Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/efcd83-f0b9-489d-9b70-4cb686f15c6e/1/VrBIik-px-B2Sg3A0PYj6BIDY5E.roa
File: VrBIik-px-B2Sg3A0PYj6BIDY5E.roa (raw, json)
Hash identifier: +Vd5KMjSXMbZybWCyRJletm+kjtb25tf8H5j2u05CCQ=
Subject key identifier: 56:B0:48:8A:4F:A9:C7:E0:76:4A:0D:C0:D0:F6:23:E8:12:03:63:91
Certificate issuer: /CN=ffd43112f918c7166cc0558c1a3a6ecded1c0e4f
Certificate serial: 01860D745356CD292449D7354454E35DEC9A
Authority key identifier: FF:D4:31:12:F9:18:C7:16:6C:C0:55:8C:1A:3A:6E:CD:ED:1C:0E:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_9QxEvkYxxZswFWMGjpuze0cDk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/efcd83-f0b9-489d-9b70-4cb686f15c6e/1/VrBIik-px-B2Sg3A0PYj6BIDY5E.roa
Signing time: Wed 01 Feb 2023 14:49:32 +0000
ROA not before: Wed 01 Feb 2023 14:49:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205848
IP address blocks: 2001:67c:129c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:0d:74:53:56:cd:29:24:49:d7:35:44:54:e3:5d:ec:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffd43112f918c7166cc0558c1a3a6ecded1c0e4f
Validity
Not Before: Feb 1 14:49:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=56b0488a4fa9c7e0764a0dc0d0f623e812036391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0c:b8:91:66:8d:93:7d:0b:ba:52:fe:51:a8:
56:59:e1:ca:e4:50:23:29:21:ef:35:fa:8b:44:6f:
bf:03:2c:42:18:45:f0:51:01:bc:df:25:e9:ea:12:
86:54:3a:f6:74:8b:e6:9a:8a:78:1a:35:3f:7d:cf:
25:59:24:69:eb:c4:ad:f3:42:19:7f:f7:0c:5b:0e:
89:2b:e5:6b:95:5e:00:5f:39:1a:86:bd:a3:6c:a2:
6c:3f:86:24:98:b4:f8:0b:d6:42:4d:84:82:68:45:
33:31:d7:03:3b:0f:a7:0d:01:82:b3:62:f2:38:61:
ae:f5:2e:5b:37:30:57:5b:f0:29:79:6e:ce:b0:66:
24:0f:e1:8c:37:28:a1:4c:23:cf:d2:48:7f:0b:72:
dc:d0:6f:b4:a1:24:09:9a:67:b6:6e:23:3b:e5:fe:
44:4f:aa:2e:f5:87:b5:61:1b:a9:d3:60:a5:dd:36:
b1:78:78:94:d6:6a:cf:1d:8c:2c:32:a9:14:81:fe:
c6:e2:2c:ab:84:12:ea:bb:81:1c:56:fb:94:ad:57:
3d:7f:79:9b:02:4e:da:81:c1:9d:df:f1:4a:48:cb:
0e:9c:0c:32:11:37:d1:f7:a9:1a:db:29:6e:81:82:
25:a5:84:5c:ff:6a:40:6b:6e:23:47:8e:3c:e5:9d:
f9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:B0:48:8A:4F:A9:C7:E0:76:4A:0D:C0:D0:F6:23:E8:12:03:63:91
X509v3 Authority Key Identifier:
keyid:FF:D4:31:12:F9:18:C7:16:6C:C0:55:8C:1A:3A:6E:CD:ED:1C:0E:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_9QxEvkYxxZswFWMGjpuze0cDk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/efcd83-f0b9-489d-9b70-4cb686f15c6e/1/VrBIik-px-B2Sg3A0PYj6BIDY5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/efcd83-f0b9-489d-9b70-4cb686f15c6e/1/_9QxEvkYxxZswFWMGjpuze0cDk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:129c::/48
Signature Algorithm: sha256WithRSAEncryption
75:ee:ec:96:85:90:33:43:6c:34:10:d2:5a:e4:44:e1:14:de:
a5:a0:b9:c0:e7:b8:95:3d:53:a1:06:8b:e3:2c:76:4e:e9:fd:
b4:eb:39:ea:51:c3:67:05:34:a5:2c:31:dd:5f:39:d6:8d:4e:
cb:ef:5a:6d:09:68:69:01:67:84:53:76:2c:8d:35:f6:e6:a2:
ff:5a:7d:8d:b4:ce:cd:34:f8:ba:9a:e6:d0:9f:06:18:c0:f4:
e8:0c:e0:91:31:c4:ba:6a:93:d9:19:d8:52:e7:56:cb:d3:d7:
8a:b2:30:9e:01:42:89:df:4f:0b:66:c6:97:5a:15:9a:57:12:
dc:7c:8b:0b:0f:fb:ba:c6:dc:02:b6:02:e8:17:de:7c:e2:24:
f2:ae:0b:44:6d:f4:40:d1:02:06:c3:d2:80:f3:ec:98:2e:b2:
64:dc:b1:1e:4b:1c:87:51:25:94:85:0d:62:82:20:ef:7a:bd:
9b:d5:f1:69:e9:d0:da:60:8b:c0:4f:d0:15:ed:b7:ef:37:a4:
ff:ea:d9:b4:56:be:af:a3:f6:32:73:80:90:06:07:e4:59:d5:
27:8d:4f:ba:c5:7d:eb:52:44:7a:d8:4a:e7:08:a4:8a:83:95:
32:01:69:a5:f8:30:99:ae:b5:73:75:52:2a:66:b3:20:4a:fd:
eb:0b:26:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:29:54 2025 by rpki-client