Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/vjOKVS99V5dTUv9527p94rrF6_g.roa
File: vjOKVS99V5dTUv9527p94rrF6_g.roa (raw, json)
Hash identifier: hpibT9TxwIyn+8sOw7rEkyV33EvR+AZFF21Kn+E2L5U=
Subject key identifier: BE:33:8A:55:2F:7D:57:97:53:52:FF:79:DB:BA:7D:E2:BA:C5:EB:F8
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0194252274C23F147869837B766A1C3B4005
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/vjOKVS99V5dTUv9527p94rrF6_g.roa
Signing time: Thu 02 Jan 2025 03:50:02 +0000
ROA not before: Thu 02 Jan 2025 03:50:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213748
IP address blocks: 2a06:de00:f0::/44 maxlen: 48
2a0e:97c0:580::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:74:c2:3f:14:78:69:83:7b:76:6a:1c:3b:40:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:50:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=be338a552f7d57975352ff79dbba7de2bac5ebf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:5f:e6:a2:8f:a5:13:c2:76:ae:88:08:d2:34:
4f:4e:33:2b:ba:4b:dd:c4:92:bd:f6:98:42:07:7e:
56:d8:c2:16:d9:b9:0e:1b:11:75:1c:a0:1a:89:9b:
ab:66:d6:ef:22:1e:71:f2:b7:94:41:b8:fc:e1:11:
50:18:4c:26:8f:dd:bb:2b:e6:06:7c:64:f4:c3:9e:
1d:b7:0b:8d:c8:dc:5b:70:3f:7e:88:56:f7:41:1d:
5f:17:a6:60:9f:10:27:c5:05:94:03:09:5a:77:c9:
d9:bd:2d:af:c6:ed:31:2e:b2:ba:15:d9:97:90:c6:
15:50:fd:fe:69:a0:55:b7:7d:d9:2e:ae:bc:76:b0:
79:cb:eb:e1:3d:88:2d:bd:dc:c3:91:41:e6:44:55:
ba:ea:fc:bf:f0:bb:20:db:2d:aa:4f:91:f3:b8:8f:
e3:0a:5d:44:2b:8a:b5:c0:e2:67:38:5c:eb:0f:0c:
f3:9c:7a:9d:f1:cb:67:88:60:b3:36:8d:bc:d2:e3:
20:f2:aa:e5:3f:0a:cf:39:76:94:4d:f4:4f:28:2b:
b0:c8:a6:dd:ff:21:17:c5:ba:8e:c5:64:a3:a6:a3:
0c:cd:c5:57:0b:e2:92:9a:65:27:d8:3e:75:18:d2:
88:ff:14:49:bb:4b:40:23:20:c3:8c:0b:5a:d0:c4:
4a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:33:8A:55:2F:7D:57:97:53:52:FF:79:DB:BA:7D:E2:BA:C5:EB:F8
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/vjOKVS99V5dTUv9527p94rrF6_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de00:f0::/44
2a0e:97c0:580::/44
Signature Algorithm: sha256WithRSAEncryption
c9:1a:0e:fc:0d:2d:65:cf:d6:ef:50:0d:62:67:13:54:37:e9:
af:f0:fd:1f:70:bd:dc:41:98:a3:40:a6:3d:d4:59:3d:0f:26:
7d:34:60:17:79:87:1c:1e:68:69:fc:85:a4:75:ec:dd:2c:d0:
7a:da:22:ba:0e:46:6e:7a:19:3a:73:49:07:c2:a8:8e:49:5a:
40:1a:e2:dc:b9:ca:92:99:0b:5f:51:49:c8:51:e4:ef:25:16:
d5:28:3b:6e:cb:4f:7e:29:29:08:20:75:14:c7:ef:97:99:b4:
1b:ee:60:d5:91:1b:e9:6d:4a:b8:0c:5d:cc:9d:2e:94:67:40:
66:14:ec:21:22:74:c8:34:14:51:12:47:51:02:9a:db:46:05:
e4:05:36:c2:0e:c3:a2:3c:3b:06:9a:ce:f4:9e:3c:7a:36:7e:
17:43:46:c9:40:fe:35:c4:bd:45:20:be:09:7d:2f:38:c8:b5:
a5:34:df:cf:47:03:d7:7c:64:b6:7c:80:64:78:5b:25:23:d0:
40:1d:1c:86:af:60:80:3f:9e:b0:80:aa:c2:7f:ac:ae:0f:e8:
41:7e:f8:58:7b:f1:a9:8f:cf:52:71:2e:ad:e3:7a:5a:d4:4c:
40:d9:a5:bc:08:0d:51:d8:f6:c1:99:c5:45:47:c0:28:b2:da:
b1:ae:43:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:34:41 2025 by rpki-client