Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/vTxpWsq09BWKUrPdlE-R7slfYvE.roa
File: vTxpWsq09BWKUrPdlE-R7slfYvE.roa (raw, json)
Hash identifier: stVMdMmGc0TbKwRIFj7GhH7rI1l5EwcJOw+4r3qAf4I=
Subject key identifier: BD:3C:69:5A:CA:B4:F4:15:8A:52:B3:DD:94:4F:91:EE:C9:5F:62:F1
Certificate issuer: /CN=d49922ca8d139a4d03d6d57cbc8177dc05feb9ec
Certificate serial: 01941F8C8CA04D5A1E909C2FCBD35B622B4F
Authority key identifier: D4:99:22:CA:8D:13:9A:4D:03:D6:D5:7C:BC:81:77:DC:05:FE:B9:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Jkiyo0Tmk0D1tV8vIF33AX-uew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/vTxpWsq09BWKUrPdlE-R7slfYvE.roa
Signing time: Wed 01 Jan 2025 01:48:12 +0000
ROA not before: Wed 01 Jan 2025 01:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215110
IP address blocks: 178.237.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:8c:a0:4d:5a:1e:90:9c:2f:cb:d3:5b:62:2b:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d49922ca8d139a4d03d6d57cbc8177dc05feb9ec
Validity
Not Before: Jan 1 01:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bd3c695acab4f4158a52b3dd944f91eec95f62f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8b:8c:88:11:e5:bf:b9:e7:23:88:85:b5:ea:
aa:01:53:d0:56:9e:13:4f:8f:87:f0:b1:f0:3c:17:
e1:f9:f2:ed:3c:f0:00:c8:df:f1:c0:3a:3c:59:77:
46:98:e7:0d:6d:75:4e:fd:82:e4:5e:b6:02:87:4f:
83:cf:3d:29:93:c8:c2:42:8d:25:03:0b:3e:90:d0:
9f:87:14:83:ef:fd:65:fc:7c:24:75:27:f5:03:e2:
b8:d6:38:58:63:bd:5f:a0:a7:ac:a9:29:1c:68:76:
d1:45:c4:a4:c5:3d:9f:92:da:02:75:a1:6c:a4:33:
e7:f3:95:01:63:73:72:55:d4:0a:c3:03:3f:9a:b3:
06:51:8f:a7:ec:0d:ea:27:16:d6:41:24:48:10:46:
b4:bf:c2:b8:34:9b:ed:b3:96:84:41:76:42:bb:a2:
7e:c0:42:58:8a:fc:82:73:6c:81:4c:81:cc:87:53:
d6:34:c8:a5:d6:e0:cd:8d:d8:23:54:32:d7:a9:45:
48:07:76:d8:43:4f:a2:97:11:a1:92:ca:bb:7b:78:
10:3f:5b:7a:97:12:d5:18:bb:bd:10:3f:b1:39:b1:
e4:24:d9:6c:bd:d4:df:4f:b7:0a:73:9f:14:3c:50:
1c:c0:28:fe:e9:90:47:14:fa:95:4c:fb:1b:6f:ae:
db:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:3C:69:5A:CA:B4:F4:15:8A:52:B3:DD:94:4F:91:EE:C9:5F:62:F1
X509v3 Authority Key Identifier:
keyid:D4:99:22:CA:8D:13:9A:4D:03:D6:D5:7C:BC:81:77:DC:05:FE:B9:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Jkiyo0Tmk0D1tV8vIF33AX-uew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/vTxpWsq09BWKUrPdlE-R7slfYvE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/1Jkiyo0Tmk0D1tV8vIF33AX-uew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.237.200.0/24
Signature Algorithm: sha256WithRSAEncryption
10:55:8d:c1:96:a4:62:40:79:39:74:c5:2f:21:7b:28:f0:61:
8c:7c:8a:1c:4a:f5:94:09:46:c1:2f:95:e5:91:50:91:4f:e7:
8d:22:e8:be:b4:d9:2d:a0:89:10:9f:e9:ca:cb:b8:d8:f0:dd:
3b:5f:5d:2f:cb:cb:03:67:fa:c2:f7:d2:67:49:99:fe:38:f2:
69:9c:2b:e5:30:61:17:09:8e:46:0f:ec:44:22:14:dd:55:d4:
31:b3:1d:11:71:95:92:19:f8:f7:dd:02:0b:e4:48:5d:b4:e2:
ba:12:c5:3f:18:ae:ba:bf:c4:5b:2d:e6:b3:db:c9:59:43:66:
93:48:4a:0c:74:13:26:a1:24:64:c1:d8:9c:a7:21:c6:23:a0:
ca:7a:56:9e:ef:2b:77:a1:1d:71:d6:89:d9:b7:77:24:28:84:
32:7a:ea:3b:94:84:68:1d:cd:67:ff:06:f3:99:a6:05:d4:b9:
f0:58:ee:ee:78:a1:04:3d:57:e6:9f:1d:56:96:91:74:32:27:
00:bb:7d:b8:78:b8:01:4d:ba:1b:cd:f6:62:5b:b2:5b:ea:74:
29:6b:1a:f5:b0:f8:7f:87:61:21:89:8d:a7:e0:3d:ec:a7:5a:
db:43:4e:79:de:d6:c4:56:a2:6a:cd:17:08:6e:28:92:55:59:
52:71:ef:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:43:30 2025 by rpki-client