Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/vP1ZFahYfPOCUP9dBAgEitknA28.roa
File: vP1ZFahYfPOCUP9dBAgEitknA28.roa (raw, json)
Hash identifier: JL8afjFDZ4jHOGEdkwKaHLQMDbz7w/W8t1KLeWNpR/8=
Subject key identifier: BC:FD:59:15:A8:58:7C:F3:82:50:FF:5D:04:08:04:8A:D9:27:03:6F
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 01944BFB2B8B047645CA45A5489861F0E5C7
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/vP1ZFahYfPOCUP9dBAgEitknA28.roa
Signing time: Thu 09 Jan 2025 16:52:19 +0000
ROA not before: Thu 09 Jan 2025 16:52:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216183
IP address blocks: 2a03:5840:800::/37 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4b:fb:2b:8b:04:76:45:ca:45:a5:48:98:61:f0:e5:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: Jan 9 16:52:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bcfd5915a8587cf38250ff5d0408048ad927036f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5a:60:7c:e1:7a:57:71:5f:52:77:18:e4:1b:
90:a9:cf:7f:ab:08:f0:25:29:d2:0e:8e:aa:8d:97:
a1:ff:8b:38:13:40:da:be:2d:96:01:e0:fc:39:e2:
61:03:34:62:19:10:60:d8:31:cd:08:34:03:8a:47:
80:9a:e3:56:8c:ec:ff:f2:45:b1:88:29:6b:db:f9:
d8:12:ca:be:ba:70:08:d1:dd:70:d0:df:8b:b9:e4:
53:72:e2:bc:da:49:5a:a1:ca:c9:dd:e6:84:bd:7b:
fc:32:b0:c4:f1:e3:19:f8:40:50:33:6e:96:4c:76:
2e:c0:f7:88:88:0c:fc:c7:ea:6f:13:0e:98:84:56:
14:fe:9f:35:61:f5:3f:bf:5c:2f:06:e4:fc:6b:43:
3d:65:ac:5c:c7:80:ef:7e:2d:58:30:ae:57:6c:2b:
60:e2:98:43:83:ff:52:62:5e:cb:48:20:30:95:c9:
fd:02:0b:5c:64:a3:d7:7c:5b:f1:7c:f1:38:ac:1d:
3b:c2:47:86:95:1c:ad:d3:ce:be:e7:22:9f:3d:bf:
6f:f9:39:69:f4:c7:b5:c6:00:fc:0e:64:7b:d9:c6:
90:54:04:70:aa:dd:e6:39:17:f2:98:49:78:fd:01:
46:69:8a:6b:55:46:e4:9d:28:65:3b:0a:52:ce:c6:
7f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:FD:59:15:A8:58:7C:F3:82:50:FF:5D:04:08:04:8A:D9:27:03:6F
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/vP1ZFahYfPOCUP9dBAgEitknA28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5840:800::/37
Signature Algorithm: sha256WithRSAEncryption
46:cb:d9:71:d1:76:8b:f4:74:25:52:6f:17:56:d1:3f:ba:fa:
09:6d:f6:90:b5:86:a6:a1:a5:c3:ed:ee:7e:f8:5e:a4:f1:2d:
19:a9:2e:d7:b5:7c:ec:14:bb:95:74:69:95:4f:15:20:fd:2e:
eb:90:e5:53:75:f1:cb:25:94:30:b6:f1:40:a0:f7:1c:0e:e8:
ec:01:83:29:f0:38:0c:32:53:48:a1:f0:8d:b5:2e:5e:97:b8:
e1:36:f0:51:4b:b2:a6:59:38:4a:06:a2:99:f3:ac:c7:51:6c:
ae:ab:c6:61:51:27:85:e7:89:8b:f6:f0:30:d8:0c:ed:54:79:
48:5e:41:d1:ca:a9:23:15:a2:6e:f2:60:5b:0f:6d:8b:06:d1:
f0:f7:7e:0b:31:11:31:ec:be:04:98:34:42:dd:96:ae:e4:9d:
5f:a2:4c:bd:fe:bf:5b:e0:2a:19:08:c2:5e:4d:3a:8c:83:b5:
93:74:7d:8f:32:95:37:4e:a0:71:0c:87:42:e6:f4:8b:08:cd:
cd:b5:91:1a:1c:5f:62:97:e0:25:69:4c:79:4b:b2:db:1c:6a:
07:ef:9e:fd:ee:5d:b1:ee:77:7d:e2:89:50:ea:1f:76:ea:a4:
4d:61:d1:91:16:e4:b7:f5:4e:c7:2e:ab:58:4a:83:f2:ed:a7:
db:7e:29:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 07:39:45 2025 by rpki-client