Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/1e48b6-7fb0-4a12-b3e7-4b9a6058b423/1/vLGEnXeHKe1JvyRbs81GFKJa9lI.roa
File: vLGEnXeHKe1JvyRbs81GFKJa9lI.roa (raw, json)
Hash identifier: y85TW0QR8RD5vWjjj7XBtsfhuTrNhwWb7DCnCsRHfMk=
Subject key identifier: BC:B1:84:9D:77:87:29:ED:49:BF:24:5B:B3:CD:46:14:A2:5A:F6:52
Certificate issuer: /CN=4b20d5c78c107bcf9c715453d21444f696e44b11
Certificate serial: 01942067E037F0B65BCA758182B3329EFBCA
Authority key identifier: 4B:20:D5:C7:8C:10:7B:CF:9C:71:54:53:D2:14:44:F6:96:E4:4B:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SyDVx4wQe8-ccVRT0hRE9pbkSxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/1e48b6-7fb0-4a12-b3e7-4b9a6058b423/1/vLGEnXeHKe1JvyRbs81GFKJa9lI.roa
Signing time: Wed 01 Jan 2025 05:47:46 +0000
ROA not before: Wed 01 Jan 2025 05:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61095
IP address blocks: 2a04:1040::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:e0:37:f0:b6:5b:ca:75:81:82:b3:32:9e:fb:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b20d5c78c107bcf9c715453d21444f696e44b11
Validity
Not Before: Jan 1 05:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bcb1849d778729ed49bf245bb3cd4614a25af652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f4:0c:07:4e:48:f6:da:bf:38:4e:4f:5a:6e:
e4:d8:07:eb:37:f8:f9:dd:4b:f8:31:ce:81:d2:72:
30:90:ab:cb:02:43:c5:89:31:7b:03:26:5a:25:62:
7b:04:21:8b:eb:1a:f1:0e:17:19:1e:7b:18:1d:f2:
f9:f0:b7:01:aa:02:05:62:b5:8f:f4:87:bf:94:59:
0f:d1:7c:44:53:dc:06:2b:9f:f2:1d:e6:91:3e:93:
2f:08:3d:58:60:2e:d7:8a:56:2d:e4:0f:7a:eb:37:
c2:0d:08:57:5b:c8:cf:2d:bd:dd:3a:c4:13:19:3d:
54:ba:95:3b:eb:17:29:19:14:bd:cf:90:3b:d1:01:
20:a8:15:78:39:a7:65:6b:9e:4c:b9:b5:1d:49:7c:
af:f3:25:09:ef:d1:2d:40:1e:c2:29:74:59:37:b6:
25:4f:58:2e:e2:ff:44:1e:49:76:f1:8b:53:67:1d:
c6:64:3c:81:19:35:07:66:f9:b9:a3:d2:4a:dc:5f:
26:6c:fb:eb:f7:59:13:48:0e:3f:df:bf:62:ff:9e:
c7:3d:45:66:78:0d:1d:5f:84:e7:a9:9e:c8:4a:59:
fd:ff:fd:62:7b:7d:c0:28:49:26:e0:2b:4a:33:3c:
d7:ed:19:de:19:a3:2c:1d:c6:1f:5a:95:87:de:30:
1f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B1:84:9D:77:87:29:ED:49:BF:24:5B:B3:CD:46:14:A2:5A:F6:52
X509v3 Authority Key Identifier:
keyid:4B:20:D5:C7:8C:10:7B:CF:9C:71:54:53:D2:14:44:F6:96:E4:4B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SyDVx4wQe8-ccVRT0hRE9pbkSxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1e48b6-7fb0-4a12-b3e7-4b9a6058b423/1/vLGEnXeHKe1JvyRbs81GFKJa9lI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1e48b6-7fb0-4a12-b3e7-4b9a6058b423/1/SyDVx4wQe8-ccVRT0hRE9pbkSxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:1040::/29
Signature Algorithm: sha256WithRSAEncryption
70:0c:75:e3:ab:ba:c5:10:86:4b:85:75:a3:bb:b1:42:fb:d4:
6e:07:21:e9:91:10:92:88:ae:07:54:79:47:f2:b8:94:55:d5:
d7:a0:54:0b:b6:84:8c:4a:21:5f:cd:e0:73:7c:65:82:c8:65:
ee:13:bd:7d:9c:22:7e:3c:68:85:e2:34:b7:6e:af:1a:5d:62:
31:75:08:0c:32:91:9c:23:61:c6:e2:40:1a:ab:18:f4:8b:aa:
66:b9:b8:a0:82:6d:36:c9:1f:de:82:f4:d2:31:a5:91:53:b5:
89:fc:7a:eb:c5:f9:c4:89:f2:32:f5:cd:5b:94:ff:61:0c:c5:
1f:0d:90:a2:4e:fb:86:80:8b:13:cb:af:54:83:f0:e0:0d:33:
06:23:f8:51:9b:62:75:e7:92:94:ad:96:93:9b:e9:b7:e1:69:
a6:4b:84:e0:86:b6:26:ed:29:03:44:8c:4b:e4:91:ab:75:99:
2a:3f:55:db:b1:39:b5:35:b7:85:77:2c:34:99:de:0e:30:7f:
aa:47:f0:2a:dd:af:6a:50:0d:a9:ec:61:fd:5a:27:12:6f:11:
d4:05:41:6d:9b:aa:f6:88:0e:f5:93:72:d2:4d:b8:18:5e:71:
a4:bc:80:29:67:24:a3:32:cf:bc:d6:5a:5f:f3:71:af:33:56:
d0:fd:65:2c
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQgZ+A38LZbynWBgrMynvvKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiMjBkNWM3OGMxMDdiY2Y5YzcxNTQ1M2QyMTQ0NGY2OTZl
NDRiMTEwHhcNMjUwMTAxMDU0NzQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiY2IxODQ5ZDc3ODcyOWVkNDliZjI0NWJiM2NkNDYxNGEyNWFmNjUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPQMB05I9tq/OE5PWm7k2AfrN/j5
3Uv4Mc6B0nIwkKvLAkPFiTF7AyZaJWJ7BCGL6xrxDhcZHnsYHfL58LcBqgIFYrWP
9Ie/lFkP0XxEU9wGK5/yHeaRPpMvCD1YYC7XilYt5A966zfCDQhXW8jPLb3dOsQT
GT1UupU76xcpGRS9z5A70QEgqBV4Oadla55MubUdSXyv8yUJ79EtQB7CKXRZN7Yl
T1gu4v9EHkl28YtTZx3GZDyBGTUHZvm5o9JK3F8mbPvr91kTSA4/379i/57HPUVm
eA0dX4TnqZ7ISln9//1ie33AKEkm4CtKMzzX7RneGaMsHcYfWpWH3jAfawIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFLyxhJ13hyntSb8kW7PNRhSiWvZSMB8GA1UdIwQY
MBaAFEsg1ceMEHvPnHFUU9IURPaW5EsRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3lEVng0d1FlOC1jY1ZSVDBoUkU5cGJrU3hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8xZTQ4YjYtN2ZiMC00YTEyLWIzZTct
NGI5YTYwNThiNDIzLzEvdkxHRW5YZUhLZTFKdnlSYnM4MUdGS0phOWxJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi8xZTQ4YjYtN2ZiMC00YTEyLWIzZTctNGI5YTYwNThiNDIz
LzEvU3lEVng0d1FlOC1jY1ZSVDBoUkU5cGJrU3hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgQQQDAN
BgkqhkiG9w0BAQsFAAOCAQEAcAx146u6xRCGS4V1o7uxQvvUbgch6ZEQkoiuB1R5
R/K4lFXV16BUC7aEjEohX83gc3xlgshl7hO9fZwifjxoheI0t26vGl1iMXUIDDKR
nCNhxuJAGqsY9IuqZrm4oIJtNskf3oL00jGlkVO1ifx668X5xInyMvXNW5T/YQzF
Hw2Qok77hoCLE8uvVIPw4A0zBiP4UZtideeSlK2Wk5vpt+FppkuE4Ia2Ju0pA0SM
S+SRq3WZKj9V27E5tTW3hXcsNJneDjB/qkfwKt2valANqexh/VonEm8R1AVBbZuq
9ogO9ZNy0k24GF5xpLyAKWckozLPvNZaX/NxrzNW0P1lLA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:37:12 2025 by rpki-client