Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/vbGnVuqtxhBtr_zaQdmrd5xX-KM.roa
File: vbGnVuqtxhBtr_zaQdmrd5xX-KM.roa (raw, json)
Hash identifier: 0Bt+mKnIUtZVugnciZKROJKsAX3zt07Q7jKrndVnYU4=
Subject key identifier: BD:B1:A7:56:EA:AD:C6:10:6D:AF:FC:DA:41:D9:AB:77:9C:57:F8:A3
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01944ABD7D1F516277E9AE015E42FB7D0628
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/vbGnVuqtxhBtr_zaQdmrd5xX-KM.roa
Signing time: Thu 09 Jan 2025 11:05:19 +0000
ROA not before: Thu 09 Jan 2025 11:05:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:194:2c0d:6680/128 maxlen: 128
2001:67c:64:ffff:0:194:4abc:ac6b/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4a:bd:7d:1f:51:62:77:e9:ae:01:5e:42:fb:7d:06:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jan 9 11:05:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bdb1a756eaadc6106daffcda41d9ab779c57f8a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:fa:fb:31:78:03:80:9e:1d:53:84:0a:27:95:
8e:4e:1b:e5:6e:94:8d:21:6c:67:e4:ef:76:1e:a8:
37:69:44:e7:42:37:d7:5a:5e:bb:19:8f:2c:46:28:
a6:06:0b:58:79:f6:08:28:54:af:39:db:6a:4e:30:
5a:09:84:d8:1e:57:ca:30:15:02:f6:16:a1:f7:22:
4a:85:8f:53:63:d9:8a:8b:dc:b4:46:bf:be:2d:5a:
c2:e1:44:c5:9c:af:d3:cc:6b:3a:7d:27:ab:c4:59:
35:da:49:bd:33:d9:f0:da:a8:1f:9e:ec:40:02:48:
f3:40:fc:b4:b2:4d:be:ef:d6:af:46:b4:38:9b:26:
92:66:a1:e8:87:a6:32:87:ec:46:7f:5d:3c:3c:8c:
5c:c6:aa:04:5c:04:22:fc:d7:10:47:c4:c7:85:d9:
2c:81:a9:83:9c:a5:9c:31:8a:7b:5c:e5:0e:b5:ad:
53:b4:9c:75:97:ea:65:33:58:6a:ba:86:dc:f7:02:
56:0f:69:be:64:06:41:71:97:d3:0a:07:04:cc:cf:
d0:5b:bd:11:00:32:24:2b:02:ab:90:49:63:16:59:
43:69:dd:ea:e9:ca:22:5a:37:b5:97:61:9d:f8:70:
d8:78:33:15:0b:71:eb:4a:82:a6:38:0c:fe:4a:0f:
f6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:B1:A7:56:EA:AD:C6:10:6D:AF:FC:DA:41:D9:AB:77:9C:57:F8:A3
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/vbGnVuqtxhBtr_zaQdmrd5xX-KM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:194:2c0d:6680/128
2001:67c:64:ffff:0:194:4abc:ac6b/128
Signature Algorithm: sha256WithRSAEncryption
63:07:54:09:7f:ea:82:e8:3c:2c:d7:4d:43:13:62:b2:3c:4d:
0a:85:5b:80:cc:e6:63:12:2e:9d:dd:01:0e:72:17:22:e1:d8:
a1:db:6d:c6:80:79:bc:10:3b:86:47:b5:e3:f1:6e:aa:af:91:
bf:44:ff:bc:da:c0:31:0b:63:80:dd:82:fe:ad:81:f5:e0:06:
be:ac:d4:96:f6:ed:f2:61:83:58:a2:d4:d2:28:be:2d:55:af:
62:ec:f6:64:a7:44:9a:ba:c0:1f:02:ec:ba:5c:7f:19:81:e7:
a9:cf:65:97:d3:35:f3:57:db:c2:f1:46:70:c3:4b:29:59:a8:
29:2a:18:69:1f:f8:73:e6:c1:f2:9e:e7:7d:c8:cd:cd:ba:77:
64:21:65:58:a9:dd:6c:e4:0d:7e:4d:53:e5:fb:fc:af:6d:fa:
d6:1a:fb:c1:ac:65:9f:b7:e6:1a:1f:86:33:c1:44:f5:06:9f:
f0:40:a9:02:fb:7f:dc:a2:af:74:95:4b:10:98:d6:d4:5b:9a:
36:3c:03:6c:a1:6e:c1:6c:2c:d1:53:b8:92:dc:b5:72:95:94:
47:28:48:ef:8b:36:a2:f4:f6:c5:82:49:f7:5e:33:3a:79:f0:
e3:b8:4c:2a:1a:3c:a7:f1:63:14:c7:71:0a:fb:eb:32:e8:19:
1c:08:6b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:23:13 2025 by rpki-client