Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/vzORurH_cWu4s93Hg1XT5ltdLe0.roa
File: vzORurH_cWu4s93Hg1XT5ltdLe0.roa (raw, json)
Hash identifier: lCzy3hcZEBhDFnviizG4eyjDlw5OJ8Xly0F6Emk8/ps=
Subject key identifier: BF:33:91:BA:B1:FF:71:6B:B8:B3:DD:C7:83:55:D3:E6:5B:5D:2D:ED
Certificate issuer: /CN=1704a51d84fba6d0fe218aedca95a894dcce1cd7
Certificate serial: 019423D74295E602B831053F470366402775
Authority key identifier: 17:04:A5:1D:84:FB:A6:D0:FE:21:8A:ED:CA:95:A8:94:DC:CE:1C:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwSlHYT7ptD-IYrtypWolNzOHNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/vzORurH_cWu4s93Hg1XT5ltdLe0.roa
Signing time: Wed 01 Jan 2025 21:48:17 +0000
ROA not before: Wed 01 Jan 2025 21:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202041
IP address blocks: 185.45.156.0/22 maxlen: 22
185.45.156.0/23 maxlen: 23
185.45.158.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:42:95:e6:02:b8:31:05:3f:47:03:66:40:27:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1704a51d84fba6d0fe218aedca95a894dcce1cd7
Validity
Not Before: Jan 1 21:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bf3391bab1ff716bb8b3ddc78355d3e65b5d2ded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c5:f6:30:27:11:c1:88:7d:74:1b:cf:64:7d:
ab:4c:4a:a2:12:6d:cc:78:8d:ce:04:d9:e6:89:58:
44:00:79:92:b7:b8:d8:c4:84:0e:82:77:99:dc:3c:
cb:b2:ca:76:38:70:e4:9a:eb:03:ae:e2:fc:11:49:
a1:55:0a:27:a5:14:46:a4:a8:a5:6f:3f:12:43:39:
3a:e9:62:9b:41:87:ea:b2:73:da:b6:8e:fb:33:a9:
44:48:62:8f:e3:83:50:3e:65:1a:2e:c9:8a:a1:51:
ca:5b:26:c0:32:e5:84:61:77:1c:b2:61:6c:ea:4b:
4c:7a:a9:63:bc:26:ab:de:c0:3a:15:65:7c:70:1c:
fe:f6:05:44:08:5a:97:72:57:0f:a2:1f:84:51:66:
44:69:c8:00:d4:d6:6b:99:31:d8:64:3e:a0:b1:f1:
7e:f3:93:88:2a:81:59:2a:38:7f:f0:71:e9:a5:93:
05:91:17:4a:af:a8:d3:e9:f5:0d:b7:7f:73:44:2d:
af:5e:2e:9a:ad:b6:e8:04:a3:35:53:7d:6f:af:f1:
ef:14:1f:50:b3:c8:f9:9e:d4:b0:ac:b3:92:36:69:
37:c9:59:26:63:bd:10:74:6e:ac:c6:9c:13:9c:b1:
86:94:0a:d1:7d:9a:68:93:fa:4e:75:f9:63:b6:46:
dd:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:33:91:BA:B1:FF:71:6B:B8:B3:DD:C7:83:55:D3:E6:5B:5D:2D:ED
X509v3 Authority Key Identifier:
keyid:17:04:A5:1D:84:FB:A6:D0:FE:21:8A:ED:CA:95:A8:94:DC:CE:1C:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwSlHYT7ptD-IYrtypWolNzOHNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/vzORurH_cWu4s93Hg1XT5ltdLe0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.45.156.0/22
Signature Algorithm: sha256WithRSAEncryption
53:0c:d2:fd:4a:db:b6:e3:78:59:1c:5f:95:70:63:21:55:61:
35:2b:ff:88:56:4c:e1:a8:5f:32:eb:4f:40:88:e2:70:3c:77:
03:bb:45:4f:ea:23:c9:63:48:e3:9f:c8:4a:44:2c:dd:93:52:
b4:8e:af:ed:ad:54:fc:2a:6b:68:eb:14:f1:1f:53:80:4e:d5:
0d:c2:e3:bd:2a:56:86:2b:ba:b4:af:a5:eb:b6:e1:32:24:77:
cb:ee:36:99:15:dc:20:45:a5:d7:d5:79:e9:75:c5:d4:c8:cb:
db:d6:f7:3c:70:2c:df:fe:6f:d4:77:21:da:66:a8:1b:93:00:
56:86:fc:f8:74:3d:88:40:e5:5c:41:3f:a2:99:6a:74:e7:06:
4a:b2:b1:0b:65:71:30:bd:eb:d0:90:24:12:a0:2e:79:60:ff:
15:15:61:30:4c:bb:e2:63:a1:47:0d:b2:a8:ec:bb:85:81:f1:
cc:66:1f:4c:5c:d9:27:11:bc:8a:28:2d:f0:22:fd:36:e4:ad:
f8:fb:c7:cc:56:a2:28:59:b4:d7:58:86:91:c7:d8:fd:96:6f:
25:1b:4c:d5:c8:93:fa:65:95:9c:21:60:0c:94:cb:67:5e:fa:
9e:c8:47:3c:98:33:17:94:2d:b1:4e:e3:af:fa:97:f6:f0:84:
fb:bb:f3:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:04:58 2025 by rpki-client