Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/vzw_vkrK3T6hMf3CfVO_XMRDNQY.roa
File: vzw_vkrK3T6hMf3CfVO_XMRDNQY.roa (raw, json)
Hash identifier: TyRzYsx0I5A5DgLqk0b56yUe558XEXu6adROBLfEbBY=
Subject key identifier: BF:3C:3F:BE:4A:CA:DD:3E:A1:31:FD:C2:7D:53:BF:5C:C4:43:35:06
Certificate issuer: /CN=aeb66ec5e8f2405f6f8d486e73fb82b8de0dee0f
Certificate serial: 019425216D4D7FF239075596038DDE38D8F7
Authority key identifier: AE:B6:6E:C5:E8:F2:40:5F:6F:8D:48:6E:73:FB:82:B8:DE:0D:EE:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrZuxejyQF9vjUhuc_uCuN4N7g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/vzw_vkrK3T6hMf3CfVO_XMRDNQY.roa
Signing time: Thu 02 Jan 2025 03:48:55 +0000
ROA not before: Thu 02 Jan 2025 03:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 397065
IP address blocks: 78.143.240.0/24 maxlen: 24
78.143.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:6d:4d:7f:f2:39:07:55:96:03:8d:de:38:d8:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeb66ec5e8f2405f6f8d486e73fb82b8de0dee0f
Validity
Not Before: Jan 2 03:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bf3c3fbe4acadd3ea131fdc27d53bf5cc4433506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:97:26:45:29:02:18:99:c1:49:2c:af:5d:66:
f0:95:3d:b9:06:a5:77:76:2b:d0:39:0f:58:ab:0f:
a1:72:84:8b:2c:63:e8:ce:64:2b:7f:74:23:49:a3:
3a:e9:c7:c5:e0:bd:d2:ee:70:bc:1a:12:f7:e1:a3:
ec:02:30:34:e4:94:a9:14:96:a1:25:38:7e:6a:4b:
9a:b0:08:4b:4b:21:60:5e:88:b8:2d:14:9f:cc:64:
4d:08:77:3a:d0:e9:8c:c3:8e:93:6d:48:23:13:be:
5b:05:57:ae:e5:82:bd:b8:fd:08:03:11:2c:c2:01:
92:ef:46:7e:6b:a5:b6:1b:ff:f2:f4:1b:19:a8:ab:
64:86:01:a3:8d:bc:d8:d6:1e:69:36:ce:dd:a4:b2:
88:9e:c9:d4:03:9c:30:13:8d:2a:71:dd:61:bb:33:
5e:94:43:10:1c:07:03:2c:a3:2a:f3:8c:0f:67:6d:
b2:3c:47:16:37:71:75:86:4b:26:0e:18:70:33:09:
12:d5:39:f1:72:e7:74:e6:a0:dd:38:06:2f:a5:ab:
6e:05:55:19:13:1e:e8:18:a2:9a:3b:f9:b3:d9:b7:
65:c7:63:b4:42:df:75:a3:35:07:99:11:96:77:3c:
78:18:3f:77:01:c9:be:d5:10:31:48:25:1d:04:2e:
8e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:3C:3F:BE:4A:CA:DD:3E:A1:31:FD:C2:7D:53:BF:5C:C4:43:35:06
X509v3 Authority Key Identifier:
keyid:AE:B6:6E:C5:E8:F2:40:5F:6F:8D:48:6E:73:FB:82:B8:DE:0D:EE:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrZuxejyQF9vjUhuc_uCuN4N7g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/vzw_vkrK3T6hMf3CfVO_XMRDNQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.143.240.0/24
78.143.243.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:ef:8a:e0:fe:ce:24:28:14:a2:94:59:75:d4:43:b5:47:26:
1e:ef:3f:45:de:93:5b:b2:44:92:aa:b8:5c:c4:b5:d0:2a:3b:
a3:53:d2:a8:dc:05:8b:88:32:d3:01:c5:6b:c2:15:67:90:ce:
49:fb:1d:6b:e3:a4:4a:2c:cf:17:a7:9e:ca:03:b8:84:67:5a:
06:42:80:13:5a:69:fb:62:e4:fc:29:8b:04:08:82:50:6b:19:
80:6f:97:30:96:15:bd:ff:ad:44:fb:da:69:0f:c0:73:96:05:
27:1b:b2:00:2b:1b:32:66:f4:1e:12:5c:c4:a8:26:3d:59:f1:
11:b3:51:38:51:0e:99:64:ed:d9:97:81:b9:ed:b8:79:8a:0c:
17:b4:3c:18:65:2e:3e:72:4c:d7:d9:26:5d:0e:2a:2f:cd:61:
0b:c5:b7:0d:0d:5e:c4:0e:a5:87:fd:6f:49:91:c7:7e:96:02:
fd:40:1b:d5:ae:dd:fa:c2:f7:4b:d5:1c:fa:5d:b7:1e:7a:4a:
ad:46:99:f2:88:df:1b:be:99:06:8f:0b:d2:27:f2:44:ed:71:
8b:cf:7b:2e:41:6b:99:0d:82:31:6a:12:99:30:d3:6b:8e:f2:
d0:55:89:fe:8a:79:01:9a:9a:f3:1d:9c:f8:44:36:b4:83:31:
66:85:ac:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:21:31 2025 by rpki-client