Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vsYS1yNC27K4go1u55pkiDiNTso.roa
File: vsYS1yNC27K4go1u55pkiDiNTso.roa (raw, json)
Hash identifier: VwZn+ljb2itH/kH3n3gJQ8cRZDUKa5y/b7TBam8fThU=
Subject key identifier: BE:C6:12:D7:23:42:DB:B2:B8:82:8D:6E:E7:9A:64:88:38:8D:4E:CA
Certificate issuer: /CN=bc9ec8db59726075ee29f5efc90b61e73c07f7af
Certificate serial: 0194258F615EE7F3A34112ECE8F621E3E168
Authority key identifier: BC:9E:C8:DB:59:72:60:75:EE:29:F5:EF:C9:0B:61:E7:3C:07:F7:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJ7I21lyYHXuKfXvyQth5zwH968.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vsYS1yNC27K4go1u55pkiDiNTso.roa
Signing time: Thu 02 Jan 2025 05:49:01 +0000
ROA not before: Thu 02 Jan 2025 05:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1926
IP address blocks: 153.1.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:61:5e:e7:f3:a3:41:12:ec:e8:f6:21:e3:e1:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9ec8db59726075ee29f5efc90b61e73c07f7af
Validity
Not Before: Jan 2 05:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bec612d72342dbb2b8828d6ee79a6488388d4eca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:5d:b0:1d:f7:5d:5e:a8:ef:7f:01:99:31:8a:
49:b7:dc:44:08:32:da:c0:14:3b:1f:ad:8f:0a:f5:
9c:ea:a1:15:f3:26:bc:96:89:7d:27:da:35:53:9c:
c3:eb:6a:e5:b5:5b:24:c5:2c:99:0d:21:09:ba:b6:
b9:dd:27:de:2b:58:f2:e4:ff:77:fd:3c:e3:bf:ae:
3c:83:95:5e:03:bb:ff:1b:c5:ab:3b:be:03:d4:01:
10:6b:d9:10:ff:52:d8:b8:b9:9b:ab:f7:83:38:3c:
68:dd:78:85:67:8b:9a:7a:7c:42:fe:fc:c5:9a:35:
dd:e9:bc:72:20:db:7e:07:47:b7:cb:e6:9d:81:4a:
cc:33:f5:e5:14:bc:b6:0f:d1:0e:56:e7:78:75:a5:
83:4c:d4:bd:9e:3a:76:54:08:71:4e:45:02:88:47:
c0:69:da:1c:34:57:67:a1:a2:0e:96:12:47:91:ac:
4c:9f:f3:ba:9a:57:c3:78:9d:ff:d8:40:2c:d4:2f:
65:10:a3:01:81:5c:7a:92:61:1d:23:6e:4e:5a:33:
cd:24:62:4f:a0:9c:a4:54:fb:0e:f9:33:77:6a:d6:
98:dc:1a:1a:20:4a:e7:97:98:85:53:ee:37:f6:4a:
fc:c0:c9:2f:00:ae:87:06:a0:4a:80:27:54:2f:91:
a9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:C6:12:D7:23:42:DB:B2:B8:82:8D:6E:E7:9A:64:88:38:8D:4E:CA
X509v3 Authority Key Identifier:
keyid:BC:9E:C8:DB:59:72:60:75:EE:29:F5:EF:C9:0B:61:E7:3C:07:F7:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJ7I21lyYHXuKfXvyQth5zwH968.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vsYS1yNC27K4go1u55pkiDiNTso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.1.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9a:5b:86:ca:cc:92:35:c6:1d:f8:86:2a:86:83:27:4b:6e:f8:
15:0d:0d:bf:0d:41:a2:f5:aa:b6:fa:b0:21:9b:0d:1f:75:81:
38:b2:b4:11:1e:4f:79:08:31:8b:5c:ce:3d:89:28:24:61:96:
ba:75:46:a9:32:c1:c7:c2:78:33:89:79:7f:c3:bf:3e:e8:51:
80:75:11:5b:01:ae:77:f6:21:0e:7f:ea:65:74:9d:69:89:97:
77:11:51:31:00:34:41:17:91:e6:95:94:ff:f3:e2:73:3f:a7:
3e:57:b6:1f:f2:f7:f3:bc:dd:55:d7:99:41:8a:b5:63:97:e1:
34:6a:c6:4b:e3:1a:00:2e:22:57:84:5f:f4:32:fe:9c:b5:2a:
f7:6a:dd:fc:12:c8:c3:a0:c7:c1:e6:2f:44:3e:20:b4:3f:8f:
df:6e:30:c7:4d:b5:4e:82:1d:89:eb:4d:2f:49:e8:59:ee:57:
10:e2:a6:b0:0a:5c:6c:85:8a:81:9e:d7:a7:02:b2:5a:44:46:
fe:13:a6:36:80:52:3f:05:50:8d:5c:d1:2b:ac:2a:8c:b1:ca:
3e:22:cc:6a:79:b0:46:7c:11:39:b0:2d:92:ca:bc:91:8d:04:
0f:10:b6:0e:f2:31:53:60:8a:6f:79:c7:ac:d4:9d:0d:73:21:
ce:bd:c5:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:55:31 2025 by rpki-client