Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/VPKA4lwV46LW0ZVgKI7ZMIk58RE.roa
File: VPKA4lwV46LW0ZVgKI7ZMIk58RE.roa (raw, json)
Hash identifier: rgjSHhZb7E7S7C9y8xlMHnuqG0OinH0P/qTuRn9Pu58=
Subject key identifier: 54:F2:80:E2:5C:15:E3:A2:D6:D1:95:60:28:8E:D9:30:89:39:F1:11
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01915327BFC592F94FBD766492A42B132552
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/VPKA4lwV46LW0ZVgKI7ZMIk58RE.roa
Signing time: Wed 14 Aug 2024 23:09:59 +0000
ROA not before: Wed 14 Aug 2024 23:09:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:53:27:bf:c5:92:f9:4f:bd:76:64:92:a4:2b:13:25:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 14 23:09:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=54f280e25c15e3a2d6d19560288ed9308939f111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:07:66:a6:61:75:b6:90:12:91:0b:b8:ab:8a:
69:ad:17:f9:7d:f3:d3:41:c5:28:d2:24:bd:ad:62:
2e:af:f8:46:4e:51:34:a0:fb:0c:f1:74:7b:a6:a4:
d2:d7:f5:34:b7:a1:85:c6:7c:d4:47:b6:8e:63:cc:
f3:a0:bc:71:78:5f:3b:e3:7e:f1:81:1d:40:11:c3:
5a:d5:a1:7c:70:e0:9a:db:5d:d6:5a:24:ee:c1:22:
fc:ef:93:cd:26:5d:a0:c1:37:e1:e1:3f:94:86:28:
c4:52:53:ef:ed:14:9a:15:fd:4d:67:82:f6:18:75:
23:69:ac:94:50:ee:d0:cf:24:e3:0b:c7:26:dc:de:
79:64:f6:27:0e:67:ee:af:6e:d1:57:4a:5c:9c:fa:
13:8f:c3:62:f6:b5:0b:c4:b1:36:89:6f:cf:37:dd:
bf:d6:98:9e:35:99:a8:e7:55:9f:d3:54:c8:66:9c:
73:8c:aa:28:27:5f:c1:b7:af:11:ff:15:f9:fa:1c:
0d:88:4b:c6:8f:22:da:89:15:52:cb:cc:d4:bc:a6:
0a:00:f8:1b:e0:5f:9a:a0:c2:a1:d5:d9:a6:07:18:
cd:fb:33:a5:c1:24:9d:d1:9f:01:26:c8:21:61:c2:
ea:e4:a6:9f:94:46:82:82:00:4a:97:57:e2:39:6e:
0d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:F2:80:E2:5C:15:E3:A2:D6:D1:95:60:28:8E:D9:30:89:39:F1:11
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/VPKA4lwV46LW0ZVgKI7ZMIk58RE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
2c:ed:52:9b:51:4f:fc:76:75:38:bd:8f:e6:89:74:f5:cc:80:
1e:bf:be:5f:81:98:10:5b:22:70:9d:01:5e:ac:3d:8f:58:48:
3a:c7:21:b6:d9:f2:ed:cc:a8:46:fa:0d:84:40:d3:f6:39:76:
87:55:6c:85:53:c6:ae:47:68:e8:be:cb:65:ee:43:f2:d8:42:
fc:db:00:33:3a:0a:c6:94:53:36:53:88:85:84:26:46:4f:1e:
67:90:7d:8e:e6:20:85:0a:86:81:45:8b:89:a7:7f:38:cb:e9:
1b:c4:99:c0:1d:9a:a6:ef:5c:5f:9d:fb:f6:4a:95:ac:78:70:
93:1b:61:72:73:55:69:1c:56:1f:02:3a:7d:1a:b6:7d:48:b8:
7f:32:09:dd:d6:2f:1f:5f:72:16:5e:ff:31:0f:91:a3:03:79:
52:84:f2:1d:dd:bb:33:ec:e1:0b:8b:a8:a1:af:e1:4f:24:9e:
24:9c:46:17:4d:85:c9:5a:54:a4:e1:2e:09:0b:33:e7:02:b8:
66:92:4a:36:a9:a2:fb:44:de:31:7c:da:4f:cd:3e:82:99:eb:
fb:7f:54:a5:89:e5:b8:05:07:08:87:36:5d:45:4d:ad:ce:2b:
23:03:1f:30:f3:26:48:4e:37:66:d1:94:12:37:3f:3a:87:8a:
4e:6d:4e:b6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 20 02:07:01 2025 by rpki-client