Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/VjRpR6Q_zdNzWBSMSoMy5oOWtEo.roa
File: VjRpR6Q_zdNzWBSMSoMy5oOWtEo.roa (raw, json)
Hash identifier: Yvl3YC/Mcz3f7ipfbkZrIzqAoIAplS+vJf9Nj2BMNNA=
Subject key identifier: 56:34:69:47:A4:3F:CD:D3:73:58:14:8C:4A:83:32:E6:83:96:B4:4A
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019449AF651658A75308D2CD783BE9482C02
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/VjRpR6Q_zdNzWBSMSoMy5oOWtEo.roa
Signing time: Thu 09 Jan 2025 06:10:18 +0000
ROA not before: Thu 09 Jan 2025 06:10:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:194:2c0d:6680/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:49:af:65:16:58:a7:53:08:d2:cd:78:3b:e9:48:2c:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jan 9 06:10:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=56346947a43fcdd37358148c4a8332e68396b44a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0e:33:11:a1:cb:2b:48:16:7f:10:c0:1e:8a:
0f:2f:a7:87:53:8b:33:7b:90:d9:ca:3c:79:ce:9e:
d2:95:05:2b:73:46:cf:a8:9b:97:94:30:18:52:3c:
ab:8e:e3:44:97:75:f2:20:24:cd:b0:9f:8b:b4:95:
cf:f3:ae:7b:11:71:a6:70:6d:68:c0:46:e2:65:9b:
09:b9:2c:18:ea:74:22:cd:8e:bd:f5:c0:c7:5e:37:
22:1b:f0:16:6a:2c:01:bb:f0:37:5c:cc:f4:a4:3e:
13:7d:ad:0f:9f:1a:12:51:2c:08:61:93:b1:42:2a:
7a:9a:29:24:5a:33:45:07:81:dd:b7:b6:b0:b2:77:
c6:bc:75:27:8f:67:bd:4d:8e:fb:fe:7d:f1:28:ea:
6f:85:11:dc:b4:fe:db:18:b1:e6:8d:d0:74:6e:e7:
50:38:13:c3:48:6b:2e:15:cc:65:bf:dc:1a:15:05:
32:b9:df:d6:d3:df:8c:77:49:1d:6a:88:5c:82:5a:
53:1e:68:38:c1:0d:12:5c:e0:2e:42:53:c9:53:2f:
83:90:f3:85:a9:0d:7f:be:86:9b:28:8a:9a:26:89:
c9:cd:3b:ba:b9:10:59:34:b7:c2:72:19:b6:68:98:
f4:ea:a2:3e:0a:c1:b5:5e:d9:25:f0:14:e1:d1:24:
18:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:34:69:47:A4:3F:CD:D3:73:58:14:8C:4A:83:32:E6:83:96:B4:4A
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/VjRpR6Q_zdNzWBSMSoMy5oOWtEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:194:2c0d:6680/128
Signature Algorithm: sha256WithRSAEncryption
45:34:38:dc:65:e5:6b:53:8e:af:b0:8f:17:de:d7:57:5f:fd:
44:54:e8:9c:15:7f:9e:fa:44:8c:67:0f:e9:df:ac:98:2b:c5:
06:2b:db:16:df:b0:1c:64:55:61:52:69:6f:46:b0:93:a7:e9:
a2:77:4f:88:99:d3:8c:7a:41:c5:3a:51:69:a8:d7:a8:4e:79:
3b:0f:05:07:f1:c9:be:99:a8:46:84:fe:c9:3a:aa:4e:ab:59:
ff:6d:0c:3d:5a:eb:e8:a9:d4:fe:a6:f9:db:04:44:05:11:db:
91:39:17:07:fc:86:09:37:a9:2a:73:1e:11:2e:ed:5c:49:77:
8d:95:bd:da:32:f9:29:63:fa:18:8b:65:76:86:58:7e:d4:20:
59:ea:29:b8:08:72:6c:13:10:bf:21:f0:ec:08:85:20:a3:3b:
8e:47:87:fd:c1:63:3c:87:b7:ff:cb:b1:8f:c0:8f:b3:e2:b2:
b6:e3:68:0d:46:a8:b7:64:fa:fc:d4:05:09:c4:5c:e2:f9:3c:
0c:93:0c:22:5e:b3:3f:7c:f1:e6:4c:55:4f:49:75:a8:6f:60:
5b:bb:23:a0:96:d2:4d:41:97:d3:cc:84:a9:f3:5d:17:2c:a6:
2a:57:d5:19:99:1c:23:25:c1:91:eb:7b:9c:f6:89:30:69:04:
f7:b8:ff:fe
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 05:05:26 2025 by rpki-client