Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/vETpBfzGZ2A9qggp19pQR6v65AI.roa
File: vETpBfzGZ2A9qggp19pQR6v65AI.roa (raw, json)
Hash identifier: MWAmQZD6Z+hwOEFYk1T/5hrtJgb9nFtjSEii5qrMkTY=
Subject key identifier: BC:44:E9:05:FC:C6:67:60:3D:AA:08:29:D7:DA:50:47:AB:FA:E4:02
Certificate issuer: /CN=bbffd123cb93e24e025f952842108402958d4a4c
Certificate serial: 0194B2E086860E560E61F220BDC7EBD04DA6
Authority key identifier: BB:FF:D1:23:CB:93:E2:4E:02:5F:95:28:42:10:84:02:95:8D:4A:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/vETpBfzGZ2A9qggp19pQR6v65AI.roa
Signing time: Wed 29 Jan 2025 16:24:06 +0000
ROA not before: Wed 29 Jan 2025 16:24:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15830
IP address blocks: 147.75.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b2:e0:86:86:0e:56:0e:61:f2:20:bd:c7:eb:d0:4d:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbffd123cb93e24e025f952842108402958d4a4c
Validity
Not Before: Jan 29 16:24:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc44e905fcc667603daa0829d7da5047abfae402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:14:f5:18:43:ae:54:85:38:0e:77:be:93:0d:
2d:b1:e5:df:a6:59:48:2b:23:8b:04:72:85:54:b5:
7e:52:13:25:c9:11:72:55:78:3f:33:01:e8:51:a5:
8a:bf:55:73:8c:f2:71:0e:62:fe:3c:bb:4c:01:ee:
eb:dc:37:27:ce:d7:1e:b2:81:a6:6c:81:43:30:03:
e5:1c:c7:05:ac:6e:4c:7f:39:6b:45:53:10:1c:7e:
26:d9:4e:6f:0d:df:16:83:db:b0:d8:09:69:17:72:
9d:99:6e:62:4a:12:b8:e9:cf:6c:17:b3:dc:2d:5f:
c1:2d:f5:3e:27:22:c9:89:60:aa:8a:ee:58:a9:ad:
1e:cd:2d:33:c9:5f:0d:6e:5a:71:5e:d7:16:89:ed:
c3:92:a6:01:7a:90:42:dc:3b:7a:9e:e7:8e:00:65:
eb:ba:29:bd:4c:15:c2:71:35:05:1b:38:7c:a2:d0:
86:6a:85:15:8b:b9:2f:8c:0c:47:a4:ae:7f:35:30:
cd:ea:15:06:a0:d8:e3:54:c8:68:0d:32:93:97:17:
23:fe:66:21:90:73:09:75:61:9b:ec:cb:c0:7d:c9:
39:b6:01:37:17:4d:d6:51:fc:90:5d:43:cf:8b:bb:
43:d4:d8:ab:4a:43:3e:e7:c9:f0:66:3f:9e:88:9f:
85:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:44:E9:05:FC:C6:67:60:3D:AA:08:29:D7:DA:50:47:AB:FA:E4:02
X509v3 Authority Key Identifier:
keyid:BB:FF:D1:23:CB:93:E2:4E:02:5F:95:28:42:10:84:02:95:8D:4A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/vETpBfzGZ2A9qggp19pQR6v65AI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.75.206.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:91:fb:0c:51:ef:c4:bf:b6:1e:ee:54:19:51:57:96:99:83:
dc:23:1b:ab:f6:6d:7b:b3:75:d4:aa:fc:94:17:b2:0f:09:a5:
45:df:57:3a:c3:ea:f1:20:05:c6:2f:d3:d0:c5:96:56:91:aa:
b9:7e:f1:84:9b:36:ce:12:21:d7:f4:7f:68:9e:f1:f0:a2:bc:
0c:33:a0:35:63:f4:9b:e6:5c:13:4d:b6:6a:c3:72:9e:ab:a6:
aa:64:df:d9:1a:cc:99:6d:3c:8a:a9:a4:49:14:54:a5:4d:99:
63:f5:38:27:77:db:d9:ec:ae:2e:ee:a6:35:17:87:67:9f:aa:
76:bd:3f:d1:1f:39:1a:0b:bd:74:1d:90:a9:9b:b3:22:8c:f8:
96:f7:a4:5b:cb:58:7c:ec:9a:31:0e:58:62:1f:a1:06:1d:54:
49:fb:5c:cc:32:98:e2:cc:30:b2:80:3d:20:5d:13:eb:ed:0b:
f9:dc:99:21:78:bc:82:91:d4:b2:2e:c6:f0:13:81:9c:ad:5f:
69:7d:dd:4e:f2:3f:27:54:93:a9:65:a8:3e:26:a0:1e:81:e6:
34:19:73:37:9f:32:49:c5:da:1d:f0:33:b0:3a:f1:35:d7:0e:
25:29:85:b0:6d:67:6b:23:44:aa:1a:a2:3f:03:f8:90:2a:76:
cf:50:73:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:15:48 2025 by rpki-client