Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/fe3dbe-9708-4242-9277-96b50bcc7a08/1/vCMAQMWIPZtWaDRHudCKdYaPL5w.roa
File: vCMAQMWIPZtWaDRHudCKdYaPL5w.roa (raw, json)
Hash identifier: K6MAg/QPc/fQfWH2rJi0K6eyKZU04FRZSEew4e4aMTk=
Subject key identifier: BC:23:00:40:C5:88:3D:9B:56:68:34:47:B9:D0:8A:75:86:8F:2F:9C
Certificate issuer: /CN=d8eeb20a880cdb494e9e62d43b2ef28c90cb9eef
Certificate serial: 019426D86A103EA5C85A04CCB97C570BB2B9
Authority key identifier: D8:EE:B2:0A:88:0C:DB:49:4E:9E:62:D4:3B:2E:F2:8C:90:CB:9E:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2O6yCogM20lOnmLUOy7yjJDLnu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/fe3dbe-9708-4242-9277-96b50bcc7a08/1/vCMAQMWIPZtWaDRHudCKdYaPL5w.roa
Signing time: Thu 02 Jan 2025 11:48:24 +0000
ROA not before: Thu 02 Jan 2025 11:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215137
IP address blocks: 2a12:62c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:6a:10:3e:a5:c8:5a:04:cc:b9:7c:57:0b:b2:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8eeb20a880cdb494e9e62d43b2ef28c90cb9eef
Validity
Not Before: Jan 2 11:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc230040c5883d9b56683447b9d08a75868f2f9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:2e:e2:63:18:48:59:c3:33:00:a2:90:b4:5a:
3b:39:01:8a:7d:ad:0e:bb:85:b6:12:05:e4:e6:c3:
e4:b4:fb:99:7c:a2:bc:f7:bd:0d:26:e9:36:ed:66:
c3:70:37:a2:48:ad:84:21:46:e0:fc:1d:23:e9:ad:
a5:a2:23:eb:cf:76:e1:df:d0:23:9f:de:1a:4c:e8:
a5:27:ba:06:d8:6a:70:6a:ad:60:a7:7d:01:28:0d:
33:04:4c:7a:a5:f0:fd:96:b3:bc:58:32:d5:d5:fc:
95:96:b9:5c:27:b6:d6:59:7e:00:4e:fe:c4:ae:91:
cd:32:46:41:fb:51:b5:6c:d2:ed:de:7f:a4:a2:7d:
a3:9d:9e:98:ff:5c:b2:41:20:8b:a1:30:36:10:96:
38:c8:50:4c:7f:d1:3d:5c:80:47:f4:82:4b:65:78:
4a:ab:f4:47:46:41:32:23:49:d1:04:7e:a2:a6:b7:
f5:1f:21:32:17:21:29:78:5d:d9:f0:99:51:ee:5f:
d2:0a:a5:bb:7f:2f:f7:95:a9:60:7b:ba:31:87:68:
90:26:bf:91:07:8e:35:f2:cb:37:3c:8c:3c:71:ce:
9d:0c:4d:57:0f:71:aa:fb:3b:b1:ab:79:f8:0c:72:
6e:93:f5:d1:5c:a2:04:16:16:2a:92:21:fd:f9:3a:
49:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:23:00:40:C5:88:3D:9B:56:68:34:47:B9:D0:8A:75:86:8F:2F:9C
X509v3 Authority Key Identifier:
keyid:D8:EE:B2:0A:88:0C:DB:49:4E:9E:62:D4:3B:2E:F2:8C:90:CB:9E:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2O6yCogM20lOnmLUOy7yjJDLnu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fe3dbe-9708-4242-9277-96b50bcc7a08/1/vCMAQMWIPZtWaDRHudCKdYaPL5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fe3dbe-9708-4242-9277-96b50bcc7a08/1/2O6yCogM20lOnmLUOy7yjJDLnu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:62c0::/29
Signature Algorithm: sha256WithRSAEncryption
36:9d:b0:0c:5f:e6:57:f8:5e:f9:06:ec:72:2b:00:ef:83:5d:
c5:c7:cd:e3:55:fd:ec:99:60:41:a1:49:7c:f7:96:71:f1:5d:
9e:3e:2e:5c:85:8f:68:3a:e8:ee:c5:d1:0e:73:8d:63:b1:76:
22:2d:35:35:10:52:ad:7d:05:49:7b:8d:08:58:dd:33:90:58:
29:bc:91:3d:b9:d7:b9:c6:cd:e5:b7:c2:e9:9e:30:88:84:21:
71:a8:90:97:53:fe:fb:a4:c4:0f:33:b1:3b:bf:d3:47:4e:b0:
90:2c:ce:70:9e:99:07:40:a9:dd:f5:65:52:7a:20:7e:68:64:
88:61:88:91:a9:a1:91:fe:da:f1:1e:16:63:86:85:6c:4a:c3:
92:8a:75:58:ba:30:c2:11:db:e7:b8:01:2e:30:2d:fb:ec:9e:
68:ed:de:52:25:a4:56:cb:74:92:cd:a4:f4:a7:2e:4a:8b:c2:
36:53:26:e6:08:45:4e:81:47:ab:69:f5:aa:15:61:24:86:4d:
87:bf:68:06:a5:c3:76:b7:37:b1:cf:88:ab:b8:a4:ab:6b:7f:
10:ed:01:50:e8:f6:a8:8e:a6:ef:dd:13:35:a3:43:7b:bb:0f:
f5:3b:5f:8a:00:c9:0f:48:20:70:b1:f5:51:74:aa:86:52:32:
50:c8:c2:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:28:24 2025 by rpki-client