Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a58aca-3f1e-4d41-88e4-d42fc2b6ea30/1/vq0g7PK10a7TVSQb5dn9cWavSkk.roa
File: vq0g7PK10a7TVSQb5dn9cWavSkk.roa (raw, json)
Hash identifier: PRVymwIoWb/U4ZrJ6zSmAyhzGvTlQjYfEK58rUwjheo=
Subject key identifier: BE:AD:20:EC:F2:B5:D1:AE:D3:55:24:1B:E5:D9:FD:71:66:AF:4A:49
Certificate issuer: /CN=d9da0f7360cf69dad7d04dacddf417b41fee98ad
Certificate serial: 0191E14FCCCBD59C2BA3F40CC45F87D426BD
Authority key identifier: D9:DA:0F:73:60:CF:69:DA:D7:D0:4D:AC:DD:F4:17:B4:1F:EE:98:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2doPc2DPadrX0E2s3fQXtB_umK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/a58aca-3f1e-4d41-88e4-d42fc2b6ea30/1/vq0g7PK10a7TVSQb5dn9cWavSkk.roa
Signing time: Wed 11 Sep 2024 13:39:48 +0000
ROA not before: Wed 11 Sep 2024 13:39:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214345
IP address blocks: 2001:3a80::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e1:4f:cc:cb:d5:9c:2b:a3:f4:0c:c4:5f:87:d4:26:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9da0f7360cf69dad7d04dacddf417b41fee98ad
Validity
Not Before: Sep 11 13:39:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bead20ecf2b5d1aed355241be5d9fd7166af4a49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:bf:19:41:92:a6:86:46:09:19:09:16:e9:a2:
69:4c:66:1c:e5:4c:cc:da:52:7d:1e:74:d3:92:b8:
97:74:ff:7e:ab:b2:84:4f:e4:ed:b8:32:82:f0:01:
d8:9a:2a:ef:83:49:f3:45:fd:94:be:2a:31:74:40:
01:5f:c1:3f:4d:ad:40:86:e7:78:cf:13:26:66:84:
64:22:0e:4f:dc:0e:66:3c:df:b5:80:c0:ed:aa:d3:
1b:69:55:ce:49:0b:40:be:4c:ca:b8:df:08:ea:6b:
91:e3:8c:fd:5e:09:7f:46:5d:c9:53:45:2a:bc:1f:
c1:a1:b3:6b:68:5c:e1:29:78:e8:51:68:8e:56:2b:
b4:00:8e:02:3a:2d:a1:fb:65:4e:52:92:2e:c2:e2:
ff:2a:13:43:6c:5b:3d:1b:e5:ef:a9:cf:65:0d:f9:
de:7b:f2:a1:e3:75:5d:db:21:5d:c9:fd:af:b7:46:
bb:ba:0c:89:1c:16:29:6b:2b:f5:0d:9a:17:72:39:
82:63:0c:c2:71:b2:ce:db:d8:d6:4f:10:aa:3d:2f:
1a:83:56:56:c4:e4:59:0c:24:ac:69:4f:79:18:e5:
6c:2c:89:c5:83:81:46:4b:5d:eb:f4:bf:e7:b9:f8:
bc:0f:52:82:b3:86:7c:a9:bc:07:30:e7:b6:e7:0b:
59:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:AD:20:EC:F2:B5:D1:AE:D3:55:24:1B:E5:D9:FD:71:66:AF:4A:49
X509v3 Authority Key Identifier:
keyid:D9:DA:0F:73:60:CF:69:DA:D7:D0:4D:AC:DD:F4:17:B4:1F:EE:98:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2doPc2DPadrX0E2s3fQXtB_umK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a58aca-3f1e-4d41-88e4-d42fc2b6ea30/1/vq0g7PK10a7TVSQb5dn9cWavSkk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a58aca-3f1e-4d41-88e4-d42fc2b6ea30/1/2doPc2DPadrX0E2s3fQXtB_umK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3a80::/29
Signature Algorithm: sha256WithRSAEncryption
3b:98:91:f2:06:68:b2:b6:d7:b8:cc:f3:10:dd:ac:32:32:47:
ad:de:0f:04:aa:06:0d:46:e3:51:ca:ae:02:a6:9a:a2:8b:fc:
a0:a5:4f:84:bd:72:33:37:79:3f:ff:1f:63:8d:87:28:d5:a0:
3c:f1:c8:01:13:da:65:86:5d:88:fd:87:da:8f:31:96:d6:ad:
f8:4d:84:55:70:d1:ac:ee:0d:dc:23:55:ca:2f:48:03:d6:d1:
d8:fc:56:35:b6:98:3b:46:10:ab:22:ac:b7:61:a8:c4:fa:a5:
ca:ab:cd:1d:2e:eb:af:64:9f:81:31:33:9d:f2:53:4e:4f:7d:
71:1d:cf:6d:1b:4d:86:00:d1:66:1c:db:e8:ce:44:11:dc:6c:
80:1f:f8:e8:5e:26:ab:f3:8f:16:fc:71:37:43:80:d2:6d:a3:
94:9f:66:1e:33:92:0f:8a:a6:91:6e:8a:ec:ec:5d:66:ae:dd:
bf:98:2c:29:c7:0a:5a:10:0a:fd:ae:8c:ae:a9:8b:5d:6a:91:
71:7e:b6:36:01:7d:76:6b:0e:85:42:30:75:fc:89:01:9d:29:
75:c6:de:1a:d0:e9:88:c0:53:6b:52:e7:c1:c2:15:97:96:41:
17:83:26:8d:a7:32:89:6b:30:a7:6a:8e:5a:42:e6:d6:df:b6:
2d:0b:b3:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:25:07 2025 by rpki-client