Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/d0b751-8e26-4066-8dfe-245cc8163174/1/VWrPOrM8Fkr8xlRJ4DNfRNYD-CA.roa
File: VWrPOrM8Fkr8xlRJ4DNfRNYD-CA.roa (raw, json)
Hash identifier: nor+a0IvBnV1JWoF5VovQn4dIVDpAWqZt4zl+cG19s8=
Subject key identifier: 55:6A:CF:3A:B3:3C:16:4A:FC:C6:54:49:E0:33:5F:44:D6:03:F8:20
Certificate issuer: /CN=8331a361bdc51d7aacadce302f1257d5c3f35ae1
Certificate serial: 01856FF95565470DB443821495699E52477C
Authority key identifier: 83:31:A3:61:BD:C5:1D:7A:AC:AD:CE:30:2F:12:57:D5:C3:F3:5A:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzGjYb3FHXqsrc4wLxJX1cPzWuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/d0b751-8e26-4066-8dfe-245cc8163174/1/VWrPOrM8Fkr8xlRJ4DNfRNYD-CA.roa
Signing time: Mon 02 Jan 2023 00:54:49 +0000
ROA not before: Mon 02 Jan 2023 00:54:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25369
IP address blocks: 2a09:6901::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:55:65:47:0d:b4:43:82:14:95:69:9e:52:47:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8331a361bdc51d7aacadce302f1257d5c3f35ae1
Validity
Not Before: Jan 2 00:54:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=556acf3ab33c164afcc65449e0335f44d603f820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:22:a4:c8:c2:d8:3c:e4:47:59:11:59:11:36:
89:cb:a0:c3:d1:5d:53:ae:df:9e:ba:dc:80:0c:94:
89:99:ae:f4:7d:c1:c1:c7:04:e0:8c:1f:37:14:d1:
08:a9:62:cc:2d:b6:82:bf:d5:7f:44:49:94:ce:90:
4b:a7:c5:86:e8:a3:71:5c:bf:f8:37:07:8d:5a:3b:
70:aa:d6:75:07:13:1c:fb:40:a1:ec:20:dd:60:ec:
0a:c5:70:db:25:01:8b:83:04:90:4a:1a:f4:23:c8:
61:15:40:55:95:86:44:cd:3c:50:ed:fe:da:23:9f:
95:4c:54:a3:32:aa:e4:49:20:9b:2e:dc:13:6b:4e:
fc:90:9b:d9:4c:64:47:f4:16:33:ff:c8:da:0e:b8:
26:b1:0b:f7:cf:be:28:c3:8b:35:02:6a:d2:e2:d5:
f5:0d:89:b6:5c:49:27:a0:08:ed:19:a1:14:13:64:
b5:0f:3b:70:8f:db:87:82:d1:e8:d6:4c:69:61:22:
61:da:56:77:bf:1e:5a:19:ab:8e:23:f9:0b:f1:63:
79:37:63:e6:fd:0e:21:30:da:ef:2f:9b:b9:df:f7:
cb:be:55:eb:b7:3e:3c:1b:c4:1e:ea:ca:56:0f:8b:
8f:eb:25:da:22:0e:d7:78:b0:d3:ce:b8:da:3c:83:
d8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:6A:CF:3A:B3:3C:16:4A:FC:C6:54:49:E0:33:5F:44:D6:03:F8:20
X509v3 Authority Key Identifier:
keyid:83:31:A3:61:BD:C5:1D:7A:AC:AD:CE:30:2F:12:57:D5:C3:F3:5A:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzGjYb3FHXqsrc4wLxJX1cPzWuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d0b751-8e26-4066-8dfe-245cc8163174/1/VWrPOrM8Fkr8xlRJ4DNfRNYD-CA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d0b751-8e26-4066-8dfe-245cc8163174/1/gzGjYb3FHXqsrc4wLxJX1cPzWuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:6901::/32
Signature Algorithm: sha256WithRSAEncryption
51:ff:56:53:ba:9a:e6:45:ca:b5:84:b4:06:d8:f2:d3:de:0a:
29:be:38:f3:f1:4a:d5:00:29:56:8b:ac:07:73:5b:34:72:d8:
60:03:42:7e:fa:1b:14:4b:b4:ad:ee:9b:6f:cb:64:0f:2f:28:
88:67:58:1f:b3:6e:34:8a:7d:f9:80:b4:55:cb:f3:50:e2:57:
63:2e:03:0a:9a:63:ee:8b:01:f2:84:77:4d:11:8e:17:92:00:
6e:6d:2c:e4:8b:ca:f6:1a:8d:3b:7c:ba:3e:4d:3d:4f:5b:3e:
9a:c5:89:d6:4e:dc:d5:5b:fe:d0:d2:db:61:98:98:e3:8f:08:
5e:b8:f2:c1:1b:73:cc:0c:2a:01:4c:86:b9:12:b6:e4:5d:d2:
6e:87:b0:ed:d5:48:57:58:88:41:68:0b:2c:73:2a:dd:55:e8:
eb:14:3e:5b:20:9e:82:20:1b:38:62:52:16:ba:c1:50:e5:f5:
fa:f7:32:d7:aa:c6:f1:7b:5b:40:c6:72:6e:bf:5b:ff:bf:87:
33:a1:31:cf:ff:f0:49:3c:ce:4d:ef:67:3f:e4:88:c3:3b:cc:
c7:1a:6d:e2:aa:42:d2:b9:c0:3e:07:40:1b:69:74:a6:f0:8f:
0e:52:7d:39:b4:d1:7c:ce:98:f5:9d:49:14:2d:3a:2f:22:d9:
27:44:1b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 01:14:23 2025 by rpki-client