Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/vYXX-P5z6hRBQ7-8lJ_iXGLn4go.roa
File: vYXX-P5z6hRBQ7-8lJ_iXGLn4go.roa (raw, json)
Hash identifier: tUPYcKZIMMRBgSq4kpcIvP3eoj9pd2WdEJw4CXvzzvU=
Subject key identifier: BD:85:D7:F8:FE:73:EA:14:41:43:BF:BC:94:9F:E2:5C:62:E7:E2:0A
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 0194274838B307B16A87AFEDFE19E3700348
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/vYXX-P5z6hRBQ7-8lJ_iXGLn4go.roa
Signing time: Thu 02 Jan 2025 13:50:32 +0000
ROA not before: Thu 02 Jan 2025 13:50:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39831
IP address blocks: 2a05:4380::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:38:b3:07:b1:6a:87:af:ed:fe:19:e3:70:03:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 2 13:50:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bd85d7f8fe73ea144143bfbc949fe25c62e7e20a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1c:c4:2c:53:e3:8b:cd:23:34:85:09:96:88:
35:56:1f:83:af:5a:c9:4a:16:bc:ae:e9:2b:52:ec:
28:d7:e4:c6:b4:6d:a4:07:53:c5:42:d4:2f:96:57:
65:ce:4c:41:0a:af:e9:19:36:42:de:d3:02:50:f3:
68:e0:ed:65:c4:3a:23:f4:b6:32:89:33:ef:25:37:
f1:b6:43:16:ac:6c:75:8e:53:53:68:70:85:1f:a7:
95:e6:a8:3a:f6:20:95:e8:6e:1c:7f:c2:ad:34:eb:
3e:0c:83:4c:4f:fb:48:05:14:82:c3:89:2a:d2:27:
41:36:2a:db:7a:a1:eb:79:c2:fe:14:fc:35:2a:6b:
1a:c0:8b:85:85:42:fd:43:8e:76:2a:9d:e1:2a:14:
80:66:ac:0a:28:ad:b9:22:dd:73:31:ba:27:9c:93:
2f:96:00:13:3a:ae:2b:cd:c0:68:9a:2c:30:15:c3:
ce:21:44:fc:3b:35:6d:45:48:54:9d:3b:c5:6c:09:
4a:9f:f2:09:16:6e:41:39:63:62:74:81:4a:ab:1d:
be:e0:01:c0:0d:da:a8:34:05:b7:4b:55:73:2b:d0:
9f:71:3d:b9:49:94:b8:bb:59:66:42:36:07:29:70:
d0:97:47:d9:7a:dc:2b:e1:03:bc:88:44:be:21:34:
4f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:85:D7:F8:FE:73:EA:14:41:43:BF:BC:94:9F:E2:5C:62:E7:E2:0A
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/vYXX-P5z6hRBQ7-8lJ_iXGLn4go.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:4380::/32
Signature Algorithm: sha256WithRSAEncryption
9b:9e:95:89:3e:f9:21:c8:a7:12:29:68:e0:c4:a2:d6:42:bd:
da:d6:76:06:a7:64:c0:10:05:49:0e:63:3e:8d:a5:06:9c:62:
37:89:6c:09:82:17:e7:4a:de:82:09:98:fd:cd:81:d2:98:e6:
3d:e8:cf:ce:3f:87:53:65:91:e2:5f:bf:b2:1d:45:d2:56:d0:
16:db:f0:36:2c:a6:30:c6:27:b6:cf:bb:70:08:04:5d:8d:0d:
e6:c5:87:8c:9a:96:02:45:25:93:76:11:c8:9e:be:f9:4d:c2:
69:d4:4e:77:78:75:7d:47:28:47:54:73:9f:8d:90:dc:a0:9b:
df:61:ca:64:24:db:48:f9:9f:ba:7b:92:46:a5:dc:cd:0c:fb:
17:42:74:df:b5:67:a7:98:89:3f:e7:cd:49:fb:df:88:b7:ee:
cf:9e:74:e2:a8:9b:17:e1:d1:ea:d4:34:9f:d0:9f:60:b3:9a:
18:70:51:1e:02:8c:3a:45:1f:88:b6:96:dd:08:a5:69:e9:9c:
4f:5d:94:75:d0:81:5a:ff:7e:8f:ed:fa:49:9e:b9:ae:4c:65:
bc:45:4f:eb:24:04:65:3b:e4:ef:1a:cb:6b:6b:5b:4b:5d:07:
26:a9:2a:20:43:33:4d:07:d6:9c:ae:97:c7:fe:93:e2:e7:f8:
b4:2c:8d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:49:25 2025 by rpki-client on console.sobornost.net