Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/vkUX9hV92VQst5LelEku-jzjmDI.roa
File: vkUX9hV92VQst5LelEku-jzjmDI.roa (raw, json)
Hash identifier: 6t7C3jSP4Jkwuk3y3tOASPT2+HZn8Zja5tWF03TT/f0=
Subject key identifier: BE:45:17:F6:15:7D:D9:54:2C:B7:92:DE:94:49:2E:FA:3C:E3:98:32
Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial: 019420D62C39CCA86ECC634331E21374BF78
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/vkUX9hV92VQst5LelEku-jzjmDI.roa
Signing time: Wed 01 Jan 2025 07:48:14 +0000
ROA not before: Wed 01 Jan 2025 07:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205148
IP address blocks: 2a0d:f407:100::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:2c:39:cc:a8:6e:cc:63:43:31:e2:13:74:bf:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Validity
Not Before: Jan 1 07:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=be4517f6157dd9542cb792de94492efa3ce39832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d1:31:14:3a:00:09:24:21:ca:91:5f:77:72:
22:4f:c1:45:28:f5:ea:26:17:3e:66:6c:47:19:aa:
cf:a1:3f:10:bd:c1:8b:da:b6:2c:df:38:a1:15:0b:
0e:57:6e:e4:2a:26:4c:45:8e:e5:5d:e0:ba:2d:a8:
8f:50:23:f2:eb:0a:90:97:0e:89:fc:e7:5a:b6:32:
aa:3a:87:3a:dc:89:b7:81:cc:30:59:b9:68:72:18:
fb:4d:1c:f9:c6:20:76:a7:be:54:70:71:27:9c:9a:
e5:be:ea:ee:8d:22:97:7b:4a:37:b8:5e:91:a1:c6:
6a:cf:96:5a:43:28:c3:ff:de:d0:c2:05:d2:b1:44:
f0:39:89:fc:99:b0:cf:12:d4:de:4f:80:41:88:94:
f9:b1:05:b1:7a:db:3b:a7:fd:16:5b:10:19:da:c6:
50:51:d8:19:9c:f1:99:b9:55:9d:0c:5c:13:cc:db:
82:b2:7e:10:d1:9f:83:3e:0f:90:72:de:a8:24:99:
6d:fc:81:8e:74:fc:4d:c6:a8:ec:5d:2a:2f:fd:a6:
18:54:92:41:e8:95:81:9e:a1:f1:07:9d:33:46:25:
7d:d9:53:e7:1b:5d:8e:36:89:e9:dc:9b:0c:a8:55:
44:32:d7:a7:91:2d:50:f8:ad:d4:ed:8d:64:45:b4:
e6:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:45:17:F6:15:7D:D9:54:2C:B7:92:DE:94:49:2E:FA:3C:E3:98:32
X509v3 Authority Key Identifier:
keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/vkUX9hV92VQst5LelEku-jzjmDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:f407:100::/44
Signature Algorithm: sha256WithRSAEncryption
af:ca:e6:76:dd:85:b8:09:19:7c:8d:12:77:6b:18:6e:f3:70:
ed:8c:94:8b:64:b9:83:80:54:63:d8:c1:ab:b9:e4:0a:c2:87:
2b:0e:3c:75:a7:85:11:ea:33:5a:34:b1:4a:33:c6:bc:ab:75:
40:07:4c:54:a8:a0:e1:b5:a5:3f:a2:da:54:fc:66:4d:4d:3b:
3c:0a:06:ee:17:9a:46:16:3e:c5:7d:3c:a9:0b:87:93:5b:66:
b5:65:9d:19:80:cd:01:8a:10:c8:34:a3:6c:b8:84:ab:e2:09:
db:9c:ae:cf:80:e4:54:26:9f:23:85:2e:7c:02:a0:56:62:1c:
e4:14:af:41:11:7c:59:a0:b2:6b:49:00:1b:0d:ed:a1:5c:c6:
52:d8:70:31:85:c3:6c:5d:29:5d:cd:6b:7f:8e:70:73:e3:37:
8a:16:ba:f6:aa:80:d0:41:5a:b1:d9:5e:c4:d7:6d:3b:84:a2:
e1:49:5b:a6:e0:6b:c2:57:e2:98:c3:10:55:f2:6e:a2:94:36:
e9:72:10:d1:80:56:91:ad:b1:c2:4c:c6:9c:53:09:68:07:81:
a8:27:5e:1d:62:3a:16:f0:8b:d7:e7:68:f6:64:ba:a0:c8:16:
97:84:4c:a6:51:82:e7:6d:88:22:b6:a4:d5:18:10:b5:71:49:
9f:44:76:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:29:43 2025 by rpki-client