Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/VYuou2QRdpAyGDUbw9t59KIkRc4.roa
File: VYuou2QRdpAyGDUbw9t59KIkRc4.roa (raw, json)
Hash identifier: 5/Sfs7tn5FFXJUV+3XNMAOsjPOtRS6oflIIxKem/F2A=
Subject key identifier: 55:8B:A8:BB:64:11:76:90:32:18:35:1B:C3:DB:79:F4:A2:24:45:CE
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01941F8C63BD0B166E9E183ACC76EB4BBCEC
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/VYuou2QRdpAyGDUbw9t59KIkRc4.roa
Signing time: Wed 01 Jan 2025 01:48:01 +0000
ROA not before: Wed 01 Jan 2025 01:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213801
IP address blocks: 2a12:bec4:15f0::/45 maxlen: 45
2a12:bec4:15f8::/45 maxlen: 45
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:63:bd:0b:16:6e:9e:18:3a:cc:76:eb:4b:bc:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 01:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=558ba8bb641176903218351bc3db79f4a22445ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2c:14:bb:7d:6b:98:34:82:5f:7b:c6:45:b1:
d7:bd:e1:76:8e:9b:6b:07:a9:4a:0d:c5:0b:da:ee:
22:a6:be:82:51:1c:75:b1:07:30:89:67:f0:b8:11:
89:19:25:22:2f:61:09:d3:9e:f6:cb:c3:25:aa:ff:
b3:38:6c:ba:66:17:b7:53:07:bf:b2:32:ec:0e:de:
d8:75:3e:1f:b9:0c:4b:59:28:9a:dc:ae:ba:41:8f:
40:bd:1f:80:0a:6b:38:c0:d4:76:83:53:68:f5:69:
7c:0c:14:20:7e:7d:69:e3:59:9e:84:b9:b5:7f:af:
a4:5a:2d:90:e0:b9:98:cb:b1:8f:b7:87:24:31:05:
12:0b:13:88:3d:f9:06:45:a1:18:d0:82:81:e2:57:
d2:a4:c8:0b:c6:db:74:00:f8:2d:fc:db:ee:43:b4:
c8:55:b7:ce:b3:1b:b9:ff:b9:b6:4c:c4:b0:32:36:
32:30:1f:cd:25:c5:11:54:21:bb:eb:14:69:b0:7f:
33:94:98:63:57:08:50:24:04:c3:4b:3f:ee:4d:6c:
35:b2:e3:2b:b6:07:1e:b3:98:53:9a:cf:58:bd:87:
cc:86:35:bc:2b:4a:b9:d4:48:5f:c3:0b:d0:a3:ce:
80:aa:d0:cb:d9:9e:70:be:7f:68:7d:30:63:91:2e:
e5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:8B:A8:BB:64:11:76:90:32:18:35:1B:C3:DB:79:F4:A2:24:45:CE
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/VYuou2QRdpAyGDUbw9t59KIkRc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:15f0::/44
Signature Algorithm: sha256WithRSAEncryption
97:c4:a3:9d:f0:9e:c4:d0:88:54:9c:0f:73:ee:cd:94:ce:2c:
1c:70:78:8a:2b:2b:43:ca:19:99:bb:70:c9:43:e1:9c:6b:4c:
79:b0:0e:af:00:51:4d:71:21:34:8e:b4:20:8f:fd:b1:18:3f:
61:52:23:c5:d4:c3:15:a9:d0:b7:ab:c9:5b:53:2b:5c:2e:43:
df:3f:94:0b:f2:08:f7:3d:a9:5b:e1:e1:a7:9c:ca:e9:b0:1b:
d0:1a:54:61:fe:f2:be:19:ed:bf:6f:91:6b:9b:a4:86:8c:b1:
54:02:32:48:94:98:ee:bb:99:55:1e:08:10:9d:56:ab:af:8d:
7e:29:4a:10:13:9a:a8:50:6b:9c:73:29:9a:10:46:e0:4f:eb:
b9:f7:4b:5e:7b:f3:88:88:e2:2d:bd:1b:36:06:ea:8a:9d:eb:
9a:a4:8a:4a:88:2d:4c:a2:c1:e4:ef:88:52:cd:1c:28:1e:9d:
9c:f3:41:a8:71:10:44:1c:c5:bd:17:a3:f3:fa:a9:45:bb:0b:
9f:5a:6e:a2:4e:e6:3e:16:73:a7:a5:d9:aa:61:cb:d5:32:84:
c1:34:d5:16:51:12:81:6d:30:bb:43:e5:64:9f:92:7a:59:8e:
d8:69:a2:ac:0a:d9:5d:a9:2e:cc:0b:2e:87:d2:ff:d9:5b:9e:
8b:7c:df:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:30:58 2025 by rpki-client