Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/VGtHDHjfnnKH4ORKfcvq_vEjMZY.roa
File: VGtHDHjfnnKH4ORKfcvq_vEjMZY.roa (raw, json)
Hash identifier: 8oGzS7tO6IGlzDVZHi8RqQE5tg13JYKNj4X5zwqbMPk=
Subject key identifier: 54:6B:47:0C:78:DF:9E:72:87:E0:E4:4A:7D:CB:EA:FE:F1:23:31:96
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 0194258EE7D7A79E881C4CB6F6C235A1CB0F
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/VGtHDHjfnnKH4ORKfcvq_vEjMZY.roa
Signing time: Thu 02 Jan 2025 05:48:29 +0000
ROA not before: Thu 02 Jan 2025 05:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211843
IP address blocks: 2a0e:aa07:e01b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:e7:d7:a7:9e:88:1c:4c:b6:f6:c2:35:a1:cb:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 2 05:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=546b470c78df9e7287e0e44a7dcbeafef1233196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:31:0d:d8:5d:ce:04:03:4e:1e:02:ec:9d:b2:
54:0f:b2:b7:3e:4c:ab:9d:b9:4a:8c:78:3b:1a:92:
b1:d4:a3:ba:5e:7f:3b:26:b2:6d:42:38:c2:5e:c8:
62:01:ba:bf:cd:db:30:33:0c:79:be:01:36:af:bb:
33:83:6e:db:3b:a6:0d:fc:3e:81:58:72:e3:03:37:
ea:ae:ea:14:b7:d5:46:44:51:ae:8b:bf:54:fd:1a:
95:c6:ea:63:01:8e:74:0a:84:96:d8:80:ae:cb:be:
e2:81:47:f7:05:25:bf:2c:55:b0:82:a3:9b:48:f3:
33:4d:f3:72:a0:50:4a:e9:56:b1:d3:c0:c1:5e:54:
e2:17:e3:1e:8a:e2:b1:97:11:29:5d:d7:c9:c4:98:
8b:36:dd:fc:19:ef:71:b4:a6:88:68:d3:88:d6:fd:
c4:be:87:45:09:f8:ba:8c:dc:60:30:24:d1:f9:44:
12:67:9b:54:ab:91:c7:73:f8:05:00:d9:0b:58:42:
b3:6e:14:6f:7e:61:e9:d0:0d:dd:4b:b8:a0:76:f3:
8c:0a:4e:ee:08:c4:cc:9d:bf:4b:9b:25:d0:01:37:
d5:78:16:b5:0d:67:ec:85:9d:e7:85:35:ce:2c:9c:
20:c4:1f:53:27:b1:2d:8f:10:53:1a:72:31:34:5b:
43:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:6B:47:0C:78:DF:9E:72:87:E0:E4:4A:7D:CB:EA:FE:F1:23:31:96
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/VGtHDHjfnnKH4ORKfcvq_vEjMZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e01b::/48
Signature Algorithm: sha256WithRSAEncryption
4c:b6:ef:3b:dc:e6:c2:ce:6c:0b:b7:2b:31:0e:34:3a:9a:c3:
a5:3b:21:cb:d7:dd:2d:a6:a7:e8:31:4f:e5:09:c0:14:7a:01:
6d:68:58:b2:7d:83:17:6c:9a:a2:d9:ba:49:53:67:19:74:89:
5d:74:e0:87:1c:c2:24:ac:fa:88:de:b0:be:32:f0:e2:83:3a:
d8:43:64:d6:f6:48:7b:e1:11:80:b2:97:cf:c9:4d:8a:f2:89:
6e:4f:e7:ec:34:f6:c4:1c:1c:0a:5e:70:74:55:d0:5e:3c:eb:
b9:a1:f8:24:32:0a:9a:a9:8b:b1:70:98:f0:9c:32:6f:8f:51:
d7:fb:60:16:5d:1c:65:72:7c:1d:36:f7:c5:a1:1d:8e:dd:95:
fc:e7:e1:fc:26:5e:e3:20:83:67:39:18:a7:90:68:52:a2:28:
1e:a7:11:8d:96:6a:6a:0f:af:1b:27:d7:6d:96:15:f9:41:8e:
c5:ff:c7:80:71:e5:b3:ce:09:95:4c:ab:e5:22:8f:d8:a4:4a:
d6:fa:92:45:1f:59:bd:d3:e6:ae:6e:7f:46:70:6b:64:b7:41:
7a:3d:52:f4:93:3b:20:d4:cc:da:b9:db:17:73:e9:eb:db:2d:
f1:ab:ee:0a:6c:ce:5e:3c:f7:72:f9:2a:1d:c3:ed:0a:23:45:
2e:bb:2a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:04:15 2025 by rpki-client