Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/VRGa4lk8rOVceCWWZE1QrzCrmUc.roa
File: VRGa4lk8rOVceCWWZE1QrzCrmUc.roa (raw, json)
Hash identifier: ZWckGx8f70D9Z4VRvq+XkPLAOsBpBKmfBQ0DDjaB1lU=
Subject key identifier: 55:11:9A:E2:59:3C:AC:E5:5C:78:25:96:64:4D:50:AF:30:AB:99:47
Certificate issuer: /CN=827603a93bca31b018f511f6d4b0b7546e963362
Certificate serial: 08B4C9F6
Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/VRGa4lk8rOVceCWWZE1QrzCrmUc.roa
Signing time: Sun 13 Mar 2022 09:12:37 +0000
ROA not before: Sun 13 Mar 2022 09:12:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 2a0e:2b00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146065910 (0x8b4c9f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362
Validity
Not Before: Mar 13 09:12:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=55119ae2593cace55c782596644d50af30ab9947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:6b:e6:da:35:86:71:36:0c:9b:0f:d1:f4:dd:
f2:5f:9d:ca:6c:00:51:da:bc:0b:b1:3b:00:c9:24:
05:c4:78:e6:95:c9:84:b5:1b:02:ae:b2:41:91:e6:
27:28:54:9c:46:d6:0a:c0:6c:d8:f4:99:87:f4:d7:
a2:3c:29:df:19:28:cf:43:ca:ab:a3:a0:aa:95:b4:
b9:a1:aa:ba:c5:5d:88:57:9d:32:e2:c6:a1:0d:1e:
9b:e2:b2:2f:5c:a9:6b:72:cf:30:89:b4:08:05:e0:
39:bf:6c:84:10:80:e1:de:f0:c6:2c:86:f8:36:0c:
d2:c4:9b:e7:fb:07:85:b9:e6:40:dd:a4:e4:93:5c:
ed:2c:8b:94:6e:1a:80:1f:c1:ae:ce:2b:d3:78:57:
5a:74:9a:e1:7d:7c:06:81:46:c5:59:4e:c3:bb:71:
9a:72:48:c2:db:4f:92:1d:18:c6:bf:80:db:6a:f8:
75:08:28:4b:11:55:db:f8:7e:b9:ed:0b:86:6b:3b:
1e:e0:f8:d2:79:3e:b9:56:20:e5:92:a7:b0:17:74:
1d:31:95:55:ac:d0:b0:be:bc:e8:1a:29:5b:e2:8f:
19:49:00:5d:51:6c:31:2c:3e:fc:18:ea:29:72:52:
02:99:8f:88:16:bc:1a:45:af:70:dc:73:e7:a0:1d:
48:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:11:9A:E2:59:3C:AC:E5:5C:78:25:96:64:4D:50:AF:30:AB:99:47
X509v3 Authority Key Identifier:
keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/VRGa4lk8rOVceCWWZE1QrzCrmUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:2b00::/29
Signature Algorithm: sha256WithRSAEncryption
10:b7:6d:43:22:22:e0:a3:50:28:28:94:b8:f1:bb:d6:04:39:
7d:42:14:e7:34:c5:3d:66:b6:f5:d6:de:66:c7:82:9d:c7:ca:
91:b1:b1:3f:fb:3f:99:83:a2:a7:4f:67:5e:6b:61:45:0f:31:
c6:f3:93:0f:9c:7c:be:ed:9a:97:47:6f:64:64:36:88:1d:9f:
0d:9c:1b:00:29:e1:14:08:ea:da:92:c4:6b:a4:60:ec:f8:35:
b1:05:44:1a:39:b2:77:66:7d:41:7d:4f:f7:45:20:96:5a:5a:
ac:b3:ad:50:71:79:47:6e:d7:6d:db:2a:17:63:d8:87:9d:5b:
ef:ec:13:71:04:37:02:20:e7:f8:75:e6:9b:3d:37:ff:74:28:
f3:c3:2c:d5:d4:17:ef:43:fb:46:10:0e:4a:aa:f8:2c:d8:c3:
05:d0:f1:95:b6:ba:63:8b:cf:08:e6:65:ee:51:ef:8d:db:d4:
ac:63:69:d0:c5:2d:c8:fa:db:c3:a6:19:13:d9:0d:2a:b4:9d:
1b:92:7b:b0:f5:c1:72:9d:4a:87:d0:b7:2e:eb:ff:f3:21:bb:
47:20:a0:1c:ee:4d:74:a6:a4:e9:bf:3d:66:6e:7c:e6:80:cb:
0e:1d:90:ed:de:39:29:67:eb:af:6f:d6:dc:89:4a:89:41:b8:
8d:93:ec:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:34:15 2025 by rpki-client