Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/vqnsWMUNond6FR1tGHiJhxp_XPo.roa
File: vqnsWMUNond6FR1tGHiJhxp_XPo.roa (raw, json)
Hash identifier: 7Lr7ODjHExUleGPeryspsVbRabLzXSIHSQnsSI833hQ=
Subject key identifier: BE:A9:EC:58:C5:0D:A2:77:7A:15:1D:6D:18:78:89:87:1A:7F:5C:FA
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 0194258EC535AB3B7B0C3ED54A6A335FD702
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/vqnsWMUNond6FR1tGHiJhxp_XPo.roa
Signing time: Thu 02 Jan 2025 05:48:21 +0000
ROA not before: Thu 02 Jan 2025 05:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48646
IP address blocks: 2a0e:aa01:ab02::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:c5:35:ab:3b:7b:0c:3e:d5:4a:6a:33:5f:d7:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 2 05:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bea9ec58c50da2777a151d6d187889871a7f5cfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d5:1b:ad:89:c0:a4:45:7a:0e:7d:8b:91:0d:
06:1c:bc:9e:97:48:3b:12:d6:a2:cf:0d:ff:c4:e7:
24:57:27:fc:b5:4e:b0:ca:65:82:a4:ad:c8:f3:fd:
82:f2:92:25:c0:4b:00:9a:1c:85:70:d2:7d:90:72:
91:c0:6c:92:25:2e:a5:38:d7:da:31:5c:6e:0c:d5:
bf:7a:47:7f:b0:42:c4:e8:67:c2:e9:36:72:8a:60:
45:5b:ea:77:90:cb:5e:d0:25:af:29:fb:5d:81:96:
76:23:db:86:b5:4f:51:64:23:b5:95:41:71:f4:9a:
65:5d:ba:b0:f1:23:67:cd:48:f9:9d:ca:77:b8:66:
51:e0:dd:d2:d3:00:e9:e9:47:ad:f5:e4:33:2e:89:
93:a2:87:ed:28:2b:61:59:f8:9f:8a:9d:91:04:5d:
09:da:6e:10:b7:0a:8f:aa:ce:f3:67:a9:b0:63:88:
89:80:d0:b5:8a:f2:da:86:07:ca:8d:a3:ad:20:d7:
82:8c:b4:78:06:3a:8e:0f:1c:40:bc:20:8d:0a:d3:
a1:38:c5:1f:79:33:8f:03:40:35:8b:9b:58:ba:a9:
f1:2e:61:6b:86:16:36:f1:a0:df:4a:fa:cf:3d:76:
d0:19:39:23:25:c3:e1:dc:15:65:54:8a:1c:2b:14:
e1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:A9:EC:58:C5:0D:A2:77:7A:15:1D:6D:18:78:89:87:1A:7F:5C:FA
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/vqnsWMUNond6FR1tGHiJhxp_XPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa01:ab02::/48
Signature Algorithm: sha256WithRSAEncryption
20:66:77:a0:5b:6e:db:dd:d4:ca:f2:6b:b9:7a:ca:7e:19:92:
2c:7e:83:58:54:15:ad:63:a8:37:40:58:f0:a7:fb:49:b1:2e:
ac:d2:46:16:7a:5d:f3:45:cb:4f:91:0c:76:52:64:85:9d:f2:
c5:90:88:60:4a:35:ce:91:8d:4f:4a:0a:e7:13:1a:56:63:de:
d2:23:33:1b:61:ef:e4:49:4a:8d:77:ca:a2:1d:88:a2:10:e3:
3c:79:72:2c:36:61:28:ac:81:06:7d:af:b7:d7:a9:2d:80:25:
0c:2c:65:02:28:b1:ea:fe:8b:ab:49:26:84:90:0e:b7:a3:56:
fc:fd:c2:4d:e6:a9:0f:ba:b9:21:8b:85:e7:44:61:aa:06:e3:
86:8a:b2:06:d2:74:84:da:de:f2:7a:e7:b1:4a:63:e2:d5:6f:
79:e0:12:31:05:a3:11:5e:01:ff:4d:59:6f:5a:44:a2:11:c6:
4c:56:ba:fc:81:01:31:8b:8b:10:66:eb:1d:95:31:51:57:6b:
8f:64:f3:ad:63:9b:98:c5:44:01:9e:05:9c:22:fd:8f:01:7c:
09:7e:5d:43:44:5d:76:20:6b:93:45:80:90:82:4d:8d:fe:37:
e9:38:04:4c:1b:92:48:2b:4c:0a:e8:15:89:50:8b:5b:82:a3:
86:a8:cb:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:29:18 2025 by rpki-client