Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/vlCPGy4W_qrdOdVt4d3sNQCG280.roa
File: vlCPGy4W_qrdOdVt4d3sNQCG280.roa (raw, json)
Hash identifier: Iy+AfHYZ4PwcywWp7TpQn7V7lRl1w4DvndPcpPgiUtA=
Subject key identifier: BE:50:8F:1B:2E:16:FE:AA:DD:39:D5:6D:E1:DD:EC:35:00:86:DB:CD
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019592DAD6DA5BB67C285DD5FA31446CFF9F
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/vlCPGy4W_qrdOdVt4d3sNQCG280.roa
Signing time: Fri 14 Mar 2025 04:12:50 +0000
ROA not before: Fri 14 Mar 2025 04:12:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:86cf:630c/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:92:da:d6:da:5b:b6:7c:28:5d:d5:fa:31:44:6c:ff:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Mar 14 04:12:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=be508f1b2e16feaadd39d56de1ddec350086dbcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:69:02:02:0f:88:74:36:4e:ee:13:c1:66:ae:
5e:2f:b7:4c:81:10:0f:5f:53:df:d8:04:85:09:88:
69:9b:bc:50:35:2c:5b:ca:ef:6f:b0:68:5a:60:91:
f2:80:84:5b:a9:c4:46:f0:a4:03:64:9a:d2:d9:4b:
ff:f3:9c:c9:4f:7f:cf:22:3b:64:26:ae:9b:79:b0:
2d:55:ed:29:36:24:0a:bf:1c:7b:0e:a3:25:76:09:
74:36:93:12:e3:f1:a5:fb:bf:25:8b:4c:a5:5a:8e:
6e:10:a3:81:31:ea:70:1c:8b:dc:64:2c:17:a0:ef:
33:84:0c:79:ca:9f:cd:10:27:b5:96:21:c5:54:0f:
99:3d:0d:bb:05:d1:45:f7:65:7f:3b:0c:ad:86:6d:
bf:2b:54:7b:a8:27:27:9f:cc:0c:ee:6c:37:fb:40:
bc:4e:a1:a2:da:a5:89:79:79:d4:d4:28:1e:6a:23:
de:6e:3c:6d:35:b5:ea:01:30:eb:b5:66:e3:37:aa:
dd:15:07:6c:5a:23:a6:4e:80:5e:c1:b9:8f:b8:18:
6e:73:78:73:a9:ef:97:78:82:cb:58:e4:18:68:17:
a6:15:20:43:98:4c:aa:84:d7:1e:25:ec:d8:45:da:
76:fb:7a:64:cb:d6:81:46:e7:9e:c7:6f:8d:19:98:
09:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:50:8F:1B:2E:16:FE:AA:DD:39:D5:6D:E1:DD:EC:35:00:86:DB:CD
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/vlCPGy4W_qrdOdVt4d3sNQCG280.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:86cf:630c/128
Signature Algorithm: sha256WithRSAEncryption
8c:2f:1a:1d:2e:73:79:04:be:47:8f:cf:f9:a9:39:bf:98:04:
2d:f6:b2:a5:d6:4d:79:58:c5:14:e0:fb:af:e0:56:14:5a:ee:
67:ba:e2:10:4e:c2:b2:28:cc:0a:ef:10:90:2c:bc:8f:75:21:
be:b8:3e:36:d9:e4:f1:7e:f8:7c:77:42:3b:c9:b8:96:0c:4c:
56:4c:3d:c9:65:7e:86:7f:1e:e5:0d:39:fa:b1:50:0b:7a:f0:
a1:b6:07:8c:4c:f6:25:0b:40:dd:1f:5b:f4:e3:b4:04:04:10:
53:9f:3a:48:2e:f2:f0:55:4c:93:21:2a:c7:18:dd:70:ee:96:
03:34:03:84:95:1b:37:8e:82:e9:18:c0:81:75:6f:70:96:ce:
66:02:da:ee:95:04:f9:f5:30:24:b9:8d:8b:3a:15:36:3a:9d:
7e:1c:0a:98:d1:4a:03:29:c5:56:34:a0:9d:8a:4e:48:a3:4a:
01:08:5e:c8:6d:74:51:22:bd:83:78:5b:b4:ce:56:72:ec:ed:
76:7e:e7:fd:c1:b2:f0:c7:7f:59:00:5b:44:97:26:31:b9:e0:
3c:92:b4:38:7f:d8:71:c7:59:32:3e:cf:38:11:fb:14:65:e1:
2c:f2:ba:49:6b:47:74:c0:02:27:11:89:20:9c:a5:65:64:72:
77:08:27:48
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:18:12 2025 by rpki-client