Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/VQUOzqXhwMIZ7BP3JiEJ-HlSjvg.roa
File: VQUOzqXhwMIZ7BP3JiEJ-HlSjvg.roa (raw, json)
Hash identifier: Y9WwjRgOzDJ0P9uiacsmEouTI2l454ZKj2QNuJjBIIw=
Subject key identifier: 55:05:0E:CE:A5:E1:C0:C2:19:EC:13:F7:26:21:09:F8:79:52:8E:F8
Certificate issuer: /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Certificate serial: 0194221FBDD1A5CC5C6D39A05197967898BA
Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/VQUOzqXhwMIZ7BP3JiEJ-HlSjvg.roa
Signing time: Wed 01 Jan 2025 13:48:13 +0000
ROA not before: Wed 01 Jan 2025 13:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8938
IP address blocks: 2001:4190:8024::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:bd:d1:a5:cc:5c:6d:39:a0:51:97:96:78:98:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Validity
Not Before: Jan 1 13:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=55050ecea5e1c0c219ec13f7262109f879528ef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b0:c4:a6:98:34:de:96:c6:4b:3c:e0:46:e4:
77:c8:4b:19:35:de:b5:52:1a:9d:70:57:c9:0a:4a:
c0:02:77:aa:5a:2b:ce:7a:63:7e:c9:38:c2:cd:99:
cd:f3:c2:72:b3:19:75:e8:2d:3e:8e:c0:4a:21:49:
ff:04:17:a4:00:c3:32:7f:f2:71:73:df:ae:88:3d:
49:00:44:06:a5:b6:1a:ca:9d:3e:1a:3c:d5:f3:ca:
6a:f2:52:3f:0b:95:11:7c:d4:8f:bf:5c:ad:a4:da:
dc:a5:14:60:4b:0a:6f:2f:0d:8e:c4:5f:3f:29:60:
04:b8:d3:39:e3:d8:05:52:14:9c:b3:c2:22:4a:86:
bd:98:c3:6c:42:30:85:a1:cb:a4:a5:d7:8f:47:62:
65:3c:95:ec:69:15:dd:17:1d:bb:d9:34:96:e9:9c:
e7:fc:59:02:ae:c9:2d:29:29:2a:b2:f0:f6:e3:d0:
1d:91:05:71:17:65:ca:52:d4:5d:1f:dd:6a:19:65:
4b:c3:02:63:f3:f5:27:b4:71:98:40:55:6f:ce:4c:
93:53:ee:fe:1e:9f:52:89:83:23:37:6a:7b:7c:0e:
75:5b:0a:78:43:1f:12:68:86:ea:c5:5d:42:12:66:
b4:71:1f:f6:16:86:55:bc:23:a2:b0:b7:08:b8:7a:
57:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:05:0E:CE:A5:E1:C0:C2:19:EC:13:F7:26:21:09:F8:79:52:8E:F8
X509v3 Authority Key Identifier:
keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/VQUOzqXhwMIZ7BP3JiEJ-HlSjvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:4190:8024::/48
Signature Algorithm: sha256WithRSAEncryption
9b:e6:22:6a:73:a8:aa:08:82:05:8a:b8:f2:e5:3e:48:8d:35:
18:76:9e:b9:b1:82:5b:1f:66:56:5a:4c:63:17:7f:16:a6:92:
9c:d5:75:69:9b:3a:4d:74:f6:f9:ba:4e:89:e9:93:0c:d2:af:
15:74:9f:ec:91:16:8c:9a:04:e6:ad:b1:66:f8:04:ea:c7:2b:
63:55:34:d5:39:47:b8:93:3e:49:2c:61:11:91:a2:3c:b9:d1:
6e:6f:36:5f:0b:af:b0:58:21:44:ce:9d:f9:f9:d6:d3:1b:e6:
ec:59:07:30:a0:76:c8:7d:54:12:91:8a:a1:c3:9c:79:a2:4c:
fa:fd:2f:8e:88:1c:9d:c6:55:55:47:7c:1b:b9:f0:47:d3:66:
c0:21:c1:b9:17:60:04:92:a0:fb:ce:b2:c6:a3:eb:8c:53:c3:
c1:25:43:f0:39:b6:9f:4a:31:98:dc:33:4e:79:ae:97:c4:40:
f7:23:65:ab:18:a7:02:32:9c:9d:69:07:0f:3f:66:29:a9:56:
bb:b2:48:45:3b:9c:d1:7c:c0:50:92:64:ca:e4:92:46:93:a7:
1d:dc:78:53:2d:9e:8e:05:dd:68:03:8b:65:1c:3f:2f:15:b8:
14:64:22:c7:2c:d2:35:54:e0:78:9a:08:19:c3:4f:7b:fc:27:
9b:26:a9:84
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQiH73RpcxcbTmgUZeWeJi6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhY2E2M2RmMjQ4YjdhZGYzZGRkMDdlOGMyZDNlZWRkMDJj
ZWY5MzMwHhcNMjUwMTAxMTM0ODEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NTA1MGVjZWE1ZTFjMGMyMTllYzEzZjcyNjIxMDlmODc5NTI4ZWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2LDEppg03pbGSzzgRuR3yEsZNd61
UhqdcFfJCkrAAneqWivOemN+yTjCzZnN88Jysxl16C0+jsBKIUn/BBekAMMyf/Jx
c9+uiD1JAEQGpbYayp0+GjzV88pq8lI/C5URfNSPv1ytpNrcpRRgSwpvLw2OxF8/
KWAEuNM549gFUhScs8IiSoa9mMNsQjCFocukpdePR2JlPJXsaRXdFx272TSW6Zzn
/FkCrsktKSkqsvD249AdkQVxF2XKUtRdH91qGWVLwwJj8/UntHGYQFVvzkyTU+7+
Hp9SiYMjN2p7fA51Wwp4Qx8SaIbqxV1CEma0cR/2FoZVvCOisLcIuHpX5wIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFFUFDs6l4cDCGewT9yYhCfh5Uo74MB8GA1UdIwQY
MBaAFBrKY98ki3rfPd0H6MLT7t0CzvkzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3NwajN5U0xldDg5M1Fmb3d0UHUzUUxPLVRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8xZjY0NTgtZGM3NS00YWRkLWFlNzIt
OTFlMzE4NGJiMGFiLzEvVlFVT3pxWGh3TUlaN0JQM0ppRUotSGxTanZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS8xZjY0NTgtZGM3NS00YWRkLWFlNzItOTFlMzE4NGJiMGFi
LzEvR3NwajN5U0xldDg5M1Fmb3d0UHUzUUxPLVRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFBkIAk
MA0GCSqGSIb3DQEBCwUAA4IBAQCb5iJqc6iqCIIFirjy5T5IjTUYdp65sYJbH2ZW
WkxjF38WppKc1XVpmzpNdPb5uk6J6ZMM0q8VdJ/skRaMmgTmrbFm+ATqxytjVTTV
OUe4kz5JLGERkaI8udFubzZfC6+wWCFEzp35+dbTG+bsWQcwoHbIfVQSkYqhw5x5
okz6/S+OiBydxlVVR3wbufBH02bAIcG5F2AEkqD7zrLGo+uMU8PBJUPwObafSjGY
3DNOea6XxED3I2WrGKcCMpydaQcPP2YpqVa7skhFO5zRfMBQkmTK5JJGk6cd3HhT
LZ6OBd1oA4tlHD8vFbgUZCLHLNI1VOB4mggZw097/CebJqmE
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:57:26 2025 by rpki-client