Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/VpVmsYSCQdNXwRHKQt0NXlzsSG0.roa
File: VpVmsYSCQdNXwRHKQt0NXlzsSG0.roa (raw, json)
Hash identifier: E6B6Bl1mDcetd5EsaNvc0boHcTeWIhqXRqGoFPj9kUc=
Subject key identifier: 56:95:66:B1:84:82:41:D3:57:C1:11:CA:42:DD:0D:5E:5C:EC:48:6D
Certificate issuer: /CN=a0f27d4f067614bcbc270346fa0d44b15f805163
Certificate serial: 01941F8C93716797508FA2967DF561E7BE5B
Authority key identifier: A0:F2:7D:4F:06:76:14:BC:BC:27:03:46:FA:0D:44:B1:5F:80:51:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/VpVmsYSCQdNXwRHKQt0NXlzsSG0.roa
Signing time: Wed 01 Jan 2025 01:48:13 +0000
ROA not before: Wed 01 Jan 2025 01:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15404
IP address blocks: 46.28.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:93:71:67:97:50:8f:a2:96:7d:f5:61:e7:be:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0f27d4f067614bcbc270346fa0d44b15f805163
Validity
Not Before: Jan 1 01:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=569566b1848241d357c111ca42dd0d5e5cec486d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c7:0f:02:53:3d:27:30:23:17:1d:c5:99:f6:
4a:77:64:c6:8c:8a:88:5a:0c:6e:9b:55:22:0e:ea:
9c:07:3f:20:31:c6:a9:7e:aa:67:bd:71:b9:57:85:
ae:57:d4:25:aa:75:6a:49:e8:16:8d:0d:41:35:51:
c7:81:04:95:21:38:98:45:1a:b2:54:df:5a:13:ed:
2c:0c:72:7e:4c:d7:ba:39:d3:a8:93:7a:ed:70:be:
62:3d:05:5f:ff:a9:5c:51:16:bd:8b:d7:f9:f6:52:
e6:61:94:cc:ca:cf:8e:5f:92:36:5c:e6:7a:e8:d0:
08:6e:5f:15:6d:da:97:e6:12:f8:95:9c:e9:be:cd:
fb:f7:17:91:d9:f5:72:39:b4:c6:96:2d:16:95:00:
d6:38:1b:9f:7a:40:04:03:b2:6e:0c:99:14:1f:2f:
ac:95:71:87:b4:8b:24:3b:06:a3:e0:d8:2c:18:8d:
d9:55:c4:cb:b4:45:cd:ea:44:11:15:b1:30:97:7c:
1e:f7:fd:ee:a5:6e:c3:a2:9c:8f:fa:05:91:6c:9c:
86:37:91:ee:1e:4d:65:2d:d1:7d:5e:fb:56:a6:fb:
dc:4e:07:cd:f6:5d:53:e0:7a:56:bd:36:b7:ef:b6:
1e:e6:af:a8:94:62:3a:d9:26:47:fd:aa:a6:01:bf:
4b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:95:66:B1:84:82:41:D3:57:C1:11:CA:42:DD:0D:5E:5C:EC:48:6D
X509v3 Authority Key Identifier:
keyid:A0:F2:7D:4F:06:76:14:BC:BC:27:03:46:FA:0D:44:B1:5F:80:51:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/VpVmsYSCQdNXwRHKQt0NXlzsSG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.28.212.0/24
Signature Algorithm: sha256WithRSAEncryption
55:74:f5:04:3d:5f:90:b2:79:cb:6e:82:5f:1f:56:a7:77:eb:
1d:a3:be:12:79:c7:7c:bc:e4:be:d1:12:6c:34:7a:b0:c0:51:
8e:e1:48:73:e1:2f:e4:b4:05:84:41:68:d8:88:10:17:52:7b:
ef:a3:41:f0:32:e0:60:c8:ae:f7:a4:44:2d:12:49:85:3b:bc:
94:f9:9d:73:fb:37:4c:16:83:44:c0:c8:cd:11:80:84:6e:71:
51:db:46:44:11:62:0b:e0:68:94:54:df:6b:3a:8a:99:74:70:
c3:7f:76:d4:4d:5b:b4:56:5d:f0:79:fb:8f:79:ce:24:32:33:
33:7e:12:c3:02:99:f4:05:a8:bd:c3:c7:24:6b:a9:c6:ce:3f:
96:c6:97:85:6e:4d:0c:9d:1a:77:e5:88:3e:97:b3:64:e3:86:
a9:3c:ea:8e:ff:4d:24:47:a8:be:dd:c6:b2:46:e6:97:c8:a2:
dd:75:44:ba:d0:20:b3:d7:ec:f3:9d:25:78:ba:f7:1b:25:87:
93:26:47:f8:ce:74:8b:e8:d5:78:72:5b:84:ee:d5:9a:e9:4b:
f6:4c:7b:e4:a9:9d:1e:74:e9:06:84:02:42:a8:58:83:29:f8:
69:c8:f9:a8:e2:24:77:b7:3b:1e:1d:e9:70:21:a3:02:6d:93:
e6:01:8e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:08:03 2025 by rpki-client