Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/VnznapuLbgU854QepaNMRcy7slE.roa
File: VnznapuLbgU854QepaNMRcy7slE.roa (raw, json)
Hash identifier: xO9AGQIOzmj85e3e1HQYGbELiS8sOSnZ4/dSdaHAnoY=
Subject key identifier: 56:7C:E7:6A:9B:8B:6E:05:3C:E7:84:1E:A5:A3:4C:45:CC:BB:B2:51
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 0194258EEC21D4400E149AF3B128513A174B
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/VnznapuLbgU854QepaNMRcy7slE.roa
Signing time: Thu 02 Jan 2025 05:48:31 +0000
ROA not before: Thu 02 Jan 2025 05:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213169
IP address blocks: 2a0e:aa07:4000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:ec:21:d4:40:0e:14:9a:f3:b1:28:51:3a:17:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 2 05:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=567ce76a9b8b6e053ce7841ea5a34c45ccbbb251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:fa:94:07:fc:b2:c1:55:bb:cf:57:bc:7a:af:
09:5e:9c:e1:7c:18:26:d0:a7:49:96:fa:2e:d3:10:
be:3d:94:4a:f9:c1:5e:66:9c:a4:75:bd:a7:df:68:
72:f0:d1:2d:c3:5a:d5:b3:f7:c4:9a:72:78:77:bd:
d0:da:4e:86:ae:60:d5:23:ea:8d:21:cf:9f:2c:1e:
03:83:86:2b:7e:2d:10:3c:d9:f4:ca:18:80:23:72:
73:fb:10:c6:86:61:73:65:6c:ac:ec:fd:a8:1e:ca:
a8:9f:e6:e6:c7:e7:6f:fe:e8:d9:14:02:0e:57:aa:
f2:25:46:5b:8d:65:1f:56:f0:21:4e:45:28:95:d7:
6f:bd:9b:2a:a8:24:94:9f:2d:13:a8:01:8e:56:18:
de:89:f0:fc:22:25:47:07:25:80:ca:72:41:f3:bd:
f5:5c:38:b7:86:8c:78:ad:3f:98:8e:e3:48:bc:80:
4f:85:3f:b9:30:83:ad:b4:71:2d:ba:23:ad:2b:0e:
47:e5:a4:06:84:36:8b:d1:3a:ce:dd:5a:0a:be:b5:
6c:b8:9a:b7:bf:15:87:51:99:48:95:f3:df:2e:8f:
d6:36:96:26:18:86:c8:c6:60:fb:86:5d:01:a3:a9:
ef:31:08:74:4e:b2:51:64:fc:f8:c8:88:d1:32:f5:
38:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:7C:E7:6A:9B:8B:6E:05:3C:E7:84:1E:A5:A3:4C:45:CC:BB:B2:51
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/VnznapuLbgU854QepaNMRcy7slE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:4000::/40
Signature Algorithm: sha256WithRSAEncryption
01:0b:51:41:6e:36:85:aa:2b:cc:02:46:38:fe:8d:77:d9:90:
bb:8d:95:92:22:3d:c9:b4:ec:ee:d1:bb:a6:fe:20:44:c1:92:
0e:e9:9a:e2:8e:ec:88:88:c5:f1:4e:79:6b:3e:c5:b7:27:a4:
ff:76:37:30:19:94:71:23:9c:5f:2c:15:07:eb:98:4e:30:08:
db:fc:2b:b1:de:5b:8a:b5:51:e5:fb:7b:4a:90:53:84:ad:c0:
a1:12:1f:ab:77:67:1c:70:ac:80:7b:99:f7:dc:77:24:97:39:
a9:a4:37:b4:45:cc:11:22:b8:c7:3a:00:ed:57:e3:91:a0:96:
30:78:e8:e1:b8:67:e2:16:4f:c8:55:ff:ad:4e:e1:de:2c:35:
ff:35:73:44:fc:e0:9a:db:80:dd:a5:19:c1:27:22:65:99:61:
ba:06:28:28:ad:ae:70:c8:12:21:7b:fe:62:53:75:7a:17:db:
15:54:c9:c3:59:97:b7:54:0b:0f:15:e1:a4:89:2c:f0:ca:95:
9e:6b:1e:27:1e:32:a4:17:63:42:52:12:89:79:6f:f3:0e:96:
56:80:5f:4e:fa:c3:e9:8c:4b:11:84:44:09:08:64:da:92:08:
ed:9a:13:71:37:f3:8e:48:a3:f8:a1:fd:c2:25:07:d9:cf:c7:
3d:9c:d4:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:13:06 2025 by rpki-client