Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/VunL007YcgdB0SQwEVqZksZS8Fs.roa
File: VunL007YcgdB0SQwEVqZksZS8Fs.roa (raw, json)
Hash identifier: 216WPQB/uK03AqzN7nO6bEUvYIaYzP3vD9//CYpZtZI=
Subject key identifier: 56:E9:CB:D3:4E:D8:72:07:41:D1:24:30:11:5A:99:92:C6:52:F0:5B
Certificate issuer: /CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f
Certificate serial: 0195CD660445704EF10BD1B8705E284F3EA4
Authority key identifier: F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/VunL007YcgdB0SQwEVqZksZS8Fs.roa
Signing time: Tue 25 Mar 2025 13:02:49 +0000
ROA not before: Tue 25 Mar 2025 13:02:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210732
IP address blocks: 2a12:5845::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:cd:66:04:45:70:4e:f1:0b:d1:b8:70:5e:28:4f:3e:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f
Validity
Not Before: Mar 25 13:02:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=56e9cbd34ed8720741d12430115a9992c652f05b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:76:9d:9e:0e:7b:39:5e:5c:ef:6f:09:d5:8d:
43:0f:b3:58:02:b6:a9:18:5f:5a:91:99:0b:6c:66:
97:aa:a6:4b:4c:46:9b:01:df:69:b0:d4:e6:e8:93:
09:e8:2f:ce:d1:40:90:d6:28:5a:48:ba:40:13:30:
79:cf:1a:31:7b:26:0f:33:be:97:ed:2a:b7:c4:94:
25:85:25:2b:00:8a:3f:e0:98:f4:84:4a:47:9e:4e:
45:83:04:0d:14:23:e4:c4:d4:47:3b:3b:5b:15:ad:
0e:0d:35:38:59:84:db:b8:d9:4e:a8:4b:10:a4:31:
b9:a3:6c:12:13:5d:cf:4f:dd:71:53:83:2c:96:51:
8b:3d:d8:e6:09:90:15:70:4d:3b:56:6c:3d:dd:9f:
7d:9b:78:24:9b:c8:40:9b:6c:cf:96:89:7f:2e:88:
c0:2f:18:d1:2d:ef:66:0c:7d:4e:70:d5:3b:43:c8:
b0:4a:ea:9d:77:46:05:ad:63:45:3a:a8:b9:57:97:
47:b0:3f:e7:29:c2:69:70:56:a6:18:87:fc:00:b0:
02:0c:5a:81:8e:c0:c2:79:23:30:3b:6d:6e:7e:f8:
25:11:7c:03:0e:1c:0c:4f:b5:51:04:f6:53:e5:33:
de:36:fd:a7:bb:01:01:1e:30:7d:37:0b:9d:62:0b:
fd:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E9:CB:D3:4E:D8:72:07:41:D1:24:30:11:5A:99:92:C6:52:F0:5B
X509v3 Authority Key Identifier:
keyid:F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/VunL007YcgdB0SQwEVqZksZS8Fs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:5845::/32
Signature Algorithm: sha256WithRSAEncryption
9e:69:e6:a5:b8:f7:95:4a:8f:ca:88:11:7a:89:9f:f2:47:ad:
09:ac:f0:51:59:a7:63:7e:9d:46:97:08:d9:d1:7a:ce:7a:93:
1d:40:37:f9:91:f0:02:d6:58:81:5f:97:53:ec:28:d8:63:31:
04:bb:e5:c6:2b:84:43:9b:a2:5f:97:d1:08:2f:c0:60:65:82:
dc:3f:d1:bd:cf:f3:6b:72:ac:6c:64:76:dc:2d:4d:a7:d5:a1:
7d:9b:98:07:b1:48:1d:ac:22:d4:36:96:25:9f:c2:80:3a:35:
aa:8d:34:b0:2a:7b:e9:12:58:bd:fc:9e:25:e5:a3:95:24:3c:
93:a7:c4:df:6f:a7:45:34:43:47:52:b7:4a:80:7a:e8:27:7c:
e6:ae:3b:ac:bf:d5:a0:cd:6c:60:39:b7:ff:a4:e4:43:82:c4:
43:f5:b5:1b:13:73:6c:30:47:4b:4a:fc:a4:fb:9a:23:d9:ed:
3b:1c:42:39:66:89:92:db:fd:df:cd:ee:81:44:5f:02:5c:9b:
71:98:d4:e0:6b:79:16:bd:ec:77:7c:4c:e4:bf:fb:04:02:09:
21:c5:c7:bd:26:2e:b9:4c:4a:ad:84:ae:71:d0:89:5c:a5:08:
00:e2:40:5b:82:ef:b8:c5:68:ee:c3:1b:17:7a:48:6b:2c:45:
3d:0d:f8:fe
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZXNZgRFcE7xC9G4cF4oTz6kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2YzNlMDI3ZDJkMWMyZDM2ZDdjOTU0ODY3MjI2YzgzYjY1
ZWI1NmYwHhcNMjUwMzI1MTMwMjQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NmU5Y2JkMzRlZDg3MjA3NDFkMTI0MzAxMTVhOTk5MmM2NTJmMDViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Xadng57OV5c728J1Y1DD7NYArap
GF9akZkLbGaXqqZLTEabAd9psNTm6JMJ6C/O0UCQ1ihaSLpAEzB5zxoxeyYPM76X
7Sq3xJQlhSUrAIo/4Jj0hEpHnk5FgwQNFCPkxNRHOztbFa0ODTU4WYTbuNlOqEsQ
pDG5o2wSE13PT91xU4MsllGLPdjmCZAVcE07Vmw93Z99m3gkm8hAm2zPlol/LojA
LxjRLe9mDH1OcNU7Q8iwSuqdd0YFrWNFOqi5V5dHsD/nKcJpcFamGIf8ALACDFqB
jsDCeSMwO21ufvglEXwDDhwMT7VRBPZT5TPeNv2nuwEBHjB9NwudYgv9gwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFFbpy9NO2HIHQdEkMBFamZLGUvBbMB8GA1UdIwQY
MBaAFPbD4CfS0cLTbXyVSGcibIO2XrVvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXNQZ0o5TFJ3dE50ZkpWSVp5SnNnN1pldFc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8yYjI4NzgtNWI3OS00MGY3LWI0YjUt
MzU2YzRkN2JiNDUyLzEvVnVuTDAwN1ljZ2RCMFNRd0VWcVprc1pTOEZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8yYjI4NzgtNWI3OS00MGY3LWI0YjUtMzU2YzRkN2JiNDUy
LzEvOXNQZ0o5TFJ3dE50ZkpWSVp5SnNnN1pldFc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhJYRTAN
BgkqhkiG9w0BAQsFAAOCAQEAnmnmpbj3lUqPyogReomf8ketCazwUVmnY36dRpcI
2dF6znqTHUA3+ZHwAtZYgV+XU+wo2GMxBLvlxiuEQ5uiX5fRCC/AYGWC3D/Rvc/z
a3KsbGR23C1Np9WhfZuYB7FIHawi1DaWJZ/CgDo1qo00sCp76RJYvfyeJeWjlSQ8
k6fE32+nRTRDR1K3SoB66Cd85q47rL/VoM1sYDm3/6TkQ4LEQ/W1GxNzbDBHS0r8
pPuaI9ntOxxCOWaJktv9383ugURfAlybcZjU4Gt5Fr3sd3xM5L/7BAIJIcXHvSYu
uUxKrYSucdCJXKUIAOJAW4LvuMVo7sMbF3pIayxFPQ34/g==
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:46:53 2025 by rpki-client