Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/vs48n0p-DmtoL_C4SBPia6Jvd8w.roa
File: vs48n0p-DmtoL_C4SBPia6Jvd8w.roa (raw, json)
Hash identifier: tuA8X++lNgFfnnvP2QSYPZLLrumXdRybTYvGT2qVHr0=
Subject key identifier: BE:CE:3C:9F:4A:7E:0E:6B:68:2F:F0:B8:48:13:E2:6B:A2:6F:77:CC
Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5
Certificate serial: 01942369E862D4A7F4D4BB5BFC05C24ECEFB
Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/vs48n0p-DmtoL_C4SBPia6Jvd8w.roa
Signing time: Wed 01 Jan 2025 19:48:50 +0000
ROA not before: Wed 01 Jan 2025 19:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 151673
IP address blocks: 2a0f:7803:fc00::/40 maxlen: 48
2a0f:7803:fd00::/40 maxlen: 48
2a0f:7803:fd12::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:e8:62:d4:a7:f4:d4:bb:5b:fc:05:c2:4e:ce:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcead390625edba1408108df57cea47160d70e5
Validity
Not Before: Jan 1 19:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bece3c9f4a7e0e6b682ff0b84813e26ba26f77cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:03:60:dd:fd:44:9e:28:80:18:7c:89:3e:6b:
05:bb:a4:60:ca:aa:1f:a0:3a:bc:32:96:6c:ff:a7:
d8:c7:4f:f8:4c:55:e3:93:e9:e6:f7:81:3c:cf:30:
bc:48:4f:37:1e:5d:2f:1c:01:7a:d0:0a:a1:cd:10:
38:f5:28:7c:dd:b6:79:e2:fb:d2:e9:b9:8c:52:ac:
ba:76:42:55:fc:e2:29:90:b7:0d:d4:90:04:26:5f:
c3:78:6c:25:94:9c:fb:22:62:6b:94:00:d4:d3:38:
7a:5e:02:d1:6c:4c:7e:fb:95:f8:0f:00:8f:ce:b3:
81:cf:dd:fd:b2:98:75:14:74:07:c4:43:79:95:90:
60:df:3b:36:8b:28:69:ee:a5:0d:d1:4a:30:75:4c:
96:17:7b:7b:67:a3:69:d3:26:c6:37:01:c3:a0:5b:
bd:5d:73:e7:f9:ba:13:d2:e6:59:5b:3e:dc:d1:a0:
97:aa:88:f4:6c:4f:a7:28:af:97:dd:ac:55:c5:23:
70:5d:e9:51:22:06:a4:2e:00:38:04:10:89:95:cd:
85:4a:e0:c4:5a:82:84:c9:9a:4a:8c:43:06:22:5e:
8a:09:86:a9:0b:39:fb:73:c3:df:75:f1:a3:da:81:
62:70:e1:be:56:2c:a9:0d:3c:cd:2a:53:67:46:8c:
d9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:CE:3C:9F:4A:7E:0E:6B:68:2F:F0:B8:48:13:E2:6B:A2:6F:77:CC
X509v3 Authority Key Identifier:
keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/vs48n0p-DmtoL_C4SBPia6Jvd8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:7803:fc00::/39
Signature Algorithm: sha256WithRSAEncryption
4a:89:49:bf:70:3e:c3:e0:9b:c1:6a:5d:86:aa:65:85:31:65:
11:0c:05:64:f9:8a:79:c7:20:a8:bc:a4:b4:d8:c8:d0:6c:3c:
31:c5:b2:8f:a3:6f:8e:3c:b1:f4:bc:e0:60:0d:fd:6b:c2:9d:
be:71:bc:e6:fd:dc:11:97:2d:d1:5c:8a:bc:f4:69:a5:0a:0a:
08:b4:db:f6:98:b8:88:70:98:e5:f2:5d:d7:92:45:d1:79:a6:
66:43:b2:b6:a1:4a:16:e3:19:41:88:8a:29:8c:35:f4:aa:21:
d0:17:4b:6f:72:93:0b:08:99:bf:fd:d6:60:bc:6f:f1:f8:18:
5a:42:90:78:ae:eb:29:24:29:0f:53:f2:bc:d7:a7:1f:cd:39:
9e:34:17:cd:0d:6f:0a:42:11:c4:8f:8b:e4:ee:2d:40:91:bf:
ca:83:70:2b:7d:2e:48:8d:24:af:5b:be:bf:a5:c5:43:21:91:
5a:af:4e:a7:0d:76:1d:dc:a1:a0:03:1f:aa:9c:36:d0:af:1a:
3c:6f:f0:5d:3c:bd:c6:75:43:1e:d3:27:5b:bb:9e:60:5d:c5:
7c:82:c4:89:4d:4e:bf:dd:d9:04:5c:65:b5:37:5a:af:d1:cc:
ce:eb:f6:66:a2:ac:c1:92:47:78:01:42:df:cf:ba:2b:1b:da:
b1:f9:1b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:52:23 2025 by rpki-client