Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/VcXxL3ApxOvWfIzrZBBPzEDUnGo.roa
File: VcXxL3ApxOvWfIzrZBBPzEDUnGo.roa (raw, json)
Hash identifier: TCQSL30IW5nmSH9ME5qogfonlzyujj5Ikdat+QwCtKY=
Subject key identifier: 55:C5:F1:2F:70:29:C4:EB:D6:7C:8C:EB:64:10:4F:CC:40:D4:9C:6A
Certificate issuer: /CN=6aa8fa75c5020cd6218cf7f109de420265204bac
Certificate serial: 018AAE824F2D87D2DC85C70C2C9DCD0DBE12
Authority key identifier: 6A:A8:FA:75:C5:02:0C:D6:21:8C:F7:F1:09:DE:42:02:65:20:4B:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/VcXxL3ApxOvWfIzrZBBPzEDUnGo.roa
Signing time: Tue 19 Sep 2023 17:34:50 +0000
ROA not before: Tue 19 Sep 2023 17:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202525
IP address blocks: 2001:67c:c00::/48 maxlen: 48
2a13:d040::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ae:82:4f:2d:87:d2:dc:85:c7:0c:2c:9d:cd:0d:be:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aa8fa75c5020cd6218cf7f109de420265204bac
Validity
Not Before: Sep 19 17:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=55c5f12f7029c4ebd67c8ceb64104fcc40d49c6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9e:af:87:b3:23:b0:20:ca:29:86:2d:b9:54:
a6:c3:b6:fc:a9:41:d8:ed:f4:c1:4f:15:06:a7:bb:
52:9b:0d:fa:5c:93:fd:28:06:12:9f:86:6b:02:16:
2f:16:fd:4d:5e:df:05:a2:fc:f4:0e:09:3a:6b:78:
1e:bb:4b:9f:01:66:fa:15:b1:cc:c4:ca:ef:61:3e:
36:3b:4a:67:9e:ff:42:9f:b7:6c:0d:aa:f0:6d:da:
2a:fa:28:38:8b:cc:63:38:dc:00:a3:10:bb:f0:6e:
e1:b4:c5:c0:25:61:8e:3e:17:73:df:95:d6:2a:4b:
e9:f6:5d:ff:14:a7:89:7d:bf:38:41:31:fa:c0:46:
b4:35:ec:81:db:1d:04:00:54:0d:b3:bd:7a:eb:84:
64:cb:8a:46:f0:ed:47:7e:b4:f1:35:9a:01:84:4a:
e8:3e:1f:52:52:87:7f:93:07:be:4b:2f:9a:7e:ef:
c7:eb:e4:b5:20:eb:6c:fe:68:68:c1:c3:0c:4d:ac:
49:42:df:b4:3c:dd:61:af:76:e9:93:23:b4:92:c2:
6e:1e:ee:54:07:06:ff:18:ee:c2:e4:df:04:be:ad:
88:2c:69:33:b6:29:86:d9:c6:b8:61:81:64:d9:ad:
92:7f:49:1c:11:4b:e2:d9:a8:59:52:86:4d:8e:18:
0f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:C5:F1:2F:70:29:C4:EB:D6:7C:8C:EB:64:10:4F:CC:40:D4:9C:6A
X509v3 Authority Key Identifier:
keyid:6A:A8:FA:75:C5:02:0C:D6:21:8C:F7:F1:09:DE:42:02:65:20:4B:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/VcXxL3ApxOvWfIzrZBBPzEDUnGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:c00::/48
2a13:d040::/48
Signature Algorithm: sha256WithRSAEncryption
0a:80:34:f9:31:db:08:f8:c7:5f:22:a5:95:88:cd:00:29:fe:
58:f0:1e:2b:f3:ad:f9:e4:30:5a:b7:5d:0b:52:2d:92:cc:cf:
04:0f:e1:1c:66:f4:fb:a8:6e:9b:74:49:88:97:55:f4:ff:5a:
c9:9e:c7:31:05:b7:da:c3:7f:82:05:99:a3:b5:c2:cb:81:43:
41:75:bc:fc:36:b6:d3:50:61:58:80:06:ad:66:97:60:d5:ac:
a5:83:1a:84:2d:f7:2f:88:5a:c6:df:2f:95:0a:86:3e:56:8b:
40:53:74:12:db:10:c9:fb:02:97:5e:ad:e4:c9:a5:d1:35:2e:
af:48:e8:c7:d7:fe:25:6f:60:0d:cb:32:05:8a:15:c6:02:e8:
9e:84:ab:8a:6c:aa:0f:e5:62:37:eb:9c:5c:6e:31:f3:bd:24:
4b:8f:05:cd:f6:46:f1:39:0c:f4:a4:76:45:e2:b3:58:46:c9:
10:d5:81:16:74:f0:c1:32:08:1e:2e:4a:9a:da:cf:04:0e:86:
d0:1b:89:98:d0:3b:3c:1f:4d:44:89:db:2a:4a:43:a2:c0:d1:
e3:e6:19:93:0a:6c:60:3d:ed:c9:92:48:c0:78:7c:d6:0b:6e:
04:bf:73:22:9e:b7:b7:9d:85:c0:22:c7:ed:8e:fa:5c:3f:4f:
72:84:c0:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:24:27 2025 by rpki-client