Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/VL6tIDAwh1592bQEXFtNufXMtM0.roa
File: VL6tIDAwh1592bQEXFtNufXMtM0.roa (raw, json)
Hash identifier: ymvxtnOEwY3IPkqPxYopnUWehdDLDk7SHBAfVLjkM2A=
Subject key identifier: 54:BE:AD:20:30:30:87:5E:7D:D9:B4:04:5C:5B:4D:B9:F5:CC:B4:CD
Certificate issuer: /CN=7e2eda6952b03e8ba45997be615d7abee1784f83
Certificate serial: 01941FFA72785E991CCF71D81090CAAC8AAB
Authority key identifier: 7E:2E:DA:69:52:B0:3E:8B:A4:59:97:BE:61:5D:7A:BE:E1:78:4F:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fi7aaVKwPoukWZe-YV16vuF4T4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/VL6tIDAwh1592bQEXFtNufXMtM0.roa
Signing time: Wed 01 Jan 2025 03:48:14 +0000
ROA not before: Wed 01 Jan 2025 03:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31172
IP address blocks: 87.239.100.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:72:78:5e:99:1c:cf:71:d8:10:90:ca:ac:8a:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e2eda6952b03e8ba45997be615d7abee1784f83
Validity
Not Before: Jan 1 03:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=54bead203030875e7dd9b4045c5b4db9f5ccb4cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3e:35:45:93:57:6a:e2:2a:7f:7a:13:d8:3b:
7d:f3:37:92:a0:18:fb:73:97:fa:e1:03:29:f1:72:
0b:04:c0:5f:26:6f:aa:11:1b:c6:e0:03:03:55:84:
98:2d:ca:d8:09:c4:e0:d1:7c:46:dc:cd:42:bf:da:
e0:49:37:d4:b4:00:da:dc:35:2a:f8:7e:f4:77:75:
f7:70:e8:7c:b1:3e:b7:dc:38:b1:29:80:73:cb:81:
59:b6:d6:4d:9d:02:d2:f0:5c:1e:48:ad:0a:7c:8e:
8d:4e:2e:0e:4b:4d:6d:4f:9d:2f:97:d9:7a:ae:87:
6a:67:5d:6a:1b:bd:a7:de:11:f9:d3:7a:9e:40:93:
52:b7:a0:89:90:f1:76:b3:3e:16:19:d3:d8:44:e5:
c9:06:39:77:2e:6c:08:e6:71:a5:0b:37:95:dd:16:
80:2f:94:88:3f:47:c3:55:42:14:d9:da:57:ff:e1:
58:51:18:17:f6:68:37:a6:5d:02:ab:02:bb:d5:f4:
51:d3:03:a1:07:12:f0:f7:07:59:35:df:09:d5:55:
cf:d9:7e:d3:91:8d:91:5b:3a:ca:8b:39:8c:5b:63:
2b:25:4b:2d:2e:94:53:f0:ac:53:15:6a:18:ef:0b:
6f:35:8d:5a:ef:90:f3:1e:da:91:b3:32:c9:1d:b1:
0e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:BE:AD:20:30:30:87:5E:7D:D9:B4:04:5C:5B:4D:B9:F5:CC:B4:CD
X509v3 Authority Key Identifier:
keyid:7E:2E:DA:69:52:B0:3E:8B:A4:59:97:BE:61:5D:7A:BE:E1:78:4F:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fi7aaVKwPoukWZe-YV16vuF4T4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/VL6tIDAwh1592bQEXFtNufXMtM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.239.100.0/22
Signature Algorithm: sha256WithRSAEncryption
20:bf:9c:eb:92:3a:40:70:84:f6:f6:f7:3a:28:25:f3:d2:cd:
6c:1b:46:92:8f:d0:85:ab:44:99:b9:46:70:1d:4a:04:69:63:
0a:f8:98:6c:59:df:88:ab:22:d1:69:a3:c4:b1:6f:6b:e6:11:
73:9d:0b:7e:8e:ba:b6:b5:33:12:7d:38:e9:f7:25:52:07:46:
9d:04:37:3e:5a:9c:c4:b8:9c:13:79:99:89:ef:3d:e9:e7:ee:
3c:bf:2a:50:41:99:0c:88:cc:e6:18:4d:50:49:80:1a:17:88:
06:a1:46:fc:9c:fe:95:6e:c6:b0:0e:b5:08:e5:99:cc:bf:0b:
6f:32:5a:97:29:f9:d8:56:1a:f1:03:ac:1e:56:fa:b9:58:d5:
ac:93:bb:13:c8:7d:8b:db:18:32:3a:4c:8d:5f:78:b1:ab:09:
8f:16:b9:ff:77:75:a8:47:c0:5e:5c:f1:75:80:ae:ef:04:41:
03:0a:79:91:76:0e:a1:80:a6:39:df:a3:77:c2:39:c8:14:bf:
05:c4:65:16:f0:85:17:4d:29:56:ab:44:cf:5d:f3:de:99:22:
d4:ef:b5:53:5f:ff:f5:d6:8b:15:3f:cb:1b:53:4e:fb:3c:7e:
61:fb:f8:2f:f3:62:77:9f:b0:18:f1:b7:35:b8:e8:90:c7:86:
39:2c:5f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:52:01 2025 by rpki-client