Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/dd1ea6-ccbf-4df1-92ef-d61df33c431b/1/xY9MZyofE4_6jiY0oDDhMJyfHtw.roa
File: xY9MZyofE4_6jiY0oDDhMJyfHtw.roa (raw, json)
Hash identifier: SNap0h28tjMNg/zc5gl63p8JrVkT7E4Wu94Pvosrm/I=
Subject key identifier: C5:8F:4C:67:2A:1F:13:8F:FA:8E:26:34:A0:30:E1:30:9C:9F:1E:DC
Certificate issuer: /CN=544194f8249773d3cd6fb654b239de769c42e864
Certificate serial: 019420D64AD593AEA48AE7A403F1E1765C26
Authority key identifier: 54:41:94:F8:24:97:73:D3:CD:6F:B6:54:B2:39:DE:76:9C:42:E8:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VEGU-CSXc9PNb7ZUsjnedpxC6GQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/dd1ea6-ccbf-4df1-92ef-d61df33c431b/1/xY9MZyofE4_6jiY0oDDhMJyfHtw.roa
Signing time: Wed 01 Jan 2025 07:48:22 +0000
ROA not before: Wed 01 Jan 2025 07:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207537
IP address blocks: 2001:67c:2bb4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:4a:d5:93:ae:a4:8a:e7:a4:03:f1:e1:76:5c:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=544194f8249773d3cd6fb654b239de769c42e864
Validity
Not Before: Jan 1 07:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c58f4c672a1f138ffa8e2634a030e1309c9f1edc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6d:90:c9:37:c2:33:a2:a6:0e:a3:3c:92:43:
50:4b:7f:d3:f7:ed:df:7e:84:b0:75:5b:49:5b:24:
01:29:00:42:ae:f4:45:03:cc:1b:13:bc:a1:76:6e:
a4:48:ef:69:1d:03:1c:63:8e:cb:ca:8e:46:e1:a4:
fa:dd:6e:de:84:07:e8:b1:92:a9:8c:ff:05:09:27:
3b:03:60:42:49:db:61:cf:5e:7b:9d:85:e6:37:ae:
7d:ed:c5:ae:d5:cf:e0:67:8f:c2:d2:58:7b:c4:fb:
07:13:98:d8:d8:60:ed:6a:71:d5:94:f5:0d:47:71:
77:a3:fb:34:9e:03:97:39:6b:48:92:46:fd:5a:14:
8f:7d:9b:de:d4:61:c6:53:43:5b:87:93:25:7a:5b:
d9:33:1a:ee:df:21:52:e6:29:ef:d5:f6:83:86:97:
9a:bb:cc:fa:7a:74:9d:5f:bd:2f:78:91:cf:f5:33:
7c:ab:10:b7:a5:fe:3a:d0:5a:36:57:25:ed:bd:36:
57:e3:2b:ed:3a:c8:27:24:43:38:d5:28:7b:f1:8f:
2d:e0:2f:4f:32:cc:5e:c3:65:ca:89:cc:fc:f2:8b:
80:41:f7:f2:fe:a7:84:08:4d:44:b7:04:4f:a9:6e:
f8:42:63:a2:21:0a:3e:02:ec:e1:2f:b0:c8:5c:b8:
d6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:8F:4C:67:2A:1F:13:8F:FA:8E:26:34:A0:30:E1:30:9C:9F:1E:DC
X509v3 Authority Key Identifier:
keyid:54:41:94:F8:24:97:73:D3:CD:6F:B6:54:B2:39:DE:76:9C:42:E8:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VEGU-CSXc9PNb7ZUsjnedpxC6GQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/dd1ea6-ccbf-4df1-92ef-d61df33c431b/1/xY9MZyofE4_6jiY0oDDhMJyfHtw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/dd1ea6-ccbf-4df1-92ef-d61df33c431b/1/VEGU-CSXc9PNb7ZUsjnedpxC6GQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2bb4::/48
Signature Algorithm: sha256WithRSAEncryption
5c:80:92:a6:94:27:00:93:bc:80:05:7c:36:e1:71:9b:e1:4c:
e9:78:70:b6:58:37:b8:a4:83:2b:c2:10:ac:d5:9a:06:fd:89:
13:2d:90:d1:db:93:74:f4:8b:62:6a:f2:d0:ec:16:a6:07:30:
ce:9a:2f:94:f4:96:09:3e:ad:93:c4:f8:67:21:b8:49:bf:80:
0d:ac:69:7e:25:48:d9:2d:14:0f:40:39:98:9b:89:1f:ff:0b:
bb:d5:99:c6:17:1a:43:6a:b5:ef:75:af:be:19:65:1e:36:55:
09:42:8c:22:3c:82:ab:56:b9:9d:b2:68:5f:b4:b9:a5:0d:d8:
e8:af:35:b0:0b:66:41:c3:96:93:6c:ff:79:d3:c4:ab:83:cb:
87:e1:50:40:c7:7a:19:3a:9d:55:a2:35:df:ad:4f:f3:9e:3c:
c1:bd:44:ba:a4:0b:44:e1:3b:9e:19:b1:ac:8f:2d:aa:a6:f9:
76:18:67:bb:45:ec:94:e8:65:b4:e7:01:ac:2e:d9:01:8d:9e:
e5:5c:ba:ab:fc:9e:84:16:91:8f:fd:5b:f4:14:32:97:e6:a2:
2e:57:e6:f7:74:bc:fd:1e:15:84:8d:98:e9:08:fe:d5:1e:e9:
0f:00:43:6f:25:c7:76:0e:4f:5c:57:ae:7c:dd:01:ee:11:e0:
b1:92:dd:04
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQg1krVk66kiuekA/HhdlwmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NDE5NGY4MjQ5NzczZDNjZDZmYjY1NGIyMzlkZTc2OWM0
MmU4NjQwHhcNMjUwMTAxMDc0ODIyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNThmNGM2NzJhMWYxMzhmZmE4ZTI2MzRhMDMwZTEzMDljOWYxZWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0G2QyTfCM6KmDqM8kkNQS3/T9+3f
foSwdVtJWyQBKQBCrvRFA8wbE7yhdm6kSO9pHQMcY47Lyo5G4aT63W7ehAfosZKp
jP8FCSc7A2BCSdthz157nYXmN6597cWu1c/gZ4/C0lh7xPsHE5jY2GDtanHVlPUN
R3F3o/s0ngOXOWtIkkb9WhSPfZve1GHGU0Nbh5MlelvZMxru3yFS5inv1faDhpea
u8z6enSdX70veJHP9TN8qxC3pf460Fo2VyXtvTZX4yvtOsgnJEM41Sh78Y8t4C9P
Msxew2XKicz88ouAQffy/qeECE1EtwRPqW74QmOiIQo+AuzhL7DIXLjWwQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFMWPTGcqHxOP+o4mNKAw4TCcnx7cMB8GA1UdIwQY
MBaAFFRBlPgkl3PTzW+2VLI53nacQuhkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkVHVS1DU1hjOVBOYjdaVXNqbmVkcHhDNkdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9kZDFlYTYtY2NiZi00ZGYxLTkyZWYt
ZDYxZGYzM2M0MzFiLzEveFk5TVp5b2ZFNF82amlZMG9ERGhNSnlmSHR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9kZDFlYTYtY2NiZi00ZGYxLTkyZWYtZDYxZGYzM2M0MzFi
LzEvVkVHVS1DU1hjOVBOYjdaVXNqbmVkcHhDNkdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCu0
MA0GCSqGSIb3DQEBCwUAA4IBAQBcgJKmlCcAk7yABXw24XGb4UzpeHC2WDe4pIMr
whCs1ZoG/YkTLZDR25N09ItiavLQ7BamBzDOmi+U9JYJPq2TxPhnIbhJv4ANrGl+
JUjZLRQPQDmYm4kf/wu71ZnGFxpDarXvda++GWUeNlUJQowiPIKrVrmdsmhftLml
DdjorzWwC2ZBw5aTbP9508Srg8uH4VBAx3oZOp1VojXfrU/znjzBvUS6pAtE4Tue
GbGsjy2qpvl2GGe7ReyU6GW05wGsLtkBjZ7lXLqr/J6EFpGP/Vv0FDKX5qIuV+b3
dLz9HhWEjZjpCP7VHukPAENvJcd2Dk9cV6583QHuEeCxkt0E
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:15:32 2025 by rpki-client