Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/VgS-u0ELxQR2AwhETKCUa6iULQU.roa
File: VgS-u0ELxQR2AwhETKCUa6iULQU.roa (raw, json)
Hash identifier: 7YXeyW9OYhf7wVeeaMa0yi4RPICzvGAFTAe8JBcfnZU=
Subject key identifier: 56:04:BE:BB:41:0B:C5:04:76:03:08:44:4C:A0:94:6B:A8:94:2D:05
Certificate issuer: /CN=e8965057f4aa099b0a919f3f0bd4a6488e30c348
Certificate serial: 019422FC46C632089133EE2CF20112175CA4
Authority key identifier: E8:96:50:57:F4:AA:09:9B:0A:91:9F:3F:0B:D4:A6:48:8E:30:C3:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/VgS-u0ELxQR2AwhETKCUa6iULQU.roa
Signing time: Wed 01 Jan 2025 17:49:06 +0000
ROA not before: Wed 01 Jan 2025 17:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1103
IP address blocks: 2001:67c:262c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:46:c6:32:08:91:33:ee:2c:f2:01:12:17:5c:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8965057f4aa099b0a919f3f0bd4a6488e30c348
Validity
Not Before: Jan 1 17:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5604bebb410bc504760308444ca0946ba8942d05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6e:ce:96:a0:6e:87:0e:b0:3f:8a:53:7a:79:
06:a7:39:82:b5:cd:7b:bb:bf:a7:5c:57:b7:e4:80:
19:f4:69:aa:39:85:b9:46:f4:e0:58:b2:55:fe:a5:
da:87:f1:2d:4c:80:80:e1:b2:c4:42:0f:44:da:d3:
e6:43:19:73:46:ac:4a:97:cf:ca:b9:be:f4:50:67:
ef:0a:5f:58:1d:ee:c3:47:ff:17:3c:66:81:13:92:
7d:62:fc:a6:48:2b:6d:63:ad:eb:12:70:34:c6:16:
3f:4a:ab:9f:d4:23:33:54:5f:2e:81:e7:1a:b4:b0:
30:a6:47:73:f2:f4:56:3a:02:64:7d:c2:4d:7d:7b:
03:3f:ac:eb:1a:22:dc:17:41:78:7e:fb:e0:46:a5:
98:49:bd:4e:14:9c:d9:f9:be:02:d8:c5:13:d0:b3:
3f:e3:80:bf:5d:c0:1f:6f:d2:af:73:50:33:47:6d:
93:9d:8d:fb:85:c4:f0:20:7e:ac:71:6d:62:a5:2d:
cd:39:cb:89:d8:36:48:9c:d4:f0:4e:1f:ff:e4:3a:
3a:27:fc:ca:b2:38:af:df:b4:2d:ec:7c:58:ea:97:
f3:c7:a8:2d:ab:47:53:4a:03:64:a4:f4:97:1d:a7:
4f:74:c7:c7:d1:cb:9b:76:13:66:5a:cc:42:8f:28:
34:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:04:BE:BB:41:0B:C5:04:76:03:08:44:4C:A0:94:6B:A8:94:2D:05
X509v3 Authority Key Identifier:
keyid:E8:96:50:57:F4:AA:09:9B:0A:91:9F:3F:0B:D4:A6:48:8E:30:C3:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/VgS-u0ELxQR2AwhETKCUa6iULQU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:262c::/48
Signature Algorithm: sha256WithRSAEncryption
79:ff:ed:c4:2b:35:c6:a3:39:d5:b8:67:83:a2:d4:b6:3e:0d:
5a:8b:c8:02:98:19:e0:cf:80:7c:8e:86:43:85:86:6a:69:fd:
d5:9e:c6:60:c9:45:44:16:5b:e4:26:f3:3e:87:36:66:60:47:
65:6e:55:c2:48:31:d1:f4:d6:8e:23:9e:4b:3b:81:e8:62:97:
68:55:a7:c6:b1:bc:93:e7:1a:e0:68:91:18:ed:14:5a:8c:14:
7e:7d:2f:37:5b:dd:d9:f1:b5:7d:8a:f4:f0:a9:eb:6d:c2:d1:
bf:7c:4c:f0:03:c3:8f:c7:b3:41:bf:81:22:4f:f8:86:5c:e8:
8e:0a:e3:67:d9:29:e9:50:51:98:34:5d:38:4e:6b:d9:a4:e2:
68:ff:dc:34:0b:15:a9:b1:27:a1:a6:f2:a7:3d:d8:1a:7e:ff:
55:d1:a8:59:49:ae:54:6a:b6:65:84:b8:32:48:45:ca:60:0e:
c7:52:12:61:6c:56:91:ab:35:19:ae:ee:01:ee:e5:cc:66:5a:
e2:a4:ae:bd:52:91:74:24:91:81:c9:b7:8c:d7:b4:85:53:f0:
26:4a:21:80:09:a7:fa:f3:de:90:9f:b0:80:c2:62:54:50:d8:
f5:a2:8a:3a:7b:7f:97:50:ea:0b:66:97:cd:25:3b:12:9e:f2:
25:b5:03:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:28:04 2025 by rpki-client