Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/vBSOJyFGv8Um2BlsLzXA8MLh2V4.roa
File: vBSOJyFGv8Um2BlsLzXA8MLh2V4.roa (raw, json)
Hash identifier: OwkejZShQGGaJ73E/UJUzbkSzS8eM+OGd/J1SEvObrs=
Subject key identifier: BC:14:8E:27:21:46:BF:C5:26:D8:19:6C:2F:35:C0:F0:C2:E1:D9:5E
Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial: 01942746377B3BC0BB691CBA6114F7A85ECB
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/vBSOJyFGv8Um2BlsLzXA8MLh2V4.roa
Signing time: Thu 02 Jan 2025 13:48:20 +0000
ROA not before: Thu 02 Jan 2025 13:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212483
IP address blocks: 2a0d:2587::/33 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:37:7b:3b:c0:bb:69:1c:ba:61:14:f7:a8:5e:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
Validity
Not Before: Jan 2 13:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc148e272146bfc526d8196c2f35c0f0c2e1d95e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:27:81:d4:c6:84:1a:6f:6a:4d:84:14:8b:bb:
e1:16:b3:3a:2f:b4:e7:00:1e:ac:f2:91:45:fe:92:
48:25:df:0f:8d:5a:bd:3d:42:c7:b1:b7:4c:f5:5a:
96:ec:ca:49:ae:69:f6:8d:8b:c4:fc:75:76:30:e8:
e6:92:79:2a:47:b6:24:92:3b:d3:79:04:88:58:4b:
ff:3c:35:5a:dc:c5:93:78:6a:11:05:dc:81:76:51:
83:23:c2:7d:78:bc:2d:b2:75:70:74:e6:ba:26:88:
e5:18:dd:54:ca:2a:7d:a8:1a:b8:fb:c9:8e:3b:87:
05:59:08:65:c1:83:f3:79:3b:d2:c4:fd:a1:03:ea:
77:51:d7:84:e2:ea:c2:bc:5e:c4:a4:d1:3c:49:85:
69:35:7f:43:45:68:22:d3:d4:6c:b1:a2:fa:a3:9f:
c1:46:8d:df:86:8d:14:6d:ca:b8:46:c6:c6:cb:8a:
d7:b5:65:5d:14:cc:a3:5b:0c:40:03:04:73:eb:98:
ff:c0:24:06:10:6f:bc:d1:0b:b7:69:fe:49:15:4d:
fc:18:02:c8:bd:71:3b:3d:31:3b:fb:8f:78:fd:98:
99:9e:ab:4f:e9:70:da:94:55:7c:b2:64:76:39:cb:
92:6f:f3:50:7d:79:6e:da:75:9b:3a:c2:87:b1:16:
92:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:14:8E:27:21:46:BF:C5:26:D8:19:6C:2F:35:C0:F0:C2:E1:D9:5E
X509v3 Authority Key Identifier:
keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/vBSOJyFGv8Um2BlsLzXA8MLh2V4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:2587::/33
Signature Algorithm: sha256WithRSAEncryption
c7:0a:3c:8b:e2:d5:32:26:5a:bb:70:7f:c3:0a:df:af:52:77:
6d:f3:cd:1e:1b:45:b7:69:94:4a:f7:0e:91:6b:2c:55:85:2e:
5f:4b:b4:2a:3d:d9:44:e0:34:4f:60:76:87:08:aa:9e:e2:2d:
58:b8:d1:a6:23:a4:a0:61:5b:ac:58:da:c6:42:75:c6:fa:90:
95:94:c8:3e:c6:c9:c1:d7:90:8f:af:ac:72:bb:64:92:e3:21:
c3:18:13:93:39:d9:f7:aa:40:d8:ec:82:ee:20:f3:27:ef:72:
1f:96:23:25:f0:fb:5b:87:40:ef:5f:a2:ff:f5:fb:22:2a:6c:
12:e9:1d:91:38:a1:54:d5:36:93:d1:06:8f:83:8a:12:d0:bd:
a5:7f:c4:71:15:ba:ea:13:ce:6c:24:d8:2a:f1:5c:1f:1e:5c:
aa:89:4f:4b:c0:de:20:49:6b:a1:ae:ec:d5:c9:21:0d:b4:32:
bf:30:c9:7b:32:1c:e7:50:4a:eb:bb:7a:ee:c2:4b:27:79:15:
86:73:54:65:5d:73:ec:3a:ce:df:9f:6c:df:b6:37:55:bc:e0:
4a:98:16:a3:ba:62:bb:6f:3b:8d:de:32:70:60:7b:43:4a:83:
40:49:42:1f:ff:9c:5a:bd:f5:3d:eb:86:09:a2:a4:30:01:28:
b7:a9:0c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:41:53 2025 by rpki-client