Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/vQ8X3oy-JWRk4AKB_VuuP5BjlYM.roa
File: vQ8X3oy-JWRk4AKB_VuuP5BjlYM.roa (raw, json)
Hash identifier: 5j5FVAZ4CeKUoBwfFPNsI7WH45FNyhDbv1/sr4ayZcY=
Subject key identifier: BD:0F:17:DE:8C:BE:25:64:64:E0:02:81:FD:5B:AE:3F:90:63:95:83
Certificate issuer: /CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Certificate serial: 019427B556B068F72EFFD45AA4D72C10225E
Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/vQ8X3oy-JWRk4AKB_VuuP5BjlYM.roa
Signing time: Thu 02 Jan 2025 15:49:43 +0000
ROA not before: Thu 02 Jan 2025 15:49:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47157
IP address blocks: 2a10:4646:12::/48 maxlen: 48
2a10:4646:13::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:56:b0:68:f7:2e:ff:d4:5a:a4:d7:2c:10:22:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Validity
Not Before: Jan 2 15:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bd0f17de8cbe256464e00281fd5bae3f90639583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ec:39:7b:38:d1:f7:00:a9:98:41:f1:01:b9:
35:bb:76:67:b2:cf:db:55:7f:9e:c5:f3:d8:55:b8:
a4:16:3e:fd:9c:54:a1:19:0d:22:9c:2e:e3:7b:74:
1b:6e:df:fb:f5:8c:f6:f4:f9:ef:2b:97:89:5d:36:
1d:d5:4d:67:38:06:63:a2:87:9d:7f:8a:1c:18:a6:
34:93:93:84:70:68:0e:a9:06:c5:10:c0:7e:59:f6:
28:55:e5:73:29:8b:74:0b:d7:eb:01:bf:6b:c7:4e:
5a:b1:18:0c:d8:95:5a:0d:8c:88:9c:4b:30:9b:5f:
9a:bc:32:b7:ee:0b:eb:e5:9f:e1:7c:f7:e0:63:26:
26:70:22:a4:35:b9:a8:de:46:67:24:95:c0:4b:df:
42:7e:5a:5e:58:6d:c0:e2:ac:f1:bd:d5:af:f7:87:
2c:84:46:8c:93:ab:49:11:25:34:37:e8:63:4f:f3:
b1:2f:d6:f3:96:0a:77:5f:aa:e0:45:ca:ac:fb:3e:
e0:3d:ab:d2:9e:02:3a:d5:91:f3:34:12:bf:3f:38:
b5:7f:b9:36:1f:4c:dd:61:20:6d:6e:38:7e:7c:d4:
2c:82:1c:c4:9e:a5:e9:a2:a5:31:0f:b8:06:a1:e8:
a8:24:76:86:27:31:40:4a:c7:85:62:d6:84:38:5d:
79:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:0F:17:DE:8C:BE:25:64:64:E0:02:81:FD:5B:AE:3F:90:63:95:83
X509v3 Authority Key Identifier:
keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/vQ8X3oy-JWRk4AKB_VuuP5BjlYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4646:12::/47
Signature Algorithm: sha256WithRSAEncryption
29:0d:b0:eb:c5:11:0b:e2:00:ee:a8:99:aa:33:95:62:3f:f1:
6f:26:53:82:ca:81:80:cf:1e:66:d2:8c:14:75:0a:fa:ff:e4:
ec:05:84:3e:70:32:50:23:00:2c:38:0a:9d:f3:79:0b:21:03:
bf:c7:60:5f:52:5e:98:7e:a5:1e:4d:bf:b5:59:91:b1:19:db:
b3:8e:78:82:1d:57:cd:21:45:84:ce:c2:24:7f:f6:57:ba:a8:
13:d9:c5:65:2e:f0:60:0c:27:bb:f1:86:16:6f:30:a8:36:b9:
24:59:f3:f1:e0:f4:d2:a7:9a:81:eb:28:92:3d:d8:67:79:cb:
8e:b6:1c:1e:9f:cf:31:41:e5:bc:4b:d8:ef:bf:c4:e4:6b:ff:
f3:36:25:6d:b2:81:08:31:c8:36:87:fe:f3:a6:8d:8b:34:7b:
da:b9:2a:92:31:7e:1e:8d:a8:e2:d8:db:1b:48:19:86:3e:3c:
e8:61:70:1d:7b:84:35:9d:4f:39:af:3e:26:2b:53:ca:7b:28:
25:7d:a9:92:35:26:6e:b4:6e:b2:7c:83:3f:27:0b:ae:bc:f5:
95:b6:a0:21:28:51:6e:47:12:39:12:6d:69:f5:e7:9c:07:50:
3e:5f:ff:f9:15:fd:23:92:5d:08:af:81:8c:23:f7:1d:78:0a:
19:3e:41:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:16:31 2025 by rpki-client