Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Vmz67Zz74iQpAAAuTUKUUO7hB8w.roa
File: Vmz67Zz74iQpAAAuTUKUUO7hB8w.roa (raw, json)
Hash identifier: g8bVjKcj7yx0EWTrX+IhaoXCJ7h/xkE4HGMwudcblf0=
Subject key identifier: 56:6C:FA:ED:9C:FB:E2:24:29:00:00:2E:4D:42:94:50:EE:E1:07:CC
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191B201E1B3CCF717A26A85850D8AFD4AEB
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Vmz67Zz74iQpAAAuTUKUUO7hB8w.roa
Signing time: Mon 02 Sep 2024 09:12:33 +0000
ROA not before: Mon 02 Sep 2024 09:12:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b2:01:e1:b3:cc:f7:17:a2:6a:85:85:0d:8a:fd:4a:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Sep 2 09:12:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=566cfaed9cfbe2242900002e4d429450eee107cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:51:72:68:67:d6:9b:1e:e2:72:c7:fa:84:2e:
28:05:cb:c2:6a:4e:19:7a:d5:d9:64:50:f0:ab:05:
c7:1e:da:8f:70:4a:cd:6a:af:67:e3:ea:70:98:b5:
e2:77:f2:54:3e:14:1b:5b:94:82:a2:39:99:cf:b0:
5a:ea:81:33:f5:48:c4:ac:c8:ea:c8:80:49:aa:31:
19:ab:3c:34:fd:be:46:8c:97:3b:36:b9:a6:14:ae:
87:21:ee:74:74:b1:89:99:ad:df:31:bb:22:e0:09:
3c:d8:22:e1:b6:82:88:ea:b7:4c:e5:49:bd:32:6c:
a5:06:a3:7e:0f:bd:19:0f:5d:77:fc:2b:40:e6:81:
8d:6e:a9:55:1a:36:eb:db:1f:48:ae:5a:2b:dc:ed:
c2:fb:74:c5:b7:c9:63:3e:7e:87:6e:c6:25:b5:04:
50:1e:5b:ac:8e:99:b1:c9:68:8c:b4:b0:67:66:1f:
13:00:cf:91:03:f8:10:d5:45:24:55:10:2b:93:87:
ca:97:ed:e4:db:47:ae:4d:59:ad:03:ca:db:9d:93:
54:d1:48:90:a6:23:45:b3:79:59:0b:9f:6a:2d:f7:
89:d3:04:b8:da:4d:ff:23:2a:62:00:6b:85:26:56:
cc:31:4a:01:5e:c9:d3:6d:69:de:db:c1:d1:b1:7d:
c5:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:6C:FA:ED:9C:FB:E2:24:29:00:00:2E:4D:42:94:50:EE:E1:07:CC
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Vmz67Zz74iQpAAAuTUKUUO7hB8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
89:3b:ac:4f:b6:72:da:ff:65:d7:c8:f6:97:5c:4d:9f:4b:59:
f7:61:07:f9:d7:82:03:b7:79:24:78:2a:a8:ef:08:13:77:bd:
d2:b7:af:f6:db:a2:d5:ef:40:01:75:e2:6c:93:cd:46:46:65:
16:8e:94:f4:be:f9:b9:aa:be:ad:02:b9:17:e8:c7:bb:d7:ff:
8c:b8:aa:8a:17:9a:9f:f9:e0:91:df:ae:32:25:4e:8f:7c:d0:
0d:7c:0f:75:cd:8e:d3:c7:38:73:b8:43:3a:1c:3f:47:97:f5:
15:66:38:fd:c8:6b:b9:49:a2:31:a1:67:62:3c:66:a3:8d:2a:
87:0b:be:f2:be:06:74:4d:1b:d7:96:47:3f:bf:ba:06:f4:ea:
ee:d4:e9:66:e7:06:30:b1:92:2b:f4:91:a4:8e:7c:1a:19:06:
ed:6e:ed:d2:89:ed:f6:1a:76:e2:9d:a4:e0:45:fe:a2:e5:9a:
fd:dc:23:24:1f:0d:5b:f7:d6:07:ea:23:4d:37:9f:0a:cd:ff:
b8:fe:b7:64:0b:e0:f7:6e:9a:1f:28:d9:a5:c9:d6:e4:74:ea:
e2:2c:87:b8:11:9e:c4:29:9d:07:4b:d1:b5:68:72:4b:7f:b7:
67:40:99:7a:03:04:b2:30:29:c7:7c:32:37:f5:b1:7e:f9:16:
91:25:9d:72
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 03:54:44 2025 by rpki-client