Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/75044b-7a06-4150-a9ef-5d985369cce8/1/VW4qDKZrndV7Z-51YQQt1hWe-7I.roa
File: VW4qDKZrndV7Z-51YQQt1hWe-7I.roa (raw, json)
Hash identifier: e6Hx4gZ7Dz7JbD/M0yY7GRmntMNu0QhLfKCnMedrpm0=
Subject key identifier: 55:6E:2A:0C:A6:6B:9D:D5:7B:67:EE:75:61:04:2D:D6:15:9E:FB:B2
Certificate issuer: /CN=2eebf8a5b02016e4394392819738644d6ca25642
Certificate serial: 0194221F93B4AF0980035C5176139F769460
Authority key identifier: 2E:EB:F8:A5:B0:20:16:E4:39:43:92:81:97:38:64:4D:6C:A2:56:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Luv4pbAgFuQ5Q5KBlzhkTWyiVkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/75044b-7a06-4150-a9ef-5d985369cce8/1/VW4qDKZrndV7Z-51YQQt1hWe-7I.roa
Signing time: Wed 01 Jan 2025 13:48:02 +0000
ROA not before: Wed 01 Jan 2025 13:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210355
IP address blocks: 185.1.229.0/24 maxlen: 24
2001:7f8:121::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:93:b4:af:09:80:03:5c:51:76:13:9f:76:94:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2eebf8a5b02016e4394392819738644d6ca25642
Validity
Not Before: Jan 1 13:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=556e2a0ca66b9dd57b67ee7561042dd6159efbb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:28:a4:ed:31:0a:de:f4:b2:b2:6c:5a:64:f8:
44:a8:21:d4:b3:e8:b7:49:19:8f:20:c8:6c:73:13:
90:03:74:f2:63:8d:d7:52:8b:29:1b:1e:8e:27:2f:
6f:82:84:7a:ee:48:93:19:20:d5:d4:75:13:26:5b:
97:a7:50:92:4e:65:ec:80:b9:0d:08:b9:9b:b4:89:
54:28:a3:ce:ab:ae:0e:3a:2e:19:ca:9a:94:f3:3f:
d5:49:ea:47:21:70:44:97:91:d4:1c:fa:31:60:41:
80:cf:fe:b2:ae:df:ac:44:8e:32:16:f2:66:90:1f:
78:af:34:55:34:4e:0e:30:20:1c:e2:7a:e5:21:5f:
21:74:a8:29:bb:7f:ca:25:ec:34:44:d8:b1:89:2b:
6a:26:50:ae:2c:89:dd:5c:3c:83:02:1f:30:67:d5:
e7:ba:7c:f5:0b:df:9e:a4:94:98:5b:93:43:51:93:
2f:bd:e0:3c:c4:87:1f:ee:97:9a:9f:21:33:88:84:
a9:70:00:bd:b9:68:b1:e3:88:51:dd:2b:32:6b:c6:
ab:b7:98:66:ea:0f:14:1a:62:34:f6:61:f3:b3:8c:
4a:7b:96:90:2a:81:b3:a8:d8:95:df:d6:78:06:ae:
f2:82:07:b2:59:82:be:ca:10:ce:e0:81:c3:b5:d6:
ea:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:6E:2A:0C:A6:6B:9D:D5:7B:67:EE:75:61:04:2D:D6:15:9E:FB:B2
X509v3 Authority Key Identifier:
keyid:2E:EB:F8:A5:B0:20:16:E4:39:43:92:81:97:38:64:4D:6C:A2:56:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Luv4pbAgFuQ5Q5KBlzhkTWyiVkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/75044b-7a06-4150-a9ef-5d985369cce8/1/VW4qDKZrndV7Z-51YQQt1hWe-7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/75044b-7a06-4150-a9ef-5d985369cce8/1/Luv4pbAgFuQ5Q5KBlzhkTWyiVkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.229.0/24
IPv6:
2001:7f8:121::/48
Signature Algorithm: sha256WithRSAEncryption
1e:f3:fe:8e:b5:a2:9f:3b:d3:f5:3f:80:96:c9:ce:95:f0:b1:
d9:6a:16:7a:63:e6:d0:99:7e:a5:2b:8d:e3:e4:6f:8a:86:cb:
63:68:e5:04:1f:56:09:ad:68:f3:91:d8:99:87:6f:fb:c1:70:
1e:73:c4:b1:af:35:b9:0b:c1:19:d4:32:75:7e:3a:a0:28:31:
b6:91:92:c6:c6:6b:df:c5:5b:8f:a1:8e:cb:d5:ea:31:c6:65:
3b:60:48:78:01:55:c4:77:5e:e4:5e:36:d8:ed:49:85:fd:c1:
c6:c5:4c:95:8f:d6:47:b9:5d:1a:1b:ac:30:a7:1f:d4:5e:4b:
eb:e1:b5:0e:3e:90:6d:da:5c:97:b1:d6:e5:b6:ce:aa:25:1b:
47:80:ac:bf:4e:34:f8:70:0f:e6:a4:8d:6a:ab:32:12:3f:50:
8f:05:f6:27:64:b4:e5:20:56:a4:cd:9f:e9:6d:d0:5c:b8:96:
71:1e:27:6c:9b:f4:94:ec:39:8a:c9:11:d5:54:24:12:01:c1:
bd:77:ce:f9:a8:23:5b:c6:11:df:dd:80:c2:a8:bd:ec:6f:63:
b1:08:40:61:1a:60:bc:32:b5:1e:03:86:20:36:b6:cf:72:38:
ed:08:b6:e3:e9:90:d7:69:57:d0:97:53:d3:b6:60:79:28:85:
ff:0a:37:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:19:04 2025 by rpki-client