Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/VyJNQqph-KXg7u6RUzzJN3rupCA.roa
File: VyJNQqph-KXg7u6RUzzJN3rupCA.roa (raw, json)
Hash identifier: LooQO9Bq7ra/KCVGLYawPG8pRB8eBgj1f03IAunPvdE=
Subject key identifier: 57:22:4D:42:AA:61:F8:A5:E0:EE:EE:91:53:3C:C9:37:7A:EE:A4:20
Certificate issuer: /CN=3d3f87bb7f7874aa7e15cfec9bbf6aae3c9ce33a
Certificate serial: 019424B394E1ED0E842DAD734998A00962D0
Authority key identifier: 3D:3F:87:BB:7F:78:74:AA:7E:15:CF:EC:9B:BF:6A:AE:3C:9C:E3:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/VyJNQqph-KXg7u6RUzzJN3rupCA.roa
Signing time: Thu 02 Jan 2025 01:48:56 +0000
ROA not before: Thu 02 Jan 2025 01:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59422
IP address blocks: 194.39.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:94:e1:ed:0e:84:2d:ad:73:49:98:a0:09:62:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d3f87bb7f7874aa7e15cfec9bbf6aae3c9ce33a
Validity
Not Before: Jan 2 01:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=57224d42aa61f8a5e0eeee91533cc9377aeea420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0b:2f:c2:64:eb:e9:b9:9d:35:58:e5:63:96:
c2:79:ae:38:76:99:54:b5:7a:43:ed:94:d3:64:b3:
0c:6f:d7:78:e1:43:c7:c3:a2:e5:21:fe:5d:9b:3f:
e3:23:a1:e3:b0:6f:d1:ae:a7:de:27:8d:b3:31:2c:
1f:1e:31:56:1a:4d:c9:43:0d:82:2a:8b:36:86:35:
fd:b0:df:ee:8d:30:4f:52:de:be:51:66:1a:2a:d1:
cd:2f:49:d4:a9:e2:8f:4a:8d:38:fd:30:96:3f:e0:
ca:a4:4b:0a:16:cd:18:e3:d1:81:6b:46:f1:b1:1e:
de:cf:6e:02:3d:27:f0:a1:ab:34:4f:78:79:bc:a7:
c5:20:c9:c9:6d:36:25:5d:f1:ab:67:e7:fc:8b:84:
92:07:1a:b2:d1:9c:70:20:e9:94:e5:70:5c:87:36:
8a:4a:b5:18:ef:70:a5:c2:14:77:46:b4:58:12:02:
91:0b:f4:fd:93:18:fe:14:6e:17:40:e2:68:94:1f:
53:9e:bb:f3:ea:1b:c3:e2:91:35:48:cf:84:06:3a:
ae:02:f6:2a:e6:62:b4:d5:7e:c8:26:a1:05:75:48:
09:b3:ed:ab:e5:a2:49:b7:a7:3b:7f:c9:9c:ff:d4:
24:07:cb:fa:27:d2:8e:8e:4d:bf:6d:70:18:9b:86:
80:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:22:4D:42:AA:61:F8:A5:E0:EE:EE:91:53:3C:C9:37:7A:EE:A4:20
X509v3 Authority Key Identifier:
keyid:3D:3F:87:BB:7F:78:74:AA:7E:15:CF:EC:9B:BF:6A:AE:3C:9C:E3:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/VyJNQqph-KXg7u6RUzzJN3rupCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.39.230.0/24
Signature Algorithm: sha256WithRSAEncryption
49:7f:83:8d:d1:6d:80:e2:3c:d8:0e:50:72:b4:b0:1e:bf:b2:
85:d7:3c:6a:36:ca:af:06:ad:51:74:c5:05:28:d0:51:f2:b2:
52:fb:78:28:ff:d8:1f:92:53:87:e5:ea:a5:d2:c3:86:93:a0:
d4:de:69:ab:19:29:7a:d5:25:3c:5b:c2:11:66:28:02:fe:3d:
a2:37:f7:1e:46:5a:9a:85:a3:ed:28:64:28:dd:b4:8e:35:5e:
71:41:ca:89:b6:12:eb:4c:6e:6f:80:68:7f:cf:54:1e:0a:2e:
49:50:5a:57:85:24:0a:25:44:de:83:af:99:55:f4:6d:71:ab:
a2:6e:4d:30:3c:b3:4c:59:05:66:cf:e1:98:63:69:cf:de:1d:
2d:4f:46:b6:ce:95:94:04:b2:3d:fa:48:07:4f:c7:47:77:42:
24:56:d8:a6:c8:08:3b:07:8f:07:1c:83:41:31:25:bc:6d:a2:
c7:51:a5:5f:1e:ea:b6:cc:e0:57:64:ab:91:fb:2f:94:9a:ae:
32:76:30:00:b4:72:d4:e3:46:8e:f4:0e:21:22:af:12:fb:56:
f7:d2:13:6b:dc:85:39:53:3e:7e:9e:04:da:19:fc:a4:0a:99:
88:eb:c8:96:ad:1b:f9:60:23:e5:5f:82:fc:09:f4:ae:d7:08:
7f:4b:81:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:33:51 2025 by rpki-client