Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/VGtyRPO6zYuCvFgui8C6AoC3VyQ.roa
File: VGtyRPO6zYuCvFgui8C6AoC3VyQ.roa (raw, json)
Hash identifier: QLgEzgAIiVhMgrv007i6feyKb/sMhUnxg2kYfOpKmp8=
Subject key identifier: 54:6B:72:44:F3:BA:CD:8B:82:BC:58:2E:8B:C0:BA:02:80:B7:57:24
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01957A25EB3BB9886B46EFF74FD0909AADC0
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/VGtyRPO6zYuCvFgui8C6AoC3VyQ.roa
Signing time: Sun 09 Mar 2025 09:04:20 +0000
ROA not before: Sun 09 Mar 2025 09:04:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:7a25:dbbc/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:7a:25:eb:3b:b9:88:6b:46:ef:f7:4f:d0:90:9a:ad:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Mar 9 09:04:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=546b7244f3bacd8b82bc582e8bc0ba0280b75724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:92:f5:c6:42:22:85:9e:c0:80:35:4d:a8:79:
ac:95:65:61:1d:05:b3:11:00:64:c0:7e:68:ad:13:
71:ac:dc:3d:7d:86:89:46:4f:02:00:9d:41:79:15:
1d:98:46:a4:8f:75:14:27:4d:74:a2:4b:9e:23:69:
cc:51:05:68:66:22:22:46:a8:fc:0c:9b:a9:1b:ee:
3f:4f:ca:10:c6:87:dd:c3:2f:f3:1f:cd:64:29:0c:
53:30:bf:59:09:c8:a9:e5:9d:17:b2:2d:f4:0e:76:
f4:ce:6c:5b:0e:f0:b6:81:43:22:6d:da:99:43:6b:
af:71:7d:25:4b:43:b6:da:18:e4:f4:8e:1f:17:7b:
25:ee:94:c7:b1:51:bb:1a:6c:74:43:f2:4f:38:5b:
f3:30:b5:b7:10:80:14:6a:ea:71:4a:0b:e0:e9:e1:
db:63:a9:f4:da:e4:59:e5:f2:27:a9:e9:ce:69:84:
9f:74:e4:a7:df:85:bc:24:6a:6f:c3:04:eb:ee:63:
cf:ba:73:fe:90:44:87:9a:9e:13:38:d1:17:cb:49:
ca:68:01:aa:16:b9:cf:a5:52:2d:04:6d:58:c3:db:
e4:36:91:12:f8:8b:04:ed:45:55:57:78:5f:d7:ae:
5d:e9:96:92:c9:3c:65:d5:47:16:ab:40:ea:0d:a5:
42:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:6B:72:44:F3:BA:CD:8B:82:BC:58:2E:8B:C0:BA:02:80:B7:57:24
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/VGtyRPO6zYuCvFgui8C6AoC3VyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:7a25:dbbc/128
Signature Algorithm: sha256WithRSAEncryption
77:fe:74:42:37:9d:4d:64:79:e7:3e:e3:61:11:d0:16:b3:6f:
9f:f3:e9:a6:74:54:2e:d2:9e:c6:93:9a:d6:31:c3:80:46:cc:
70:56:be:5e:dd:b2:5c:09:71:26:bc:81:d3:4a:58:23:40:e8:
fa:29:9a:1a:3e:9e:37:59:4e:37:13:77:39:4b:ec:30:a4:09:
60:ef:2f:fd:a5:aa:2c:1a:09:86:b6:bb:fc:29:a6:5c:4f:d5:
93:7e:d6:8a:b2:89:8c:5d:32:2d:ac:36:39:dc:44:aa:6b:ba:
31:b1:18:47:41:5f:9c:0a:cd:a6:ee:f4:f2:26:d6:a7:ff:c7:
f0:5f:7a:ab:d1:46:9e:cd:18:b4:1d:4d:e2:7d:b9:c8:ac:75:
90:e7:55:5e:9f:49:f0:69:da:af:b8:ca:57:73:f2:44:20:c0:
a4:c8:a2:0d:b1:33:01:9d:c8:3d:33:0e:ae:c4:53:a9:4f:57:
ff:e4:f1:85:64:9c:21:30:09:bb:31:d7:a9:37:a6:a1:ed:75:
29:58:4d:13:bc:b8:4d:ae:9c:95:e7:c4:7d:af:2a:d2:22:3f:
35:ef:fe:b4:00:c9:a8:11:1f:e1:74:0e:e4:b8:f5:51:61:b5:
cd:2a:ac:c4:70:f6:ef:0c:91:39:7e:de:84:64:af:70:e0:fe:
60:ad:ea:7c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 05:02:49 2025 by rpki-client