Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/972f1b-5f7e-4f61-8e37-f469d839ba8e/1/VLPBEN5PB47MJJh2acB6Qx4RzPk.roa
File: VLPBEN5PB47MJJh2acB6Qx4RzPk.roa (raw, json)
Hash identifier: hZ5hCY+LajpJyQ8lfcoe/3lo5Ih8QUHTFvyILkcPb8g=
Subject key identifier: 54:B3:C1:10:DE:4F:07:8E:CC:24:98:76:69:C0:7A:43:1E:11:CC:F9
Certificate issuer: /CN=b8404ab5e692e752ecac1f8bbc4f0c556c7b7b1b
Certificate serial: 0A7A54
Authority key identifier: B8:40:4A:B5:E6:92:E7:52:EC:AC:1F:8B:BC:4F:0C:55:6C:7B:7B:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uEBKteaS51LsrB-LvE8MVWx7exs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/972f1b-5f7e-4f61-8e37-f469d839ba8e/1/VLPBEN5PB47MJJh2acB6Qx4RzPk.roa
Signing time: Tue 12 Apr 2022 09:07:54 +0000
ROA not before: Tue 12 Apr 2022 09:07:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29405
IP address blocks: 2.59.252.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 686676 (0xa7a54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8404ab5e692e752ecac1f8bbc4f0c556c7b7b1b
Validity
Not Before: Apr 12 09:07:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=54b3c110de4f078ecc24987669c07a431e11ccf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:22:24:a3:d3:0c:2f:03:04:79:75:37:73:10:
5c:2a:57:15:87:8b:4b:c4:d7:e4:88:1b:8b:2c:9e:
21:0a:3e:48:9b:3c:ff:77:8d:1f:5a:75:0b:55:93:
f4:67:09:6c:10:b4:44:a9:0a:9c:84:32:ab:18:84:
68:d6:3d:4b:6e:a0:05:ac:56:30:50:c1:0a:af:e9:
f7:11:26:4d:b2:bb:eb:26:41:37:91:a5:77:d0:76:
07:c2:f5:38:b6:7c:15:ba:8b:a9:a5:f1:6a:b5:8e:
92:e5:a3:41:c3:fe:10:02:a1:37:da:57:12:9a:0e:
29:5a:fe:2e:ee:0f:91:ee:ee:24:18:5f:00:16:e9:
b7:c7:3e:45:ad:a6:ad:9d:b9:11:2f:63:39:8f:b7:
c6:14:2e:8c:c8:08:07:eb:81:e8:54:37:d8:4c:94:
cc:1f:f7:86:73:2d:e2:98:cc:c9:c8:16:d0:cb:ee:
d6:49:9f:c0:06:31:a4:e6:4c:c5:82:e7:4a:18:5c:
26:37:29:aa:e5:dd:ae:e2:aa:ea:de:8e:8f:57:46:
75:40:ba:13:ba:ab:d9:42:7e:4b:94:19:bb:c6:7f:
b1:ba:59:e0:cd:0a:56:96:38:43:92:e1:45:39:fd:
df:02:0b:6c:61:a2:0d:87:b1:0f:06:4f:c6:39:e7:
8c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:B3:C1:10:DE:4F:07:8E:CC:24:98:76:69:C0:7A:43:1E:11:CC:F9
X509v3 Authority Key Identifier:
keyid:B8:40:4A:B5:E6:92:E7:52:EC:AC:1F:8B:BC:4F:0C:55:6C:7B:7B:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uEBKteaS51LsrB-LvE8MVWx7exs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/972f1b-5f7e-4f61-8e37-f469d839ba8e/1/VLPBEN5PB47MJJh2acB6Qx4RzPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/972f1b-5f7e-4f61-8e37-f469d839ba8e/1/uEBKteaS51LsrB-LvE8MVWx7exs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.252.0/22
Signature Algorithm: sha256WithRSAEncryption
33:dd:af:40:82:57:cf:68:d1:25:7e:2c:b0:e5:34:dd:b0:17:
4e:c7:b1:9d:f0:4e:ce:fb:46:f7:f3:0f:aa:f5:39:c5:44:54:
51:d9:d9:08:9d:fe:e0:8e:99:0f:1d:10:4b:88:d6:3d:85:61:
c2:f2:1b:5a:98:a7:89:d6:b5:60:18:86:5f:d9:70:98:6a:8b:
68:85:ed:a6:02:6d:66:2e:23:47:7f:af:76:07:b0:1f:52:f7:
ac:83:06:d7:65:96:d1:5f:bf:43:22:e4:bf:68:5c:dc:32:1e:
9d:96:53:01:f3:06:f9:03:b3:02:d3:4e:dc:69:2b:a5:64:38:
c9:36:0d:07:68:01:89:03:a3:11:7e:cd:e4:2a:bb:9e:66:d2:
17:5e:98:52:0f:ca:be:93:25:9f:80:82:d0:7a:80:ba:7c:02:
f9:1b:9d:b2:30:1b:4c:ad:69:fd:42:3f:8e:c6:86:ee:a3:63:
27:e5:a2:c3:8f:ea:91:17:aa:19:91:7a:68:a5:e6:40:52:0e:
a6:61:4e:57:f0:65:03:6f:c0:ea:32:b0:23:1d:5f:29:e9:46:
99:b9:7b:38:60:b5:c3:95:14:fa:de:35:33:e1:80:77:7b:98:
06:22:c6:0f:8e:22:8e:11:5f:3f:82:ae:b2:88:a0:67:98:21:
72:87:ab:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:26:38 2025 by rpki-client