Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c514cd-7954-44ce-bd7f-713b41688706/1/VXKr5MEJE5Jp7H1GSfscnPHtPz4.roa
File: VXKr5MEJE5Jp7H1GSfscnPHtPz4.roa (raw, json)
Hash identifier: PdyLurVslNPMuyqlzMjVbGBFXSDBDCQHqjLoCljfQWE=
Subject key identifier: 55:72:AB:E4:C1:09:13:92:69:EC:7D:46:49:FB:1C:9C:F1:ED:3F:3E
Certificate issuer: /CN=57e898bf420924f976b5ae451108b9e6a01fc7dc
Certificate serial: 019420685EA40296A989E29D86CEC0DBE21B
Authority key identifier: 57:E8:98:BF:42:09:24:F9:76:B5:AE:45:11:08:B9:E6:A0:1F:C7:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V-iYv0IJJPl2ta5FEQi55qAfx9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/c514cd-7954-44ce-bd7f-713b41688706/1/VXKr5MEJE5Jp7H1GSfscnPHtPz4.roa
Signing time: Wed 01 Jan 2025 05:48:18 +0000
ROA not before: Wed 01 Jan 2025 05:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209898
IP address blocks: 185.155.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:5e:a4:02:96:a9:89:e2:9d:86:ce:c0:db:e2:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57e898bf420924f976b5ae451108b9e6a01fc7dc
Validity
Not Before: Jan 1 05:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5572abe4c109139269ec7d4649fb1c9cf1ed3f3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8c:45:d0:9c:02:59:ab:d1:35:08:8a:33:4c:
0b:0e:c0:d2:c1:ff:ce:a6:53:de:d9:40:fd:2f:49:
7b:58:14:67:7c:ef:c0:1a:75:f3:66:d6:cc:be:0e:
50:92:bd:cb:6a:bc:7b:84:3e:65:c6:5a:4e:e7:b4:
ab:62:75:82:6f:ec:02:43:bf:1a:85:54:65:28:33:
01:cd:21:8f:cb:1a:af:17:09:5c:18:ca:8f:c0:c6:
38:bd:f1:10:75:c2:dd:53:40:12:b0:ca:31:41:ca:
20:55:00:c7:99:b4:15:48:c4:d3:e2:2f:c1:9b:c4:
6d:12:0c:67:09:8b:05:54:af:77:94:eb:16:f1:f4:
1d:8b:91:f1:8b:4c:8b:ac:36:aa:f1:bd:44:8b:40:
51:9c:7d:24:ef:e3:4f:29:0b:37:64:f9:fd:fe:35:
68:86:6d:94:54:cb:eb:ce:7a:db:79:36:1b:1e:dd:
1a:e1:56:aa:de:db:0b:0a:aa:81:a9:71:53:72:a4:
13:56:d2:2c:b8:51:ad:eb:61:a4:ac:c5:f0:4a:51:
bc:98:6c:78:fe:6e:94:ae:6e:31:9e:f7:5a:09:d4:
77:90:3f:84:65:11:95:42:76:f1:3b:e2:17:bc:40:
0f:20:5b:43:1a:d7:06:50:ad:61:3f:84:09:51:f7:
a2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:72:AB:E4:C1:09:13:92:69:EC:7D:46:49:FB:1C:9C:F1:ED:3F:3E
X509v3 Authority Key Identifier:
keyid:57:E8:98:BF:42:09:24:F9:76:B5:AE:45:11:08:B9:E6:A0:1F:C7:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-iYv0IJJPl2ta5FEQi55qAfx9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c514cd-7954-44ce-bd7f-713b41688706/1/VXKr5MEJE5Jp7H1GSfscnPHtPz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c514cd-7954-44ce-bd7f-713b41688706/1/V-iYv0IJJPl2ta5FEQi55qAfx9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.29.0/24
Signature Algorithm: sha256WithRSAEncryption
44:65:41:67:7a:b7:9a:38:d7:90:c1:d0:81:67:ed:4d:63:dc:
c5:6c:e4:2b:d6:61:2a:97:1a:64:5a:39:6b:69:fc:d4:dc:d1:
c0:91:5e:67:22:ca:f6:71:2a:66:22:bd:13:2b:db:43:c8:e0:
4a:b2:24:a9:ac:65:64:85:94:cf:59:08:33:e1:62:15:9c:0b:
86:81:ae:b1:9a:62:a2:a9:3e:b4:80:bb:d5:cc:86:f8:4b:21:
14:c8:16:cf:f8:a6:f5:a7:7f:33:a4:ff:3c:ec:1e:79:49:37:
79:f5:37:40:39:c1:2d:c7:15:b2:ed:10:6a:55:6c:a9:a7:75:
56:13:44:6f:d8:fd:b8:9e:2c:cd:1c:c5:7f:ac:1b:47:4d:73:
e5:31:b7:70:ed:2a:0f:94:24:36:24:7f:b1:e8:b9:09:44:ca:
fc:19:2a:d5:54:8f:6c:80:a6:45:75:aa:49:51:0e:74:9c:95:
c8:df:95:44:5e:d2:39:71:25:09:0c:56:5d:cb:04:98:db:2d:
16:9f:cc:a2:4a:5f:a6:51:dd:3f:20:e8:97:b4:ff:04:d6:35:
8d:86:eb:3b:09:4e:cd:fc:18:90:a2:f8:1e:42:2d:59:9f:b4:
ba:77:8e:04:01:13:76:ee:af:53:b9:33:2e:77:47:dc:2f:b3:
f0:67:6d:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:00:49 2025 by rpki-client