Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/VDOT1f3ficJ6JhNS_o4D3Us-Ws8.roa
File: VDOT1f3ficJ6JhNS_o4D3Us-Ws8.roa (raw, json)
Hash identifier: siUkAmDi+o2KtPE2vZ84y5653/amV7PFdov1R1pN77U=
Subject key identifier: 54:33:93:D5:FD:DF:89:C2:7A:26:13:52:FE:8E:03:DD:4B:3E:5A:CF
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 05057985
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/VDOT1f3ficJ6JhNS_o4D3Us-Ws8.roa
Signing time: Thu 09 Jun 2022 19:04:02 +0000
ROA not before: Thu 09 Jun 2022 19:04:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43043
IP address blocks: 141.11.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84244869 (0x5057985)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Jun 9 19:04:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=543393d5fddf89c27a261352fe8e03dd4b3e5acf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9c:5b:ec:9e:2c:65:46:2f:e7:6a:81:48:e2:
81:1c:16:72:20:70:62:49:f9:2c:82:90:2d:25:5f:
d2:97:a4:00:a8:be:d3:c4:a0:76:15:8d:4d:a8:aa:
b7:68:52:2e:f8:69:38:c3:ea:e6:78:2b:07:56:23:
7c:6f:fc:92:55:03:66:c2:1e:52:67:b1:f1:ce:a3:
a6:f3:60:15:db:ae:3c:aa:3e:5a:5c:28:87:47:1b:
cc:48:0e:79:83:f6:6f:8d:91:67:c5:ca:fd:b7:5f:
10:ca:9b:d2:e4:5c:d4:ac:96:c9:0f:4c:ff:46:f6:
e1:1a:78:bd:03:62:87:85:41:ce:53:26:95:d9:f9:
c2:88:dd:c3:27:e1:11:27:9e:90:82:1c:3a:fe:79:
76:22:00:14:30:75:c7:6a:2b:f2:15:60:c5:e9:f2:
b0:e0:d4:62:81:9d:65:cb:1a:96:c2:c1:da:26:92:
91:ea:10:03:1f:b3:03:f7:da:49:a5:1c:bb:34:99:
0b:0e:0c:9d:6b:79:30:95:0f:cc:63:fe:11:87:7a:
0d:b5:b3:2c:cf:35:37:f5:ba:1b:29:97:44:8f:e4:
69:6d:73:e7:b4:99:e4:f3:d2:78:cb:02:0b:7d:56:
8f:e7:c6:ad:0f:93:65:44:26:7d:20:32:0d:c9:58:
5d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:33:93:D5:FD:DF:89:C2:7A:26:13:52:FE:8E:03:DD:4B:3E:5A:CF
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/VDOT1f3ficJ6JhNS_o4D3Us-Ws8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.43.0/24
Signature Algorithm: sha256WithRSAEncryption
28:b0:bf:da:67:71:4d:dc:f6:94:06:32:42:dd:d0:e5:a7:32:
d3:50:c3:be:84:4b:5b:c8:cc:46:91:1c:20:a0:2a:5c:f7:b5:
ff:dd:7c:ac:5d:38:c7:1f:04:05:d5:3d:39:84:a4:84:89:bc:
f1:43:cc:09:56:25:16:8e:63:5a:a7:31:84:82:bb:01:f8:54:
04:7e:5c:0d:44:e1:a9:a7:b0:89:d3:5a:c6:ef:b5:78:51:75:
91:99:06:f4:54:1a:b2:e3:76:4a:1c:d4:9f:cd:cf:99:3a:fd:
fa:60:c7:43:b5:aa:55:55:71:7f:ce:98:09:46:00:ee:ab:fa:
f7:77:b5:93:d6:c2:4d:65:68:8f:8d:93:f7:68:bc:4f:bd:90:
81:99:97:ec:07:a0:49:a6:54:f1:da:13:c7:94:f3:34:dc:67:
e2:24:27:c3:3f:68:10:7d:29:9a:5a:58:6c:ef:90:3a:3f:31:
ef:ee:50:60:bb:b7:2b:5c:e7:95:c9:62:0a:20:86:fc:cf:d7:
d6:00:cb:50:53:2c:ba:ba:21:03:cc:c2:5b:b8:9d:fe:2c:ce:
97:ec:7e:01:10:63:23:ed:ba:18:d8:83:88:7f:e1:e8:9c:59:
9b:17:3d:96:2e:a8:70:ea:f5:85:c2:a9:ba:c4:0d:4e:a6:09:
a0:e1:df:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:16 2025 by rpki-client