Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/vJD-DSmwOkOOJFuZzauASqUSruo.roa
File: vJD-DSmwOkOOJFuZzauASqUSruo.roa (raw, json)
Hash identifier: auuNNDBDYVXVMGfixRK8lih+GV92mCYSoacO6fybksg=
Subject key identifier: BC:90:FE:0D:29:B0:3A:43:8E:24:5B:99:CD:AB:80:4A:A5:12:AE:EA
Certificate issuer: /CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Certificate serial: 019427B55FDF70568DFB9A6A47F827E4DC71
Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/vJD-DSmwOkOOJFuZzauASqUSruo.roa
Signing time: Thu 02 Jan 2025 15:49:45 +0000
ROA not before: Thu 02 Jan 2025 15:49:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210816
IP address blocks: 2a10:4646:c0::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:5f:df:70:56:8d:fb:9a:6a:47:f8:27:e4:dc:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Validity
Not Before: Jan 2 15:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc90fe0d29b03a438e245b99cdab804aa512aeea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8e:60:0e:35:d7:56:27:01:7c:b9:58:16:bc:
9a:d4:4c:91:8e:81:da:e9:a3:3b:f7:dc:1e:45:2f:
67:c6:43:13:06:2b:dd:42:84:73:55:f6:dc:5d:23:
0e:09:04:57:d2:af:2f:91:a2:47:05:15:51:3b:ec:
eb:38:03:bb:25:96:6f:10:69:b2:ca:0c:e8:80:1f:
48:5c:75:4d:14:53:6d:c8:fe:97:89:ac:94:9f:24:
65:97:4f:bb:11:96:73:a1:af:33:7d:6a:63:1c:51:
25:c3:70:5d:a2:f2:f3:77:d8:7b:11:9e:3e:c0:32:
02:2e:80:10:aa:9d:55:be:92:8e:23:42:f7:65:d1:
cb:98:59:ec:27:76:60:04:64:42:f9:7d:9e:5b:2c:
1f:f9:5e:ba:bc:fc:84:fc:0f:40:15:d1:f8:57:0b:
87:92:d2:a1:e4:70:8a:f1:3d:6d:18:0d:df:da:fa:
ce:9a:09:97:34:1d:03:95:ea:b8:f1:8c:79:7d:d4:
35:b3:f9:a6:20:39:32:74:07:01:42:9d:3d:c8:59:
ed:fd:b3:da:a9:8d:3b:7a:02:a6:68:6e:27:21:7b:
0b:73:30:03:91:d1:85:43:33:e2:d8:32:d8:cc:8d:
7a:c2:eb:18:75:3b:d6:b1:f3:65:81:f0:22:e2:8b:
cd:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:90:FE:0D:29:B0:3A:43:8E:24:5B:99:CD:AB:80:4A:A5:12:AE:EA
X509v3 Authority Key Identifier:
keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/vJD-DSmwOkOOJFuZzauASqUSruo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4646:c0::/44
Signature Algorithm: sha256WithRSAEncryption
21:22:c6:11:33:8d:49:db:75:15:5e:b8:5a:53:0e:21:3d:88:
08:8a:1c:fa:0c:a8:9c:28:f9:e1:b7:ee:51:ae:c4:4d:96:ad:
8c:7d:3c:81:d4:f4:4d:2b:80:72:6e:74:ba:62:7a:ef:d4:cb:
60:ef:4d:ba:d5:14:13:d0:20:a7:b0:57:09:f2:51:5d:93:04:
b9:34:7d:5f:c2:ca:d8:b3:c7:16:6f:81:ce:03:ef:c6:19:df:
fe:79:22:d9:46:2f:07:19:6b:b4:b9:64:38:40:5a:ae:b5:15:
63:93:d7:52:99:e8:05:c1:5e:4c:f2:4c:d0:98:31:77:76:91:
2d:66:9e:a0:82:7b:86:5f:a7:a7:bf:e7:bd:b4:95:97:5a:ae:
01:b3:1f:c1:b8:f6:60:7d:86:3f:f8:35:73:23:1c:4b:5e:8a:
95:1d:24:45:1a:5a:6a:ee:e2:d6:b8:3f:e9:9f:96:2c:d3:cc:
21:bb:db:cc:32:ed:5b:a6:60:6e:f0:b5:0b:5b:5d:ca:1f:8f:
13:6c:9d:2c:d0:43:6f:45:45:62:6b:2e:d1:9f:83:15:f2:47:
d7:61:6c:6e:d2:e4:da:c4:ec:77:9f:ed:4a:f3:4c:7d:8a:a5:
ab:83:8e:75:0e:f9:18:71:22:b5:4a:a4:2b:84:5e:b5:d2:c4:
fe:cd:5d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 15:39:10 2025 by rpki-client