Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/VTyQGpWYAC-37zLJcZTAJwrl0jc.roa
File: VTyQGpWYAC-37zLJcZTAJwrl0jc.roa (raw, json)
Hash identifier: eijuTbhtwIu0K2bwC3Ja+Yk8adSsWHGUB7NY86rNcoE=
Subject key identifier: 55:3C:90:1A:95:98:00:2F:B7:EF:32:C9:71:94:C0:27:0A:E5:D2:37
Certificate issuer: /CN=827603a93bca31b018f511f6d4b0b7546e963362
Certificate serial: 09903DD5
Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/VTyQGpWYAC-37zLJcZTAJwrl0jc.roa
Signing time: Wed 08 Jun 2022 14:27:03 +0000
ROA not before: Wed 08 Jun 2022 14:27:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 10753
IP address blocks: 2a0d:4180::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160447957 (0x9903dd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362
Validity
Not Before: Jun 8 14:27:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=553c901a9598002fb7ef32c97194c0270ae5d237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:6b:ad:65:6f:b5:24:3c:0e:45:d4:94:65:1d:
2d:08:c6:94:9b:67:31:e3:6f:32:d6:33:df:9b:5b:
61:0f:5e:59:94:73:05:94:d7:09:3d:39:2b:e9:2c:
15:74:4a:83:0e:40:67:6b:c1:a7:cc:53:2f:62:c7:
e9:e5:da:c5:58:6a:61:1b:8c:27:bc:90:1f:b1:b9:
6c:a2:af:85:a8:c1:17:36:99:41:75:cf:5f:2f:92:
2c:01:68:9a:0c:31:95:89:a0:a4:6d:a0:37:6b:6d:
38:dd:ed:08:fe:f2:f6:74:e7:d6:af:d8:fd:7a:b0:
5b:72:1e:5c:bd:41:24:ec:cc:fc:0c:04:92:35:0a:
96:6c:53:bf:db:76:2c:00:9c:c9:49:36:de:a5:e3:
be:c4:14:26:79:6f:e6:33:72:cb:63:b8:ca:e9:09:
6e:8f:c8:43:02:ee:62:d3:22:15:a4:38:14:f0:d2:
59:67:48:86:2c:52:55:66:d8:77:a2:07:82:06:87:
bb:32:f8:69:bb:0c:00:b2:4f:84:e2:b9:d1:9e:7d:
b8:9a:49:67:3f:6a:0e:9e:20:45:06:33:2b:36:ae:
46:b0:65:70:1a:59:dd:11:5e:7c:34:cb:df:b9:63:
40:4c:a1:21:e4:64:4b:49:50:a2:4e:12:fe:e2:b3:
c2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:3C:90:1A:95:98:00:2F:B7:EF:32:C9:71:94:C0:27:0A:E5:D2:37
X509v3 Authority Key Identifier:
keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/VTyQGpWYAC-37zLJcZTAJwrl0jc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:4180::/32
Signature Algorithm: sha256WithRSAEncryption
0c:6b:fa:ca:18:a1:b6:34:25:bb:81:1c:ad:87:23:82:16:f0:
08:76:06:21:f5:e7:2c:46:9a:40:d3:27:45:ae:7a:a6:3d:a0:
41:22:c4:71:1f:0e:f4:0a:c5:27:7b:55:e9:02:35:2b:a7:68:
eb:30:a5:f6:1a:54:6d:5a:95:b8:ac:1f:e6:d8:a5:99:da:b4:
05:32:09:9a:82:46:ff:90:f4:7a:d1:98:25:3d:7d:29:a4:c9:
7b:5b:1d:8d:9f:73:82:4e:de:a2:85:25:3f:86:5f:6e:b3:0c:
86:93:24:87:59:8c:cf:c0:7e:7c:3c:01:11:36:52:f7:b4:c3:
a3:ab:53:ca:fe:3a:25:a6:c2:e7:8d:03:c6:fd:2e:51:75:3f:
65:12:e5:d1:30:9b:cb:f0:16:69:d0:a8:20:bf:aa:7a:08:f3:
a5:dd:42:b2:a0:ab:4f:3a:bb:b1:25:f2:90:4b:d1:78:fc:03:
1e:02:66:8c:13:65:e1:5d:8f:b2:32:f5:d5:88:05:75:4b:f4:
5a:21:57:e7:e1:75:7e:e5:c8:a9:d7:60:2a:6a:39:47:74:d9:
37:ea:74:50:0f:06:f7:f0:b8:96:1e:ef:ef:d8:66:dc:83:ab:
00:02:07:07:e5:cb:eb:b3:39:1f:7f:5c:b2:ba:59:f9:4c:e2:
d0:d7:09:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:37 2025 by rpki-client