Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/vBX5hh9jIQFLXk1AFr7Iw7Y-XTE.roa
File: vBX5hh9jIQFLXk1AFr7Iw7Y-XTE.roa (raw, json)
Hash identifier: AhPFv/8nWSRXANQRSY1wzdZ4XMNkwwYufrm8inXx3Rg=
Subject key identifier: BC:15:F9:86:1F:63:21:01:4B:5E:4D:40:16:BE:C8:C3:B6:3E:5D:31
Certificate issuer: /CN=852dc0d0998b8126babb9775ab40c162ef96fa2d
Certificate serial: 0194228E1597AB355394AA17F160A64405D5
Authority key identifier: 85:2D:C0:D0:99:8B:81:26:BA:BB:97:75:AB:40:C1:62:EF:96:FA:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hS3A0JmLgSa6u5d1q0DBYu-W-i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/vBX5hh9jIQFLXk1AFr7Iw7Y-XTE.roa
Signing time: Wed 01 Jan 2025 15:48:44 +0000
ROA not before: Wed 01 Jan 2025 15:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59662
IP address blocks: 185.81.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:15:97:ab:35:53:94:aa:17:f1:60:a6:44:05:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=852dc0d0998b8126babb9775ab40c162ef96fa2d
Validity
Not Before: Jan 1 15:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc15f9861f6321014b5e4d4016bec8c3b63e5d31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ae:87:ce:98:e9:e9:99:16:b4:70:46:ff:50:
7b:56:b2:44:9b:65:8b:4e:b8:38:d9:5b:af:bb:f3:
ee:52:29:5c:91:6b:8e:01:b8:87:f5:62:55:f0:31:
f7:18:47:aa:8d:20:37:c4:0e:b4:9f:6b:11:7e:df:
0a:ae:fe:96:7d:48:dd:09:19:c5:42:af:d3:5f:89:
58:63:c5:03:13:5f:d5:06:51:35:a4:d3:76:f0:9d:
5f:7f:fa:1f:dc:47:a5:15:fa:e0:5b:3f:64:76:de:
73:01:66:85:01:ff:12:25:ac:1c:e8:27:49:89:bc:
af:dc:d0:95:d3:06:8c:85:26:e8:be:0d:1d:b3:b7:
f2:2d:da:ab:63:a8:bb:24:45:35:1e:3c:7b:ec:6f:
c0:9f:a4:8e:df:88:06:b8:4f:dd:37:6e:16:1f:0e:
88:c9:d2:7a:03:db:e2:57:08:6e:6c:ca:3c:8b:2d:
17:c5:11:bd:dc:14:a6:e6:6f:d5:df:b0:4c:f7:ac:
5e:d9:b1:09:ba:ad:21:2a:a1:b9:02:e0:f7:e8:a7:
66:46:db:ad:e9:96:9d:59:28:00:19:d3:09:1f:e6:
a3:8f:43:f1:51:c9:4f:71:f3:36:95:59:05:ec:30:
42:5d:73:33:bd:48:59:bc:c2:0f:44:b3:3b:ae:4d:
dc:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:15:F9:86:1F:63:21:01:4B:5E:4D:40:16:BE:C8:C3:B6:3E:5D:31
X509v3 Authority Key Identifier:
keyid:85:2D:C0:D0:99:8B:81:26:BA:BB:97:75:AB:40:C1:62:EF:96:FA:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hS3A0JmLgSa6u5d1q0DBYu-W-i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/vBX5hh9jIQFLXk1AFr7Iw7Y-XTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.103.0/24
Signature Algorithm: sha256WithRSAEncryption
79:99:0c:60:23:6d:36:ff:95:7e:47:95:c1:ea:16:e7:6e:db:
ed:e1:91:30:07:58:1a:fd:2f:6b:99:1a:07:83:6a:e8:4c:78:
fb:8b:68:e0:c3:ce:7e:e6:23:d0:68:e6:5f:e8:1b:de:ab:77:
78:33:f2:23:18:f7:48:2d:45:15:d4:3b:01:68:d2:75:3c:34:
5a:da:a0:34:a3:e9:a3:e5:c0:53:b3:8d:d3:38:42:22:fc:b9:
f3:20:bf:36:ed:80:71:c1:25:fa:32:69:02:95:b2:83:ca:f6:
a0:4b:bd:c5:e2:82:3d:68:2d:4e:9b:91:29:dc:7b:9e:a1:82:
14:93:92:b5:cc:0e:82:05:b1:ce:be:aa:78:73:3f:69:8d:06:
c1:13:5b:a2:ae:0d:0b:5f:87:4a:28:86:43:7e:a3:ef:d5:3d:
41:ab:9e:e3:ee:83:9b:bd:2f:8a:bb:60:8d:e1:73:62:a7:02:
d1:54:44:3d:d5:f3:a2:b3:38:e3:b0:fa:3d:ab:c4:84:6e:12:
07:22:e7:15:33:cd:1d:d6:b3:9b:3c:74:31:c3:b3:16:73:7e:
22:fe:91:b8:3b:25:17:9b:09:ba:29:0f:8a:2c:bd:3c:69:d0:
e0:19:c8:f5:57:da:97:55:e6:b4:64:1f:7f:76:95:f8:37:9b:
58:08:a5:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:29:45 2025 by rpki-client