Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/vYPLmVZ63lzXpMA3lFBdPO3gT0g.roa
File: vYPLmVZ63lzXpMA3lFBdPO3gT0g.roa (raw, json)
Hash identifier: NafLcW9ler7jv8ZnfOLoMEHPRe+4IL3+O4WsYS0XH1Y=
Subject key identifier: BD:83:CB:99:56:7A:DE:5C:D7:A4:C0:37:94:50:5D:3C:ED:E0:4F:48
Certificate issuer: /CN=c7e9c7aa534b1300bf724fff0f0c1b0519d505bb
Certificate serial: 0194228D6F6159EB2E7B94D288AD481B66DE
Authority key identifier: C7:E9:C7:AA:53:4B:13:00:BF:72:4F:FF:0F:0C:1B:05:19:D5:05:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-nHqlNLEwC_ck__DwwbBRnVBbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/vYPLmVZ63lzXpMA3lFBdPO3gT0g.roa
Signing time: Wed 01 Jan 2025 15:48:01 +0000
ROA not before: Wed 01 Jan 2025 15:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208816
IP address blocks: 2a0e:9481::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:6f:61:59:eb:2e:7b:94:d2:88:ad:48:1b:66:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7e9c7aa534b1300bf724fff0f0c1b0519d505bb
Validity
Not Before: Jan 1 15:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bd83cb99567ade5cd7a4c03794505d3cede04f48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d7:4d:df:d5:9b:20:69:64:40:cf:ee:3c:ac:
2d:48:a3:a8:69:16:64:4d:34:fb:cb:d1:9e:fd:b9:
14:81:ab:44:5d:21:c8:91:b2:9c:dc:0f:2d:70:b1:
6a:91:1a:ff:96:26:65:e2:a6:81:a9:4b:b6:b7:36:
19:01:5b:11:4b:0c:9d:f3:07:f3:d3:61:3c:22:0c:
0b:bd:1e:3c:38:a6:f6:c9:7e:dd:84:3c:5d:29:40:
43:6a:2a:2d:a0:19:d8:5e:37:04:77:7b:65:f1:19:
39:45:67:ce:af:66:ab:92:ee:dc:ea:62:5e:19:62:
07:b9:17:84:27:55:60:be:a2:ca:9e:8c:f4:04:02:
fe:b0:4c:70:b9:bc:cf:b7:33:28:6c:ba:ec:1a:29:
50:63:ef:4f:09:35:6c:41:83:ba:a0:3e:d5:d0:f1:
d4:a2:66:d5:be:81:8a:22:c7:93:43:f5:44:c2:2c:
80:07:b1:f4:48:99:8b:38:f4:7f:41:6c:94:a9:7a:
78:e4:9b:ff:fa:a3:21:4a:21:b3:85:4a:33:01:89:
5c:5c:56:1d:c1:92:37:d5:bd:66:39:e0:77:0d:e2:
5b:ba:eb:26:44:36:86:50:b9:c4:9e:39:bb:21:9b:
2b:e4:1d:1c:32:1e:4a:1c:5c:e9:15:45:56:42:40:
08:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:83:CB:99:56:7A:DE:5C:D7:A4:C0:37:94:50:5D:3C:ED:E0:4F:48
X509v3 Authority Key Identifier:
keyid:C7:E9:C7:AA:53:4B:13:00:BF:72:4F:FF:0F:0C:1B:05:19:D5:05:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-nHqlNLEwC_ck__DwwbBRnVBbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/vYPLmVZ63lzXpMA3lFBdPO3gT0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/x-nHqlNLEwC_ck__DwwbBRnVBbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:9481::/32
Signature Algorithm: sha256WithRSAEncryption
9e:5a:63:4a:8a:26:f8:6d:ed:db:1e:7d:22:4d:47:03:67:21:
81:25:25:ea:b6:5f:ad:50:90:22:37:75:c0:7e:f7:6f:31:53:
bd:02:90:1c:26:23:60:a8:4d:3b:8e:92:2d:fa:29:de:9d:50:
c7:50:0e:46:a3:a4:f2:3e:12:8f:0d:6f:c4:24:15:c9:db:39:
2d:bb:97:03:02:c0:3c:37:b2:91:e4:c3:c4:0c:76:6e:9d:71:
b5:67:f6:25:6f:4e:b4:b6:d1:97:44:a4:92:0d:62:e9:e8:93:
cb:b9:e1:5c:c1:cf:1b:13:38:2b:98:25:54:f5:99:bc:87:0b:
f9:f2:23:07:68:51:8f:83:c4:0f:b1:a8:61:47:00:d1:76:e6:
bb:ae:2b:b8:8c:7f:b9:da:86:bc:c1:13:c4:3f:6c:7b:f5:63:
96:ff:25:bc:82:5f:32:7b:38:56:41:b9:2a:34:01:0d:0b:4c:
9f:d6:69:ca:27:92:2c:b9:a1:f9:76:38:ce:fd:27:65:da:a1:
f5:02:bc:b2:ad:1d:44:d9:e1:58:2c:7b:ad:54:4f:9e:26:8c:
cc:97:3b:84:a7:38:f6:f5:59:c0:fe:91:66:74:19:4f:b1:47:
02:a3:08:4e:09:bc:12:73:14:0b:a1:28:fa:4a:a5:c8:1d:7e:
a5:04:e3:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:18:55 2025 by rpki-client