Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a28ca6-af2f-40cd-b549-7eead1461a54/1/VANQMbS9wJfHpjxNeVPpV7NpFIQ.roa
File: VANQMbS9wJfHpjxNeVPpV7NpFIQ.roa (raw, json)
Hash identifier: UNFy8NT1hW32lKijy2cCpAEH6HPMdcOUxJumaoALuL8=
Subject key identifier: 54:03:50:31:B4:BD:C0:97:C7:A6:3C:4D:79:53:E9:57:B3:69:14:84
Certificate issuer: /CN=99b8fd292c8a1b896b8752344a3da92378f2ae5a
Certificate serial: 0194236A2A9D42FD5BDCB3F4CDEC56ACD35A
Authority key identifier: 99:B8:FD:29:2C:8A:1B:89:6B:87:52:34:4A:3D:A9:23:78:F2:AE:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mbj9KSyKG4lrh1I0Sj2pI3jyrlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a28ca6-af2f-40cd-b549-7eead1461a54/1/VANQMbS9wJfHpjxNeVPpV7NpFIQ.roa
Signing time: Wed 01 Jan 2025 19:49:07 +0000
ROA not before: Wed 01 Jan 2025 19:49:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215137
IP address blocks: 2a07:5900::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:2a:9d:42:fd:5b:dc:b3:f4:cd:ec:56:ac:d3:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99b8fd292c8a1b896b8752344a3da92378f2ae5a
Validity
Not Before: Jan 1 19:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=54035031b4bdc097c7a63c4d7953e957b3691484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bc:c2:36:98:14:d8:34:e2:f1:ee:fb:14:51:
2d:66:8a:af:b0:98:fa:41:09:d1:2a:ad:c7:89:51:
0a:d8:1c:b2:1a:4b:37:12:54:ac:5c:95:b4:b7:3a:
d6:fe:a4:9b:86:77:49:3e:a9:d5:c2:5e:b2:67:39:
6c:8b:e2:e3:57:86:b3:03:ba:cb:01:5b:f3:04:46:
5e:75:87:6b:b1:56:36:5c:e7:bf:40:b9:f1:40:ad:
0a:8a:47:62:09:a0:8b:1d:71:c2:74:42:fa:7f:82:
28:c9:1b:4e:d8:74:1b:91:12:a6:5f:1c:bf:8c:ca:
fb:a7:e2:8c:10:63:4c:20:4e:9a:ec:17:1a:22:6a:
ff:b1:16:1d:ac:2a:db:32:31:e0:62:a9:aa:a5:de:
f9:90:b3:1d:81:ea:8b:7c:53:39:1f:84:41:af:df:
49:32:d9:25:bd:5f:0e:6a:21:01:94:17:22:ef:6e:
2c:aa:e0:a4:f9:3b:cc:7f:51:76:48:f6:62:7b:10:
70:e1:8f:a9:c0:47:b7:78:9b:c2:be:57:46:cb:09:
a5:3a:c8:43:fb:51:51:eb:91:2f:6b:cd:f2:e5:c3:
c2:a4:05:dd:81:2a:8d:2c:dc:c4:c3:8f:65:49:7d:
c3:2a:a3:99:c6:c7:50:13:82:e4:ca:9d:fa:17:21:
58:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:03:50:31:B4:BD:C0:97:C7:A6:3C:4D:79:53:E9:57:B3:69:14:84
X509v3 Authority Key Identifier:
keyid:99:B8:FD:29:2C:8A:1B:89:6B:87:52:34:4A:3D:A9:23:78:F2:AE:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mbj9KSyKG4lrh1I0Sj2pI3jyrlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a28ca6-af2f-40cd-b549-7eead1461a54/1/VANQMbS9wJfHpjxNeVPpV7NpFIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a28ca6-af2f-40cd-b549-7eead1461a54/1/mbj9KSyKG4lrh1I0Sj2pI3jyrlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:5900::/29
Signature Algorithm: sha256WithRSAEncryption
0a:4a:88:1a:37:19:ef:d8:be:6e:9c:36:41:b4:11:4b:e1:a8:
25:04:a7:db:b3:9c:aa:46:01:1e:dc:0f:01:92:dd:6f:17:e9:
30:5b:a6:8a:f8:b9:e6:07:a7:ec:8b:24:ff:75:57:1d:55:16:
db:c9:f8:7d:83:89:30:0f:f0:85:cc:a7:69:5a:c3:2d:4b:c3:
12:eb:00:c9:19:52:65:08:b2:cc:b5:e1:34:e8:ac:fe:e5:ce:
b5:b5:df:ff:4e:49:94:bb:88:cc:78:6c:e7:6f:8b:b9:8f:30:
9c:cf:3a:33:57:1b:54:34:a8:1b:dd:38:e9:65:e3:4b:3d:78:
79:48:95:1b:2f:cc:c1:22:92:bd:2a:9b:65:f5:cb:64:3e:39:
25:3d:d0:8a:08:83:79:1e:41:b8:b4:c0:a3:71:20:68:ef:7e:
a6:5a:51:49:11:55:28:f2:29:66:66:f2:0c:72:1d:bb:42:01:
e9:aa:ca:7e:24:aa:d9:ad:80:bf:69:ff:8d:bb:e1:11:b5:1d:
1b:44:a2:76:49:28:52:ea:1d:3d:17:25:a2:a8:a9:8a:58:f5:
55:d6:c3:d3:99:d0:1e:9c:7d:01:df:1d:b0:c5:44:e0:bb:f0:
76:5a:59:e6:60:c5:a9:6e:59:e4:1e:6b:e8:25:29:81:56:95:
2b:49:60:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:40:11 2025 by rpki-client