Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2d84f5-1e6f-4d52-85fa-34f761035360/1/vgp-tfaDBAC9KVZWpG5twKVa8Ac.roa
File: vgp-tfaDBAC9KVZWpG5twKVa8Ac.roa (raw, json)
Hash identifier: u0Hv3+BaDuwxBLB0P/wCWrbv+j6pjYDV9dsXW4v7Ns8=
Subject key identifier: BE:0A:7E:B5:F6:83:04:00:BD:29:56:56:A4:6E:6D:C0:A5:5A:F0:07
Certificate issuer: /CN=5389ab9b7fd5fdfd04f51af8873cdf9b24d08380
Certificate serial: 0185715E6F50E6B0C89BE435F30E79DCF599
Authority key identifier: 53:89:AB:9B:7F:D5:FD:FD:04:F5:1A:F8:87:3C:DF:9B:24:D0:83:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U4mrm3_V_f0E9Rr4hzzfmyTQg4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2d84f5-1e6f-4d52-85fa-34f761035360/1/vgp-tfaDBAC9KVZWpG5twKVa8Ac.roa
Signing time: Mon 02 Jan 2023 07:24:52 +0000
ROA not before: Mon 02 Jan 2023 07:24:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8276
IP address blocks: 2a01:2c0:cc::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:5e:6f:50:e6:b0:c8:9b:e4:35:f3:0e:79:dc:f5:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5389ab9b7fd5fdfd04f51af8873cdf9b24d08380
Validity
Not Before: Jan 2 07:24:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=be0a7eb5f6830400bd295656a46e6dc0a55af007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2d:cf:01:27:ec:12:ba:a9:66:0b:b1:ab:1d:
9f:71:cf:88:c9:fc:a9:46:38:c4:84:ff:3a:ea:66:
bd:fc:9e:ea:31:7f:8b:fe:20:ea:60:02:84:a9:83:
71:f1:5c:2e:e6:cf:7a:90:61:f2:11:af:e4:fe:43:
28:88:6d:15:b6:90:82:0b:92:8a:01:6c:25:6d:7f:
e8:c0:28:8b:32:b1:cd:87:ec:aa:5f:d0:b0:e8:0b:
1e:24:a2:a8:ea:8b:c1:db:74:7f:fc:bc:89:89:10:
c4:10:7c:19:cc:98:e5:4e:dc:a6:38:a6:1f:71:44:
54:b9:db:bc:93:4f:15:df:6e:14:55:10:5f:ac:be:
a6:cf:25:6b:9b:15:3f:5f:d4:d4:c9:95:49:c0:34:
0e:00:66:df:ad:f5:e1:79:3a:71:6b:ad:b8:44:a3:
03:cd:f7:f6:a9:8d:f2:be:d6:e3:ac:61:d2:af:1c:
6f:c0:25:e3:ac:54:6a:d7:ba:1f:95:88:16:e3:8e:
f6:9c:f8:e1:96:97:32:ca:e5:11:3c:9c:1d:f3:ad:
70:bd:a3:ee:a1:56:bc:e4:54:be:a2:80:8a:bd:13:
60:94:c8:19:4d:55:7c:af:77:22:70:af:b9:a5:a2:
4a:9e:6b:e5:de:3b:58:b6:7d:78:51:bf:77:50:84:
1f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:0A:7E:B5:F6:83:04:00:BD:29:56:56:A4:6E:6D:C0:A5:5A:F0:07
X509v3 Authority Key Identifier:
keyid:53:89:AB:9B:7F:D5:FD:FD:04:F5:1A:F8:87:3C:DF:9B:24:D0:83:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U4mrm3_V_f0E9Rr4hzzfmyTQg4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2d84f5-1e6f-4d52-85fa-34f761035360/1/vgp-tfaDBAC9KVZWpG5twKVa8Ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2d84f5-1e6f-4d52-85fa-34f761035360/1/U4mrm3_V_f0E9Rr4hzzfmyTQg4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:2c0:cc::/48
Signature Algorithm: sha256WithRSAEncryption
04:4d:67:3a:22:cd:11:a8:4c:01:5a:90:15:d0:57:8c:4f:c2:
b5:ec:9f:ea:6c:2c:64:32:e1:25:da:80:87:92:57:88:da:94:
f8:39:ae:97:06:9d:48:dc:b6:99:ae:35:7f:bf:ab:b6:e1:ff:
59:03:85:cd:7c:7a:75:77:44:36:de:bf:cd:3f:a5:4d:e1:86:
c4:3b:0f:bd:fb:40:b3:4a:78:e1:10:0c:bb:25:a5:02:9f:9c:
62:f6:45:40:46:7f:e8:08:54:e2:bd:fb:89:db:59:27:01:fa:
fe:58:1a:39:67:d4:67:2d:ca:6b:ab:f1:6d:26:1a:8d:9e:e2:
16:e0:89:80:ae:00:c4:68:62:10:b5:b6:c9:90:20:b3:48:db:
0c:46:1e:10:6a:46:bc:ac:63:1e:84:83:13:40:cc:19:79:56:
d1:d6:b7:46:cc:9a:fb:f6:a6:2b:59:e6:46:2b:21:13:d3:f0:
1b:f3:ff:d4:e5:12:9f:36:c7:31:3c:b2:63:91:cb:ca:4b:72:
15:96:0c:0f:d2:66:35:1d:58:a6:8a:63:a3:8d:f8:07:f8:30:
74:a4:20:38:b8:14:d0:98:3f:7d:26:c7:42:37:0d:b1:5c:87:
16:41:8c:84:5d:1e:ef:a4:12:47:24:75:0d:a6:9a:f1:ec:e4:
6e:8a:8a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 19:08:01 2025 by rpki-client