Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/VfQdwAgUcznRLbrv99jaktlQ9qI.roa
File: VfQdwAgUcznRLbrv99jaktlQ9qI.roa (raw, json)
Hash identifier: Bqt/nDJBb/dvPOyc1i+cKxim+AXW+/bFi2jAIu/te0w=
Subject key identifier: 55:F4:1D:C0:08:14:73:39:D1:2D:BA:EF:F7:D8:DA:92:D9:50:F6:A2
Certificate issuer: /CN=672f0e42b08aa451fc583a358ec370ffbd2dac68
Certificate serial: 101F43F2
Authority key identifier: 67:2F:0E:42:B0:8A:A4:51:FC:58:3A:35:8E:C3:70:FF:BD:2D:AC:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zy8OQrCKpFH8WDo1jsNw_70trGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/VfQdwAgUcznRLbrv99jaktlQ9qI.roa
Signing time: Fri 11 Feb 2022 07:59:49 +0000
ROA not before: Fri 11 Feb 2022 07:59:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 2a06:56c1::/40 maxlen: 48
2a06:56c1::/32 maxlen: 48
2a06:56c2::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 270484466 (0x101f43f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=672f0e42b08aa451fc583a358ec370ffbd2dac68
Validity
Not Before: Feb 11 07:59:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=55f41dc008147339d12dbaeff7d8da92d950f6a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:66:3d:0e:93:c4:74:c8:d7:e4:ba:76:38:9a:
c2:3d:cd:ad:4b:29:02:b5:99:bf:81:79:70:6b:1f:
0e:46:ce:7c:6c:b4:68:29:99:d5:4c:23:10:a1:ca:
b9:b6:e5:ac:16:25:dd:18:92:0d:9a:25:10:b2:44:
e1:ac:7a:0d:88:83:1f:67:f6:e2:5c:ee:33:05:01:
a8:20:49:4e:2a:ac:cc:43:12:54:f1:8d:96:de:aa:
78:a7:e3:39:82:88:8c:99:69:e0:0e:2f:f9:c7:f5:
72:dc:9e:03:eb:ac:08:81:1b:8b:c0:d3:3c:68:e5:
a1:eb:ba:6a:89:67:34:81:69:51:99:3f:13:e9:f7:
fd:a7:cb:11:07:22:ff:8e:49:4a:da:b1:ae:43:7b:
7b:c5:1b:5f:bf:af:7e:f0:b6:de:38:f0:c9:26:ac:
a9:77:bf:aa:3f:9d:55:2e:d2:85:d1:1c:e2:47:bd:
f2:fe:67:de:3c:77:e7:a0:00:c5:ef:68:47:68:fb:
21:14:3b:ae:5b:7b:df:71:85:2a:a2:10:5a:79:60:
3f:08:5c:41:24:55:20:70:36:03:93:f4:1a:44:5f:
f3:f9:31:34:68:ed:f5:0c:af:e5:15:96:02:23:68:
83:70:70:a6:ad:cb:3f:68:8e:f3:73:a2:46:88:f1:
a2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:F4:1D:C0:08:14:73:39:D1:2D:BA:EF:F7:D8:DA:92:D9:50:F6:A2
X509v3 Authority Key Identifier:
keyid:67:2F:0E:42:B0:8A:A4:51:FC:58:3A:35:8E:C3:70:FF:BD:2D:AC:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zy8OQrCKpFH8WDo1jsNw_70trGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/VfQdwAgUcznRLbrv99jaktlQ9qI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:56c1::-2a06:56c2:ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
69:de:9e:e0:4a:29:df:b6:aa:70:6e:21:52:7c:55:8b:c7:0a:
59:76:0d:e4:68:c1:7f:dd:f2:13:fa:af:12:71:04:02:72:42:
f6:3d:a9:09:37:a6:9f:da:34:b8:19:4a:cb:35:48:9b:e3:10:
d9:9e:83:d9:2a:d0:17:f8:ce:2a:3f:49:b2:c7:81:9a:62:5f:
23:7a:0c:21:94:1b:06:93:d3:a5:eb:8b:62:69:67:7c:7e:32:
eb:48:7a:7f:21:65:ee:38:9b:e3:10:6a:27:1d:11:4e:65:2e:
ed:df:98:9a:83:46:71:52:b3:43:63:c8:f3:55:fb:83:21:aa:
b7:11:44:a8:70:01:fd:e8:3d:8d:23:b5:73:58:bd:63:7a:5c:
b6:41:1b:b4:21:83:87:4c:5d:a4:13:fd:7b:bd:28:9b:da:91:
1f:79:af:3e:2a:6f:52:ef:d1:1b:86:5e:b1:92:40:06:0b:b4:
de:4a:72:01:c9:5d:10:70:44:96:06:b4:80:01:40:79:76:f5:
a1:bf:24:47:57:4c:33:5c:ef:53:05:28:39:29:26:99:52:26:
f2:2c:c4:8c:e7:8c:44:57:ea:69:06:31:87:94:88:85:d4:86:
15:1b:aa:9e:97:1e:30:89:f8:00:06:15:36:b4:5b:4d:c6:9b:
41:d1:47:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:39:02 2025 by rpki-client