Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/16682a-afd7-47be-8f90-b8b4ca902e4c/1/VW1M_UlwFYnUflP1RjNJnLMVmbU.roa
File: VW1M_UlwFYnUflP1RjNJnLMVmbU.roa (raw, json)
Hash identifier: bZH5wiIXIcCe5wSYMSft9mpqfVroz1BAOhFd4lvJ2PA=
Subject key identifier: 55:6D:4C:FD:49:70:15:89:D4:7E:53:F5:46:33:49:9C:B3:15:99:B5
Certificate issuer: /CN=d1a1244a3c57b9febb68d684a832b0671e3e4c84
Certificate serial: 0622FCCC
Authority key identifier: D1:A1:24:4A:3C:57:B9:FE:BB:68:D6:84:A8:32:B0:67:1E:3E:4C:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0aEkSjxXuf67aNaEqDKwZx4-TIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/16682a-afd7-47be-8f90-b8b4ca902e4c/1/VW1M_UlwFYnUflP1RjNJnLMVmbU.roa
Signing time: Sat 01 Jan 2022 03:54:55 +0000
ROA not before: Sat 01 Jan 2022 03:54:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200303
IP address blocks: 2001:678:c20::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102956236 (0x622fccc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1a1244a3c57b9febb68d684a832b0671e3e4c84
Validity
Not Before: Jan 1 03:54:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=556d4cfd49701589d47e53f54633499cb31599b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f4:50:5d:b0:06:46:5b:7f:e6:45:6a:73:76:
f7:da:7a:b8:49:1d:66:51:7d:c9:a1:bb:49:5c:c6:
fc:25:fa:f3:6b:98:26:b0:74:6d:a4:88:a5:44:34:
d2:80:d2:c9:26:ce:d0:88:05:c2:47:79:79:3b:3b:
de:25:a5:16:fb:55:0d:6c:40:26:af:f1:86:b3:85:
59:44:e1:eb:24:51:8d:bc:37:2c:65:08:1f:9a:8f:
0c:c8:aa:cf:8d:df:76:08:5c:3c:d7:dc:59:27:66:
88:f1:e8:39:1d:75:c4:79:1d:61:73:c1:8c:65:3a:
b1:45:2f:c2:33:bd:f9:7f:17:d2:42:93:9d:1b:c9:
1c:f9:2c:2d:c0:97:e3:3f:e0:33:94:c8:fa:89:b8:
ef:de:02:2b:f8:cc:a6:2f:b4:9c:79:b7:9a:7c:62:
bc:02:fd:0d:a5:37:5d:47:76:88:e0:05:9e:54:a0:
0e:bc:21:98:1f:77:4f:32:2c:0a:20:85:47:93:92:
cf:ce:2c:f3:e9:bc:b7:95:06:76:a2:a1:e0:40:61:
b7:0d:ec:c8:55:c0:79:1b:66:d2:4c:42:3b:fc:23:
5e:20:c8:68:29:30:c9:11:bd:a8:0a:45:99:9d:81:
db:81:06:a1:4f:03:93:9f:8a:7b:7a:3f:85:c0:af:
7f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:6D:4C:FD:49:70:15:89:D4:7E:53:F5:46:33:49:9C:B3:15:99:B5
X509v3 Authority Key Identifier:
keyid:D1:A1:24:4A:3C:57:B9:FE:BB:68:D6:84:A8:32:B0:67:1E:3E:4C:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0aEkSjxXuf67aNaEqDKwZx4-TIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/16682a-afd7-47be-8f90-b8b4ca902e4c/1/VW1M_UlwFYnUflP1RjNJnLMVmbU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/16682a-afd7-47be-8f90-b8b4ca902e4c/1/0aEkSjxXuf67aNaEqDKwZx4-TIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:c20::/48
Signature Algorithm: sha256WithRSAEncryption
89:77:da:81:55:5a:48:db:bf:87:48:77:43:b8:a3:a5:98:03:
f7:02:54:8e:1b:95:ba:08:b7:25:e7:5c:7c:bd:53:39:2e:d7:
92:fc:70:68:fa:c1:2a:a9:93:19:31:ac:c1:00:6c:04:76:02:
60:75:33:a1:5e:c2:90:15:37:ee:4b:7a:6f:8b:6d:4f:cb:32:
97:b5:00:60:93:35:f8:3a:d4:ac:b6:71:e8:2a:1e:de:98:4a:
1c:e6:38:5d:a3:56:9a:82:c4:7d:12:97:20:6d:99:f6:92:d2:
14:60:a4:0f:81:94:1d:a6:b6:87:42:8a:48:b9:77:dc:01:1b:
5e:9c:9f:ba:e1:2b:e6:b9:77:43:ec:95:71:9c:52:ce:5c:8a:
03:94:78:cf:a6:06:8c:a3:b1:69:6a:9c:de:ad:26:40:b6:b8:
1b:ae:04:0d:1e:05:d0:fa:f3:23:6d:29:63:dc:65:9d:23:d4:
38:5e:a8:4d:62:3f:97:0f:ba:ff:f4:07:67:61:56:37:d8:a9:
d2:a4:91:88:12:e6:b8:67:bc:fa:a8:ce:80:2a:cb:62:21:d4:
a1:da:79:83:16:c0:ed:1b:b8:67:88:f2:04:d0:0a:19:d4:b0:
74:74:c7:69:97:0f:fd:63:cc:33:d1:4a:b0:c9:44:26:96:86:
69:4c:9e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:09:41 2025 by rpki-client