Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/405d9b-1073-4cd7-90eb-e8f60cab1866/1/VEF9YiqqrEYAf4QojwGm_HltJ2A.roa
File: VEF9YiqqrEYAf4QojwGm_HltJ2A.roa (raw, json)
Hash identifier: ME+nwVXcRmQ2bX2iI/VGtdmmf4+22BDBuD7jDy4oOiQ=
Subject key identifier: 54:41:7D:62:2A:AA:AC:46:00:7F:84:28:8F:01:A6:FC:79:6D:27:60
Certificate issuer: /CN=fbb0301ef6ff5897b5be2c941ddb51978fd489ff
Certificate serial: 0194266BCD5C324C9749C278C7BA4D0B2441
Authority key identifier: FB:B0:30:1E:F6:FF:58:97:B5:BE:2C:94:1D:DB:51:97:8F:D4:89:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-7AwHvb_WJe1viyUHdtRl4_Uif8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/405d9b-1073-4cd7-90eb-e8f60cab1866/1/VEF9YiqqrEYAf4QojwGm_HltJ2A.roa
Signing time: Thu 02 Jan 2025 09:49:46 +0000
ROA not before: Thu 02 Jan 2025 09:49:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211479
IP address blocks: 2001:67c:109c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:cd:5c:32:4c:97:49:c2:78:c7:ba:4d:0b:24:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbb0301ef6ff5897b5be2c941ddb51978fd489ff
Validity
Not Before: Jan 2 09:49:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=54417d622aaaac46007f84288f01a6fc796d2760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a9:b1:9e:bd:cb:5a:0e:1c:36:1d:86:f0:1a:
71:44:99:28:4b:ca:d5:72:0c:53:2d:47:aa:4b:23:
d7:f4:91:20:92:11:53:ba:a2:41:48:ff:07:0d:f5:
8f:95:39:36:ae:d2:47:1e:eb:3f:b8:3c:3f:c7:01:
df:a3:d2:ea:b0:5a:6a:3a:61:43:cb:c0:ba:44:65:
8a:70:a1:5a:9e:49:05:37:12:b2:49:56:88:8f:53:
af:cf:9d:f7:47:46:04:3e:39:c1:9c:f6:a4:a2:1c:
40:e8:1f:de:10:57:f0:03:fe:c2:c9:1f:c7:fb:4d:
5e:81:68:3d:df:4e:63:f3:ff:7a:f8:11:71:85:02:
55:78:8f:9c:09:a3:b2:40:ea:79:51:6a:59:d2:46:
26:a6:3c:96:94:1d:05:cb:53:1d:8d:23:0c:42:26:
0a:91:a1:9a:0e:f0:dd:a0:d6:9d:97:55:34:1b:c4:
6e:d9:ea:85:76:87:c3:55:09:dd:2a:8f:d4:95:44:
41:f8:82:e8:1b:57:b1:8c:e0:b4:54:76:75:9b:be:
9e:5c:36:61:57:5b:99:57:aa:59:13:76:87:ca:b4:
97:39:35:8e:61:e3:ee:dc:a1:0e:ef:d7:ee:93:7d:
99:3b:d7:76:af:87:3a:1a:21:90:52:a4:3c:f9:15:
2d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:41:7D:62:2A:AA:AC:46:00:7F:84:28:8F:01:A6:FC:79:6D:27:60
X509v3 Authority Key Identifier:
keyid:FB:B0:30:1E:F6:FF:58:97:B5:BE:2C:94:1D:DB:51:97:8F:D4:89:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-7AwHvb_WJe1viyUHdtRl4_Uif8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/405d9b-1073-4cd7-90eb-e8f60cab1866/1/VEF9YiqqrEYAf4QojwGm_HltJ2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/405d9b-1073-4cd7-90eb-e8f60cab1866/1/1-7AwHvb_WJe1viyUHdtRl4_Uif8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:109c::/48
Signature Algorithm: sha256WithRSAEncryption
7c:49:c2:5a:85:1b:3f:96:98:61:14:fc:1b:1f:38:68:d1:95:
96:22:c5:18:27:ff:95:dc:8d:6f:97:36:92:d7:92:e4:81:89:
9a:2e:6b:c5:bb:f2:a2:75:1b:d6:0f:69:ea:13:8b:42:8c:e7:
6d:74:f1:cb:ba:c1:61:eb:3f:60:62:50:e3:2d:ae:b0:49:2d:
f2:66:7a:f1:03:78:e4:35:a2:55:79:c6:27:61:11:02:39:1a:
22:3e:07:7d:41:63:25:b6:0d:3f:7f:60:e8:6b:dc:b7:d0:38:
d5:9c:d6:ba:be:1a:8e:e1:92:7d:6d:bf:12:d1:fd:d3:8a:d7:
85:83:2c:c7:fb:36:62:72:15:35:c4:3f:22:71:5d:3d:1f:bd:
2e:44:42:9f:a8:2c:ed:87:f8:db:cc:8b:f2:bc:2c:3d:f3:da:
7a:38:ef:4e:4b:92:43:30:01:77:81:e2:ad:4d:3d:83:45:45:
80:97:a1:ef:d5:eb:bd:b0:29:52:27:3f:6c:66:7c:3d:4c:2d:
1b:99:c8:f0:03:17:01:80:83:a0:97:c1:b8:32:cb:f7:1c:12:
4a:61:3a:be:bd:cd:a2:e6:fb:db:54:f5:10:70:4b:ab:80:df:
86:55:00:b4:7b:d3:fb:63:bc:a0:94:46:9d:d7:c0:5e:79:22:
2b:4d:ad:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:45:51 2025 by rpki-client