Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/I_VctA8CCHUYTMQz8Tr_vsRaXCc.roa
File: I_VctA8CCHUYTMQz8Tr_vsRaXCc.roa (raw, json)
Hash identifier: e+w5CRwaj72Tbcm1Vi4aqzPrCMc7o16Q2Vm73EGSFbg=
Subject key identifier: 23:F5:5C:B4:0F:02:08:75:18:4C:C4:33:F1:3A:FF:BE:C4:5A:5C:27
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 019424456172F1E35FBBE1D0EBD1814CDD9B
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/I_VctA8CCHUYTMQz8Tr_vsRaXCc.roa
Signing time: Wed 01 Jan 2025 23:48:34 +0000
ROA not before: Wed 01 Jan 2025 23:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199812
IP address blocks: 195.87.92.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:61:72:f1:e3:5f:bb:e1:d0:eb:d1:81:4c:dd:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Jan 1 23:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=23f55cb40f020875184cc433f13affbec45a5c27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:19:57:7e:6f:41:34:7b:23:0e:64:a7:15:e4:
67:c4:d2:d5:04:b5:5f:f1:64:86:2a:5d:6e:d5:79:
8c:af:17:fe:48:2d:93:e7:b8:4c:6b:d5:4c:b3:c9:
de:a4:c7:9a:ab:0b:ee:26:54:9c:f8:3b:12:0a:c4:
40:77:a3:6a:71:67:29:7b:98:3e:c8:8e:61:5c:82:
f4:41:29:8d:67:1f:b0:3b:a3:b7:b3:99:ad:53:be:
e9:80:38:92:9f:cc:c7:1f:58:4f:c0:80:e5:3d:30:
bd:f5:d9:87:b2:3f:de:1a:df:fa:72:45:7d:57:54:
29:c2:96:b7:a9:67:f3:d0:1f:24:dc:ce:55:b1:9a:
b1:67:87:23:5b:20:53:e6:c0:ab:3c:af:59:91:0c:
1a:d5:9a:bb:d2:6f:00:ab:40:1a:3e:bc:76:b5:3e:
54:1a:80:67:86:d9:0c:c8:b1:27:7c:f8:8e:48:0c:
e9:9e:3a:82:ba:1b:70:a6:e7:20:94:84:19:83:ac:
1a:ab:a1:68:eb:2c:da:c0:ce:26:65:60:23:39:8f:
fd:b9:63:d3:0c:91:84:c6:c5:74:bc:8d:2f:61:90:
f3:85:f8:be:37:93:c5:51:1b:08:3f:e3:ec:89:7e:
07:d3:e9:6f:b5:e9:f3:bf:7a:c2:be:5e:40:f7:3b:
cf:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:F5:5C:B4:0F:02:08:75:18:4C:C4:33:F1:3A:FF:BE:C4:5A:5C:27
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/I_VctA8CCHUYTMQz8Tr_vsRaXCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.87.92.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:6d:4f:26:11:c9:64:87:c0:58:7a:14:2a:6d:f4:58:97:84:
25:35:cd:cd:03:cb:43:f2:ba:df:af:e9:2d:a0:44:e8:58:7d:
7a:5c:f2:72:0e:6e:38:7d:41:74:44:de:d8:f5:b2:f0:9a:43:
c7:e8:60:0b:fc:ac:16:d7:f5:de:77:67:01:20:fe:ce:4d:72:
a8:ff:24:13:b1:a6:3b:43:e4:3d:7f:04:69:e8:cb:76:0d:68:
e1:19:83:57:f6:59:46:de:4b:87:0e:c5:9e:35:07:34:cb:3b:
7b:c0:8f:df:81:eb:fc:e9:4d:76:65:c2:46:d2:1e:42:97:54:
4d:a5:1e:fb:02:fe:ab:5e:c2:db:94:7e:73:b9:eb:35:8d:8a:
e7:57:ee:eb:85:db:57:3e:44:c9:74:fe:94:8e:1a:2e:80:d9:
44:c7:e4:be:68:76:13:87:85:9b:31:ac:33:da:35:2c:6a:81:
44:05:cc:b4:9e:ec:fc:95:64:26:58:ea:78:e9:75:05:80:77:
50:9a:05:c1:12:98:24:ae:b1:c4:0f:06:b7:dd:f8:4a:7a:7b:
52:ec:f4:86:ce:09:c2:d1:e2:30:d7:b4:37:5a:a6:79:fc:91:
7a:d7:76:54:49:c2:60:3d:85:9a:64:aa:3a:e0:c4:c8:96:28:
ec:03:96:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:52:39 2025 by rpki-client