Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/vKYRGP-21GR3EqdTBsQpOLAO49A.roa
File: vKYRGP-21GR3EqdTBsQpOLAO49A.roa (raw, json)
Hash identifier: idpPMarZEiwnunRplvzVxl8gGZRFMvCTrJxh1YU2W08=
Subject key identifier: BC:A6:11:18:FF:B6:D4:64:77:12:A7:53:06:C4:29:38:B0:0E:E3:D0
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0194BCAE2C7ABD305B21ED356AC2AF05DD90
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/vKYRGP-21GR3EqdTBsQpOLAO49A.roa
Signing time: Fri 31 Jan 2025 14:05:18 +0000
ROA not before: Fri 31 Jan 2025 14:05:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:194:bcad:353e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:ae:2c:7a:bd:30:5b:21:ed:35:6a:c2:af:05:dd:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jan 31 14:05:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bca61118ffb6d4647712a75306c42938b00ee3d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:68:aa:f3:c3:c1:b6:c8:e7:d0:88:38:3b:08:
a6:d0:0e:02:e7:67:6a:80:fa:2a:06:86:d5:89:f6:
32:14:17:00:8b:d4:6f:a0:15:aa:1c:04:fd:76:17:
d6:59:1e:1e:c5:78:1d:ea:d6:00:26:bc:b2:73:39:
41:13:2a:98:14:26:ed:fa:f9:18:a2:01:3b:7c:bd:
6a:e5:d2:83:eb:da:de:08:9b:dd:c3:94:8f:43:f5:
ae:d9:1d:de:c0:4f:bc:a5:14:37:37:1a:7e:cf:80:
62:0a:42:c2:e4:71:b8:ac:44:8b:c0:d1:da:f7:59:
30:c3:d8:41:8a:9a:10:73:f3:e3:f0:b8:95:26:bf:
6d:a5:ed:36:76:df:85:a9:1e:f2:46:0b:4c:a3:86:
dd:15:c2:a4:17:07:1e:8b:e2:7a:90:7a:58:91:89:
bb:7e:e9:7b:6e:31:35:01:ac:f7:e9:46:22:a2:c7:
3f:56:b7:0a:48:44:ef:26:2f:29:79:f9:2b:33:21:
ed:ca:a1:2a:57:88:8e:17:f3:ec:10:be:d0:a7:0e:
f2:c3:2e:4b:c7:2a:a2:d3:e7:80:4e:e0:43:45:7c:
f7:b6:87:a3:6e:65:1e:cf:f2:63:c9:ea:c0:01:9a:
3f:a7:03:8f:6b:70:29:3c:20:b2:ce:90:ea:b1:3e:
c0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:A6:11:18:FF:B6:D4:64:77:12:A7:53:06:C4:29:38:B0:0E:E3:D0
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/vKYRGP-21GR3EqdTBsQpOLAO49A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:194:bcad:353e/128
Signature Algorithm: sha256WithRSAEncryption
14:05:7a:c6:fb:cf:ac:d6:79:56:8d:e7:7f:bb:29:12:02:2b:
21:6a:92:6a:60:c8:06:78:a1:24:8e:16:05:f8:45:ac:5f:29:
1d:ba:97:77:ef:30:4b:84:a7:f7:99:96:bc:ab:7f:5c:cc:63:
37:d9:71:c5:fa:de:e2:d2:24:dd:bb:8c:81:4d:9d:1c:2e:63:
00:8a:cf:c7:ed:70:93:d8:25:5a:8a:a3:78:e4:9d:8c:32:48:
be:20:13:1a:4d:85:3d:b2:cd:e9:0f:12:9c:61:92:3f:fe:44:
90:2a:4b:89:1f:dd:2d:a9:15:19:d9:5e:68:86:2d:83:d3:5e:
67:52:2f:15:e2:82:e9:42:4b:81:c7:a4:d0:67:91:cc:70:74:
fa:f0:d5:df:3d:8e:27:8e:87:f1:12:c9:c7:8a:87:51:d3:47:
96:af:72:23:e6:4e:d2:7a:2e:f8:0a:e9:28:34:e3:9c:96:c3:
0c:da:fc:44:2a:99:42:e8:a3:e4:e7:cd:32:3f:d5:18:80:44:
f4:30:59:5c:4a:99:cd:bf:4a:bc:61:96:0b:7d:ab:22:b8:a2:
e4:4e:1e:b2:20:e9:e1:b0:9a:e0:ef:18:34:be:66:0d:e1:85:
3a:b3:6d:a9:c7:e6:d2:f4:83:e1:8d:9b:52:58:82:11:1d:ef:
52:ac:f3:76
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 21 01:26:10 2025 by rpki-client