Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/VWU8PvF9xsaefh7QtZqWNhXN174.roa
File: VWU8PvF9xsaefh7QtZqWNhXN174.roa (raw, json)
Hash identifier: gl1gzTY1ZMOWEGunc/pppcoYg0R13zR+wn5F72gGZ1A=
Subject key identifier: 55:65:3C:3E:F1:7D:C6:C6:9E:7E:1E:D0:B5:9A:96:36:15:CD:D7:BE
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0195A5F67EE49C2E408D62E06B94670C2A3F
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/VWU8PvF9xsaefh7QtZqWNhXN174.roa
Signing time: Mon 17 Mar 2025 21:15:49 +0000
ROA not before: Mon 17 Mar 2025 21:15:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:86cf:630c/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a5:f6:7e:e4:9c:2e:40:8d:62:e0:6b:94:67:0c:2a:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Mar 17 21:15:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=55653c3ef17dc6c69e7e1ed0b59a963615cdd7be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ed:28:c6:b4:49:8d:a1:7f:f7:49:66:b1:e2:
a7:92:49:0f:78:7c:50:08:34:53:9a:b3:64:6f:08:
d3:e9:54:22:61:ba:57:c8:c8:eb:37:52:c9:e5:5e:
7d:1e:28:d6:a5:22:90:2a:63:60:1f:61:0d:11:62:
95:da:76:07:96:1d:da:f4:e4:8b:fc:b1:5f:ff:63:
39:c1:54:7d:43:08:b6:a4:4b:fc:c2:c2:75:90:31:
10:65:98:cc:c1:fa:6a:d5:4c:7a:d6:1f:5e:ca:22:
e5:74:ab:c4:9f:85:3f:b1:16:29:4b:2b:e2:5e:00:
77:29:c8:5e:50:d3:bb:f4:63:ed:25:b0:d7:9e:3b:
bc:60:5c:09:00:02:45:e2:75:1c:c3:52:09:9f:cf:
27:28:a6:fc:61:01:d1:d2:2d:96:e5:f0:4c:87:e4:
6d:22:b8:92:92:94:f1:71:69:0c:56:56:78:26:f7:
c6:1f:f0:13:03:76:1c:a8:21:e2:e1:1c:75:4f:d8:
e1:4a:d2:d7:b8:32:45:bd:31:c6:1e:13:1f:61:67:
58:17:78:aa:45:34:37:9f:c8:ce:b0:ce:e4:5b:9f:
70:58:ef:4a:2d:92:7e:69:d2:99:39:bc:e8:99:f5:
3a:14:7b:12:13:c4:d9:a0:25:4b:74:81:7b:9c:d4:
d3:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:65:3C:3E:F1:7D:C6:C6:9E:7E:1E:D0:B5:9A:96:36:15:CD:D7:BE
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/VWU8PvF9xsaefh7QtZqWNhXN174.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:86cf:630c/128
Signature Algorithm: sha256WithRSAEncryption
50:42:70:e9:89:69:0d:10:3c:d1:33:ce:10:56:c3:5d:70:de:
93:b5:bb:9a:31:86:ef:68:03:d9:48:2a:dd:ca:7b:79:29:46:
0b:81:3c:2b:85:44:c9:8d:55:c8:14:e6:7e:7d:9c:12:4a:48:
32:04:62:7c:e9:0f:e4:d4:21:9a:bb:03:91:17:e1:6e:68:bb:
f0:bf:52:09:54:34:cc:c1:9e:5a:d5:df:78:c5:e8:3d:31:19:
7a:df:bb:1d:01:2d:17:7f:74:95:e3:60:25:75:be:80:a0:77:
ec:55:f5:9a:7a:2d:e3:6b:c1:3f:92:aa:b7:1d:89:5a:d3:34:
f8:5d:6d:9d:8f:d7:dc:57:2f:27:d4:40:b7:77:a4:9f:15:ae:
37:68:e6:12:de:45:8a:75:4e:19:94:31:0b:78:26:0c:64:54:
71:fd:84:7f:13:16:28:27:62:ce:81:da:c6:b4:bb:f8:9a:ba:
b6:df:ed:cc:9b:c0:da:5c:39:d8:95:4c:78:2f:cc:fe:ae:fa:
f7:23:fd:cc:71:1c:87:32:d7:a6:4d:69:64:84:08:7f:8d:ac:
2c:a4:0c:03:d4:cf:96:76:4a:d9:c0:30:cc:74:07:3f:bf:26:
f8:14:79:6f:0e:1c:30:2b:a7:82:4d:ab:76:e2:0c:85:1b:37:
c7:a6:a2:04
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jun 16 14:44:00 2025 by rpki-client