Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/VbkUMdq0q4VxtJLjATfSQPupFUc.roa
File: VbkUMdq0q4VxtJLjATfSQPupFUc.roa (raw, json)
Hash identifier: XlfoZ1aCDpPdQyV5yAsyjB8W3/QGPfQ9t5KxlwC3mwc=
Subject key identifier: 55:B9:14:31:DA:B4:AB:85:71:B4:92:E3:01:37:D2:40:FB:A9:15:47
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 281A3E63
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/VbkUMdq0q4VxtJLjATfSQPupFUc.roa
Signing time: Sat 01 Jan 2022 16:09:37 +0000
ROA not before: Sat 01 Jan 2022 16:09:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197726
IP address blocks: 2a02:128:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 672808547 (0x281a3e63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:09:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=55b91431dab4ab8571b492e30137d240fba91547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c7:64:dd:69:a1:09:4e:e4:a2:9d:f3:7e:d6:
91:66:7e:3f:f3:1d:c0:fb:41:a1:86:eb:34:dd:02:
97:4b:ab:a1:6f:58:2c:aa:13:22:7a:45:88:b7:1b:
a0:c7:e7:a7:a8:41:6f:71:3e:e5:46:82:7a:25:62:
8a:e2:a4:73:2d:2f:ad:92:c8:6e:91:51:c8:bb:b0:
bc:16:69:38:65:c1:d8:77:c8:92:0f:a3:ee:13:b8:
67:21:65:eb:6e:de:1b:c0:6e:13:0e:a2:9e:df:a8:
c6:2d:68:94:64:c9:73:e6:ac:92:20:22:0f:ca:44:
87:c4:6c:36:da:bb:2c:b6:7a:05:57:29:b4:9a:7d:
2e:f7:33:05:af:b1:7d:69:8d:2c:60:63:aa:b3:c9:
ca:0e:6a:f7:00:47:37:f5:f7:6e:fd:e7:ed:59:ba:
04:8b:c4:79:cf:dc:e4:48:c8:ef:11:59:30:bc:3d:
50:18:35:61:bd:bf:da:fb:46:f7:37:58:4e:e1:30:
53:e5:42:84:0a:67:30:ea:70:94:b6:60:3f:8e:e1:
d0:2d:e2:aa:02:bf:57:9c:51:01:03:12:a8:48:dc:
d3:b9:32:8d:d4:22:50:8d:e5:6f:f8:40:e3:c6:33:
6f:0d:ac:67:76:1f:76:7e:5b:6f:44:30:9e:b6:eb:
73:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:B9:14:31:DA:B4:AB:85:71:B4:92:E3:01:37:D2:40:FB:A9:15:47
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/VbkUMdq0q4VxtJLjATfSQPupFUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:128:2::/48
Signature Algorithm: sha256WithRSAEncryption
6d:f1:c6:10:10:71:19:6a:4f:77:04:89:34:1c:23:fe:2b:08:
14:d7:28:5b:29:80:7b:ef:8a:dd:8e:b1:53:70:ac:21:cb:09:
2e:0f:4f:d3:7d:3d:f8:13:e6:2a:d6:1d:8f:00:4b:c1:bd:9d:
38:8c:d3:62:f2:d9:5b:e9:d5:54:40:e2:f7:0d:8d:05:2c:3a:
d9:40:bb:ba:b3:d6:96:da:42:e7:a5:4d:5a:98:77:ef:56:70:
ff:0a:d7:d8:5e:5a:80:b7:b6:60:f7:a4:96:2f:bf:81:ae:a8:
1c:94:5d:b7:28:a2:11:62:c1:e5:32:a6:14:d3:d6:2b:40:56:
21:a7:e1:7e:1d:b6:6a:20:4a:c5:2f:a1:c0:ec:dc:1d:f8:7f:
7f:a5:26:d4:c2:b9:88:be:92:c1:c0:8c:0c:e1:f4:b6:09:c1:
bc:07:94:99:80:75:bb:b4:b2:58:fe:22:f2:e6:34:09:d8:92:
f9:56:3b:f4:2a:de:04:2b:74:a6:15:e1:f2:0c:e2:12:c0:da:
4b:1c:4d:64:9b:e3:1e:d4:c2:5b:6c:11:e3:d3:5d:94:0c:80:
83:1c:96:17:7e:6f:83:ab:db:f5:70:99:56:93:c0:51:af:74:
4a:03:a5:fd:08:8a:15:b7:d7:f3:7a:86:65:9e:4b:0d:b0:e1:
93:66:08:b6
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEKBo+YzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
NDkxMjJjMzU0MzhhNGViMjYyMzNmZGM2ZTRiYjFkZjJkYWFlZjQyMB4XDTIyMDEw
MTE2MDkzN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTViOTE0MzFkYWI0
YWI4NTcxYjQ5MmUzMDEzN2QyNDBmYmE5MTU0NzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJjHZN1poQlO5KKd837WkWZ+P/MdwPtBoYbrNN0Cl0uroW9Y
LKoTInpFiLcboMfnp6hBb3E+5UaCeiViiuKkcy0vrZLIbpFRyLuwvBZpOGXB2HfI
kg+j7hO4ZyFl627eG8BuEw6int+oxi1olGTJc+askiAiD8pEh8RsNtq7LLZ6BVcp
tJp9LvczBa+xfWmNLGBjqrPJyg5q9wBHN/X3bv3n7Vm6BIvEec/c5EjI7xFZMLw9
UBg1Yb2/2vtG9zdYTuEwU+VChApnMOpwlLZgP47h0C3iqgK/V5xRAQMSqEjc07ky
jdQiUI3lb/hA48Yzbw2sZ3Yfdn5bb0Qwnrbrc6ECAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBRVuRQx2rSrhXG0kuMBN9JA+6kVRzAfBgNVHSMEGDAWgBR0kSLDVDik6yYj
P9xuS7HfLarvQjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2RKRWl3MVE0cE9zbUl6X2Nia3V4M3kycTcwSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTgvMThhOTFjLTBlNzctNDVjOS04Y2M0LTA2MmM2OTMzYWJlZC8x
L1Zia1VNZHEwcTRWeHRKTGpBVGZTUVB1cEZVYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTgv
MThhOTFjLTBlNzctNDVjOS04Y2M0LTA2MmM2OTMzYWJlZC8xL2RKRWl3MVE0cE9z
bUl6X2Nia3V4M3kycTcwSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoCASgAAjANBgkqhkiG9w0BAQsF
AAOCAQEAbfHGEBBxGWpPdwSJNBwj/isIFNcoWymAe++K3Y6xU3CsIcsJLg9P0309
+BPmKtYdjwBLwb2dOIzTYvLZW+nVVEDi9w2NBSw62UC7urPWltpC56VNWph371Zw
/wrX2F5agLe2YPekli+/ga6oHJRdtyiiEWLB5TKmFNPWK0BWIafhfh22aiBKxS+h
wOzcHfh/f6Um1MK5iL6SwcCMDOH0tgnBvAeUmYB1u7SyWP4i8uY0CdiS+VY79Cre
BCt0phXh8gziEsDaSxxNZJvjHtTCW2wR49NdlAyAgxyWF35vg6vb9XCZVpPAUa90
SgOl/QiKFbfX83qGZZ5LDbDhk2YItg==
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:36:31 2025 by rpki-client