Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/32491b-4fc6-4033-9bda-2510ad32c2b4/1/VynqkSnDPBsNdNudqCy92aMgNag.roa
File: VynqkSnDPBsNdNudqCy92aMgNag.roa (raw, json)
Hash identifier: LAsXLj/Y+eY+499+1mNdPNcrHbyrUDFLVNdzWbSrbUs=
Subject key identifier: 57:29:EA:91:29:C3:3C:1B:0D:74:DB:9D:A8:2C:BD:D9:A3:20:35:A8
Certificate issuer: /CN=81413f5afc6443e8d2343518ac0b19fd30ba3c12
Certificate serial: 01941F8C20075832EF631D02050B3739F827
Authority key identifier: 81:41:3F:5A:FC:64:43:E8:D2:34:35:18:AC:0B:19:FD:30:BA:3C:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gUE_WvxkQ-jSNDUYrAsZ_TC6PBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/32491b-4fc6-4033-9bda-2510ad32c2b4/1/VynqkSnDPBsNdNudqCy92aMgNag.roa
Signing time: Wed 01 Jan 2025 01:47:44 +0000
ROA not before: Wed 01 Jan 2025 01:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 999999
IP address blocks: 2001:678:d44:2::/64 maxlen: 64
2001:678:d44:100::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:20:07:58:32:ef:63:1d:02:05:0b:37:39:f8:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81413f5afc6443e8d2343518ac0b19fd30ba3c12
Validity
Not Before: Jan 1 01:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5729ea9129c33c1b0d74db9da82cbdd9a32035a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:be:d6:e5:6a:19:98:a9:27:46:9f:1b:87:29:
05:cb:d2:34:71:83:e6:b6:68:18:53:69:9d:ff:3a:
c2:40:cf:d4:21:bf:b3:28:bc:6a:d5:18:68:82:f5:
3d:92:ee:d2:95:87:60:a6:33:a4:f2:51:33:dc:b7:
e4:4c:1f:64:38:c2:85:40:c0:44:0f:27:06:cd:6a:
f7:86:4a:b4:f9:93:23:02:4e:09:f3:54:e7:74:e7:
d7:5d:f6:56:59:f4:13:af:60:60:6c:1e:9b:4f:0f:
cd:eb:53:cc:33:9e:96:89:28:f4:f6:f8:84:9e:08:
08:d3:79:3a:09:3f:fb:46:99:c8:af:11:2c:8b:6e:
6e:08:0a:b0:16:5f:ed:4e:8d:bc:a2:d0:ea:59:15:
38:3c:b0:29:ab:bb:43:69:dc:35:ac:ac:37:f1:43:
32:d2:5b:2d:d9:f4:3b:22:97:e8:bf:05:50:08:19:
85:2c:e6:0d:ef:61:4b:76:c9:01:8f:2b:38:76:63:
18:7f:fe:57:52:c0:a0:fb:b5:a1:d2:12:24:16:dc:
8d:bd:0d:89:dc:d9:58:14:de:20:14:7b:0b:04:7d:
69:3b:04:8f:ed:c6:8f:e1:37:12:47:37:8a:b8:3b:
72:ce:d7:0c:ce:74:d2:0f:6d:c2:f0:98:de:27:3c:
39:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:29:EA:91:29:C3:3C:1B:0D:74:DB:9D:A8:2C:BD:D9:A3:20:35:A8
X509v3 Authority Key Identifier:
keyid:81:41:3F:5A:FC:64:43:E8:D2:34:35:18:AC:0B:19:FD:30:BA:3C:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gUE_WvxkQ-jSNDUYrAsZ_TC6PBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/32491b-4fc6-4033-9bda-2510ad32c2b4/1/VynqkSnDPBsNdNudqCy92aMgNag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/32491b-4fc6-4033-9bda-2510ad32c2b4/1/gUE_WvxkQ-jSNDUYrAsZ_TC6PBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:d44:2::/64
2001:678:d44:100::/64
Signature Algorithm: sha256WithRSAEncryption
13:c6:d2:e2:d6:92:29:b8:f0:3a:7a:f9:8c:94:49:c6:77:c0:
bd:38:b0:f4:d5:1d:08:66:63:ad:a7:56:eb:a1:47:9a:3c:a7:
4c:2c:02:5e:85:f5:2e:70:05:f2:62:87:92:6e:7c:d7:c4:15:
9d:88:e6:8c:56:48:80:ee:05:19:82:01:9c:57:95:d8:d1:7b:
14:fa:f9:3b:6f:8a:91:a8:cc:4b:6b:18:96:ff:83:e7:fd:f8:
14:54:5b:f9:f7:ce:48:e0:56:56:af:98:40:9f:86:20:a1:2a:
14:cd:c7:98:27:d3:45:85:f1:5c:5e:0a:94:86:90:ea:3e:57:
29:33:13:7d:fc:89:a5:08:8f:cb:45:f6:37:83:9c:d4:1b:db:
8d:5f:51:d6:21:85:75:2e:81:92:1f:fb:07:2c:99:1a:c3:d4:
b7:d9:cd:ed:17:b7:28:c3:f1:9d:37:9f:28:5a:8d:ec:8d:ff:
c9:91:62:fb:55:05:e3:7a:b0:94:5e:18:63:80:b8:ea:f8:5d:
62:77:66:8e:14:5d:dd:7d:e4:1b:eb:aa:0f:68:34:47:0c:ea:
f9:a7:59:55:b4:ad:af:30:14:01:c3:00:2a:1b:a7:67:48:cd:
5c:a8:99:46:d9:67:a7:ba:05:7b:30:3d:6e:a0:8d:87:12:01:
f3:1e:45:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:19:56 2025 by rpki-client