Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/vjrpLAg8CpziZg6N5YO2E2sdLDk.roa
File: vjrpLAg8CpziZg6N5YO2E2sdLDk.roa (raw, json)
Hash identifier: ShgSgG3X0bU5Mz2sNJvlNSf5lQTJlN3OQDj64GvEeuU=
Subject key identifier: BE:3A:E9:2C:08:3C:0A:9C:E2:66:0E:8D:E5:83:B6:13:6B:1D:2C:39
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 019425FDEC0942D7512895DF80E7D2503DA6
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/vjrpLAg8CpziZg6N5YO2E2sdLDk.roa
Signing time: Thu 02 Jan 2025 07:49:45 +0000
ROA not before: Thu 02 Jan 2025 07:49:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212024
IP address blocks: 2a06:e881:7700::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:ec:09:42:d7:51:28:95:df:80:e7:d2:50:3d:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Jan 2 07:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=be3ae92c083c0a9ce2660e8de583b6136b1d2c39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:59:38:2e:fc:b2:2d:51:9a:eb:cd:54:e5:23:
15:89:31:b6:f8:b4:e8:fd:ab:5a:dc:49:80:5c:d4:
41:80:d9:a7:49:0d:55:2e:63:67:02:b3:16:42:52:
9a:5e:b8:77:f5:07:9d:66:a0:57:f3:23:c4:e9:9f:
87:18:06:fa:e9:10:00:5e:81:8b:7c:21:92:15:1c:
7e:9d:3a:1e:31:44:a9:27:c6:cb:ad:95:c5:44:1b:
cf:77:92:96:af:50:6b:2e:e6:a7:2d:21:03:96:df:
ab:fe:fe:60:59:f8:55:7f:9f:9a:51:f3:fc:e9:1f:
8f:26:46:bf:2e:8a:6c:29:9f:af:5d:77:34:79:d9:
c3:3c:3a:36:85:26:19:f3:bc:21:87:8b:09:11:d9:
da:15:61:56:32:cd:4a:11:54:a5:80:af:b2:15:be:
b2:cb:19:56:4e:69:bc:6b:ca:67:ae:07:8b:3c:9f:
97:68:1b:65:3b:ab:13:23:a1:b3:5b:42:65:34:da:
f8:d6:4b:3c:47:70:d4:26:f4:6c:d1:a8:fd:df:1e:
bb:45:25:de:08:16:99:15:d8:65:da:85:0c:b5:45:
06:17:41:b9:3f:e3:f6:93:d3:ee:56:e8:2b:28:d9:
2e:0b:74:dd:db:c5:68:93:5e:37:fe:1a:43:46:27:
d7:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:3A:E9:2C:08:3C:0A:9C:E2:66:0E:8D:E5:83:B6:13:6B:1D:2C:39
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/vjrpLAg8CpziZg6N5YO2E2sdLDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:e881:7700::/40
Signature Algorithm: sha256WithRSAEncryption
1b:2e:9a:69:59:d9:94:22:cc:5c:9d:3c:16:fb:2f:00:27:a4:
b2:5c:58:d8:15:2d:27:86:2b:35:f1:5f:db:31:9d:32:51:f6:
6e:b1:79:8d:59:0d:6d:33:99:37:39:fe:57:d8:18:94:bc:06:
20:a8:a2:85:c9:13:c4:0d:f6:6b:d3:54:e6:26:94:7b:36:f2:
02:d0:79:71:cf:0e:60:31:9b:1a:16:93:b4:c8:91:4e:e1:00:
15:f8:d0:1a:c4:11:84:93:c3:2b:84:4c:4c:0d:99:2f:3b:fa:
51:55:18:4a:79:d4:92:7f:c1:47:f3:c8:6e:df:eb:01:0e:08:
24:b5:f4:a0:39:76:f0:38:d1:ba:88:06:cc:3c:71:28:51:b4:
d6:47:16:ba:6f:6d:72:12:1f:44:a6:66:db:e5:19:66:d5:f8:
ea:0a:80:7f:9c:2f:a6:c5:5b:d0:34:16:d1:29:d0:09:d1:a2:
c0:d0:97:b6:28:d2:ac:2a:59:6d:fc:7d:99:46:65:ec:d4:e2:
df:57:7b:cd:c2:ee:b4:3f:a6:a4:20:dd:4b:4b:01:86:b9:6a:
70:56:14:5f:96:b7:04:f6:c1:04:a9:d4:73:1f:ae:47:31:f7:
78:0b:85:3b:01:34:8d:49:24:c9:b7:af:36:7f:0d:a2:0c:5f:
3f:56:a6:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:30:10 2025 by rpki-client