MWSxk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5f8::/48
Signature Algorithm: sha256WithRSAEncryption
29:d1:9e:29:ce:a1:4c:3b:08:42:91:62:85:d5:55:fb:74:bc:
49:64:9e:f8:74:82:a4:88:bc:53:83:ec:90:0d:2b:8e:02:73:
3d:ad:e7:39:0f:51:b8:30:7f:1d:af:18:c5:97:e4:a5:59:e0:
14:08:bb:90:a3:22:5c:a0:12:d0:bc:00:78:83:73:f5:74:f7:
dc:78:42:7a:81:fa:43:3b:d9:ac:7c:53:7a:f0:5c:15:ca:5b:
32:0e:eb:8b:0a:c6:74:fc:a5:3a:b8:0a:89:49:14:6a:d3:a3:
bd:fb:51:49:d9:44:9a:ed:f3:65:fb:65:37:f2:4c:71:6b:6e:
9e:72:5c:ab:ef:66:03:fa:dd:8e:23:d8:65:23:27:fb:03:0a:
19:15:5d:b1:5e:87:06:0d:0f:7f:10:0e:10:2f:b4:43:34:78:
eb:33:8e:c0:9d:44:5b:0d:4d:8f:b2:31:ab:b3:4b:2e:9e:12:
41:81:7c:3b:64:26:e8:49:4a:ce:fa:f2:0f:d7:1b:9f:14:a7:
d6:ce:30:e1:59:89:15:98:dd:74:25:3c:53:35:6e:2a:fc:38:
65:9d:38:7e:72:7b:ea:73:1a:05:c4:18:e8:d7:a7:2a:0b:64:
d9:18:0a:3a:15:8d:5f:e8:36:ed:54:38:14:68:5b:34:ef:9d:
46:35:02:35
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYPyaCpU92KP1KIp374LWyX9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIxMDE5MjI0MDU2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYzEwZTQwYjg0OWIzZDNjYWNjM2FkODYwZTA2ZjRhYjYzMTY0YjE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAid0yiprRg1brHknOZDLQwVpxWTD3
KsF+nL8sjm6mZUUE1S/qmyidAlccwjiaVdg59pAfeuW97IkUv32DbQZ7YdPsrrgc
LVZw3adokap5opiegQeU4THwA74kDRnfGP8WRw3VIXj72yiXHJgPAZECCWhrQeHL
ZWVstgMFbWaITEhUDQXTj7Wm4CMXx3xDs/uu7Vls+gNvhBk//vrTShdKi/oBGX+Q
TdVD9mxTGBOiR1/b8XpvpcQEKloFajJMIrXrl9smgv05PiqdmJ4HkE6SaURcCJD4
PANXwk+fwv5UbrcQsCULI15kHO7CFvb6WxAnPIPqluJnkAOqvS+kJ6kqGwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFDwQ5AuEmz08rMOthg4G9KtjFksZMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvUEJEa0M0U2JQVHlzdzYyR0RnYjBxMk1XU3hrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgagBQX4
MA0GCSqGSIb3DQEBCwUAA4IBAQAp0Z4pzqFMOwhCkWKF1VX7dLxJZJ74dIKkiLxT
g+yQDSuOAnM9rec5D1G4MH8drxjFl+SlWeAUCLuQoyJcoBLQvAB4g3P1dPfceEJ6
gfpDO9msfFN68FwVylsyDuuLCsZ0/KU6uAqJSRRq06O9+1FJ2USa7fNl+2U38kxx
a26eclyr72YD+t2OI9hlIyf7AwoZFV2xXocGDQ9/EA4QL7RDNHjrM47AnURbDU2P
sjGrs0sunhJBgXw7ZCboSUrO+vIP1xufFKfWzjDhWYkVmN10JTxTNW4q/DhlnTh+
cnvqcxoFxBjo16cqC2TZGAo6FY1f6DbtVDgUaFs0751GNQI1
-----END CERTIFICATE-----
Generated at Thu May 1 21:58:15 2025 by rpki-client