Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/vxjjGHPl405q8gsxy5bZ4sjmE30.roa
File: vxjjGHPl405q8gsxy5bZ4sjmE30.roa (raw, json)
Hash identifier: J4XPPUlVIooSGgv6V24+BdPNBBIb06hQYLrnVjL7+YE=
Subject key identifier: BF:18:E3:18:73:E5:E3:4E:6A:F2:0B:31:CB:96:D9:E2:C8:E6:13:7D
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 0182D05C38174947E7F4208B25E1C3C99A0E
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/vxjjGHPl405q8gsxy5bZ4sjmE30.roa
Signing time: Wed 24 Aug 2022 14:58:00 +0000
ROA not before: Wed 24 Aug 2022 14:58:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207807
IP address blocks: 2a00:7180:800c::/46 maxlen: 46
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d0:5c:38:17:49:47:e7:f4:20:8b:25:e1:c3:c9:9a:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Aug 24 14:58:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bf18e31873e5e34e6af20b31cb96d9e2c8e6137d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6e:d3:89:85:73:b5:72:b6:1e:f1:3f:f1:10:
2f:47:36:1d:98:07:be:4a:a1:1c:2f:59:1f:e4:6a:
c5:f4:c7:e2:24:fd:5a:d9:61:4d:23:64:bb:ee:31:
12:36:9d:2f:08:fe:67:fc:b1:f8:1c:fc:a5:5e:bc:
6e:20:e8:c6:2a:6b:34:22:9a:d1:d2:de:d0:c9:4f:
58:47:56:16:37:18:42:67:d2:97:f4:28:40:37:1a:
4c:c7:63:3d:38:54:d3:e0:a3:9f:6b:58:12:48:27:
de:67:55:20:bf:e7:95:5b:19:ee:ad:e6:25:dd:d3:
bf:8c:18:3d:26:1a:ba:71:19:e5:fa:db:e3:c7:d6:
17:8b:eb:48:43:fb:f1:e1:cc:96:c9:19:76:50:9f:
c6:fe:b3:50:c3:8c:32:75:68:b5:79:2a:ab:60:30:
4c:78:5e:3a:dc:49:a8:31:72:ea:c9:af:01:1b:ef:
17:42:9c:42:a2:c5:0c:80:3d:f0:c7:65:67:c0:46:
c2:af:29:5a:ce:7a:8f:15:4c:32:1f:d4:15:60:b0:
c4:13:15:46:64:f6:d8:a6:db:5a:68:44:59:1b:4b:
67:6c:72:a5:10:fc:82:1d:75:ab:c6:dd:8c:16:b2:
96:f5:dd:d4:61:21:7a:6c:03:4b:f4:c1:d9:b6:47:
07:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:18:E3:18:73:E5:E3:4E:6A:F2:0B:31:CB:96:D9:E2:C8:E6:13:7D
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/vxjjGHPl405q8gsxy5bZ4sjmE30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:7180:800c::/46
Signature Algorithm: sha256WithRSAEncryption
57:9c:56:f0:2c:a0:ee:df:a0:40:55:ff:49:93:e9:f8:b8:cd:
a8:29:3d:bd:07:1e:1c:a8:c3:48:f8:42:4c:e2:6d:78:7f:2a:
f1:9b:6c:10:18:f3:81:3d:3f:f2:69:f9:17:20:b5:90:80:da:
aa:21:74:6f:c6:9f:4d:75:a1:eb:c5:f4:95:a0:64:b9:72:fe:
fd:36:f4:ab:fb:5c:4f:e2:6d:26:bb:fc:5d:a8:ac:ff:a6:d7:
fa:08:88:26:73:d0:37:22:cf:ad:38:1b:b7:c1:70:52:2f:e8:
9b:15:ed:70:05:af:a5:35:24:9f:cd:67:e7:7f:24:19:04:28:
53:bb:94:ab:33:4e:77:53:74:8e:b7:f3:13:4b:f3:cb:b2:52:
14:3c:ab:37:8c:1a:e3:9e:e9:ec:ea:43:1c:ac:85:46:a0:a7:
34:da:7b:52:f1:46:30:f1:dc:62:9d:80:68:9f:f7:14:d1:b4:
3a:f3:0d:15:91:b0:c2:64:16:a3:96:b3:f6:a8:8a:c5:d8:8a:
9a:7b:02:ad:c8:5c:02:c2:38:1a:fe:79:53:c5:ae:3d:bd:cd:
d0:3e:78:4b:7c:9c:8d:ae:a7:83:f9:46:63:a3:82:d0:6f:41:
41:01:50:41:ed:3d:52:da:2d:d1:60:89:b3:16:a3:ba:3f:21:
24:28:be:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:34:28 2025 by rpki-client