Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/VpK1wTsU78Ht4QsKw-JTT_j2Ico.roa
File: VpK1wTsU78Ht4QsKw-JTT_j2Ico.roa (raw, json)
Hash identifier: WkwPvo6PSVgyt56GIK11MhVoaeSGnuVC/x51Dqj8kW8=
Subject key identifier: 56:92:B5:C1:3B:14:EF:C1:ED:E1:0B:0A:C3:E2:53:4F:F8:F6:21:CA
Certificate issuer: /CN=3026806a6b8dac68c2a32b65849229524fc33da7
Certificate serial: 019425FDC83B46E97A095324041FEDC01CB0
Authority key identifier: 30:26:80:6A:6B:8D:AC:68:C2:A3:2B:65:84:92:29:52:4F:C3:3D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MCaAamuNrGjCoytlhJIpUk_DPac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/VpK1wTsU78Ht4QsKw-JTT_j2Ico.roa
Signing time: Thu 02 Jan 2025 07:49:36 +0000
ROA not before: Thu 02 Jan 2025 07:49:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49697
IP address blocks: 2001:678:964::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:c8:3b:46:e9:7a:09:53:24:04:1f:ed:c0:1c:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3026806a6b8dac68c2a32b65849229524fc33da7
Validity
Not Before: Jan 2 07:49:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5692b5c13b14efc1ede10b0ac3e2534ff8f621ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bf:1f:4f:f0:6b:95:a0:36:2c:7d:53:83:d2:
8f:a6:89:2b:58:b3:78:64:73:29:3d:48:f9:ae:07:
bc:c3:a0:fd:80:3b:48:63:40:8e:15:7c:d0:ad:01:
fe:97:3a:24:93:1c:e7:d5:18:0e:31:72:53:07:5d:
4f:6e:13:8c:a4:b4:ff:ad:2c:be:4e:7c:3a:06:9a:
5e:88:44:1b:63:24:b6:3e:3d:8c:bc:7d:53:a4:4a:
5c:99:a7:3f:35:32:c0:a0:6d:62:4b:3d:0b:51:27:
7b:66:74:a3:44:43:67:73:98:1e:ac:7e:fe:06:9c:
80:dc:b2:ce:b7:a5:0f:0b:58:c5:e3:b2:b2:04:9b:
18:cb:dc:4e:21:ae:0f:71:d3:e1:1c:bd:cf:e6:5e:
c0:68:37:a7:81:41:19:e5:c5:b6:57:1e:dd:c6:e7:
2a:e5:1c:b4:9e:6e:1d:e5:69:ac:1b:ce:f9:29:95:
fb:51:90:2f:30:b7:fe:75:3b:80:07:77:69:47:d2:
b6:d2:ed:4e:ff:73:20:45:97:d1:94:80:c1:8b:45:
c4:0d:d9:ce:a4:2e:46:e7:ef:21:f8:e6:d3:15:96:
93:c7:e8:9e:00:83:3e:f9:40:e2:07:ed:60:fb:ab:
5f:21:d7:e4:c3:9f:ba:ab:ee:d2:de:dd:35:da:19:
1a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:92:B5:C1:3B:14:EF:C1:ED:E1:0B:0A:C3:E2:53:4F:F8:F6:21:CA
X509v3 Authority Key Identifier:
keyid:30:26:80:6A:6B:8D:AC:68:C2:A3:2B:65:84:92:29:52:4F:C3:3D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MCaAamuNrGjCoytlhJIpUk_DPac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/VpK1wTsU78Ht4QsKw-JTT_j2Ico.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/MCaAamuNrGjCoytlhJIpUk_DPac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:964::/48
Signature Algorithm: sha256WithRSAEncryption
11:73:bb:5a:00:d5:80:80:31:27:e7:63:d8:aa:24:3f:9a:f1:
fd:9c:2e:11:e9:50:28:d6:e4:fb:d8:08:4d:eb:b9:74:23:6d:
91:a9:10:3a:95:8b:18:32:b0:ba:9e:b5:e0:9a:41:af:d5:b9:
95:67:72:8c:d4:30:d9:a4:d2:38:e7:cb:9a:1e:1c:93:19:91:
ad:f8:7f:63:c8:35:08:78:0e:2e:b7:c6:02:cd:f9:1b:6f:71:
4f:d8:51:a1:cc:2d:b0:81:8a:80:f0:39:c8:87:cf:8d:24:08:
3c:aa:0f:2e:fe:48:f6:45:e0:6a:6d:cb:50:a0:5d:71:53:2d:
13:a4:53:d6:a9:dd:b4:79:b9:cd:cc:9b:36:13:b3:be:af:eb:
b7:a4:a8:b2:fa:b8:7a:2a:9a:29:e7:c7:f2:b2:51:b1:10:d0:
3b:82:f6:b2:a6:44:fb:0d:81:e1:d2:c1:b1:f0:96:8f:9a:8b:
b7:90:14:68:59:2e:aa:79:ce:37:97:a6:63:63:18:57:e6:b4:
2b:aa:5f:84:10:28:b2:44:db:10:6b:4a:6a:35:37:92:07:ff:
61:6b:a7:cd:7d:ba:e9:2f:e2:50:54:44:8b:11:8b:22:59:80:
b6:82:e8:4d:34:2b:36:96:f1:ca:06:f8:38:ae:2d:7c:ea:ef:
8f:0b:9f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:12:34 2025 by rpki-client