Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/vpqI0SPiMCscv2APIfDksYTh41I.roa
File: vpqI0SPiMCscv2APIfDksYTh41I.roa (raw, json)
Hash identifier: hkscOp/XUtYy+TgoXBDOQozFrFzTsJ23rQpXU2E0uBw=
Subject key identifier: BE:9A:88:D1:23:E2:30:2B:1C:BF:60:0F:21:F0:E4:B1:84:E1:E3:52
Certificate issuer: /CN=7139bc5cef3aeadf32613f7d959ec8e40a742918
Certificate serial: 01942144521CC1A2A67CC8B137A509EAF5CB
Authority key identifier: 71:39:BC:5C:EF:3A:EA:DF:32:61:3F:7D:95:9E:C8:E4:0A:74:29:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTm8XO866t8yYT99lZ7I5Ap0KRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/vpqI0SPiMCscv2APIfDksYTh41I.roa
Signing time: Wed 01 Jan 2025 09:48:33 +0000
ROA not before: Wed 01 Jan 2025 09:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211450
IP address blocks: 193.36.90.0/24 maxlen: 24
2a10:e340::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:52:1c:c1:a2:a6:7c:c8:b1:37:a5:09:ea:f5:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7139bc5cef3aeadf32613f7d959ec8e40a742918
Validity
Not Before: Jan 1 09:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=be9a88d123e2302b1cbf600f21f0e4b184e1e352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:36:7a:75:eb:78:bd:5e:98:bf:cd:bf:4e:72:
79:a1:db:a2:00:5c:0e:a4:de:cd:e6:87:42:e3:f3:
f1:e3:31:2c:28:15:81:9f:11:54:13:42:03:38:40:
7f:1d:c7:e2:10:60:f0:b1:da:b8:60:20:d1:5e:b8:
b5:ab:d0:23:19:65:54:f4:f7:2d:4b:45:e5:4e:f3:
9a:c6:b1:94:24:1c:b7:f6:a2:04:ef:7b:f3:aa:28:
aa:11:92:55:6f:cc:a2:e1:fe:07:f2:4c:d6:7b:dc:
50:1b:05:67:42:13:ad:51:ae:b0:e2:62:bc:d1:13:
9a:b2:74:f9:1b:f0:3b:26:e5:92:ce:1e:46:42:4d:
64:0d:f5:64:fe:90:3a:bb:d0:41:be:4b:77:95:27:
56:9b:9f:d2:8d:52:4b:06:07:56:0a:a0:48:18:48:
3b:9a:20:f1:cd:64:46:b7:7e:56:d1:53:12:4e:68:
eb:59:44:c8:e9:da:8d:58:7a:7d:4d:11:c4:1f:4e:
be:e4:e6:88:ea:8c:32:19:8f:17:66:72:ec:41:a8:
3b:5c:a7:0e:27:72:01:5f:ca:5d:64:bb:14:57:68:
e8:28:a4:bb:f6:4f:09:63:6f:b5:e6:99:24:0f:7f:
5c:aa:f6:82:06:e9:0d:d5:30:5b:fd:4b:60:a5:76:
f6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:9A:88:D1:23:E2:30:2B:1C:BF:60:0F:21:F0:E4:B1:84:E1:E3:52
X509v3 Authority Key Identifier:
keyid:71:39:BC:5C:EF:3A:EA:DF:32:61:3F:7D:95:9E:C8:E4:0A:74:29:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTm8XO866t8yYT99lZ7I5Ap0KRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/vpqI0SPiMCscv2APIfDksYTh41I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.90.0/24
IPv6:
2a10:e340::/32
Signature Algorithm: sha256WithRSAEncryption
9f:fa:d5:74:a5:95:d2:6e:52:17:46:34:c4:c5:38:59:30:7e:
5b:54:3a:05:86:26:c7:18:ad:f6:c9:e2:16:bf:fd:ce:c1:40:
71:3b:ae:ad:85:72:76:d8:c6:49:1d:30:d1:5d:2d:cc:da:9a:
30:1b:8a:fa:77:43:3d:08:f1:7a:be:a9:ce:06:e5:f4:0e:85:
ea:b4:89:31:7b:c9:63:96:bd:59:41:8b:8d:57:a7:81:85:b2:
5f:0e:35:99:50:7e:38:63:68:cb:38:26:4c:c1:b4:64:3e:a9:
2b:dc:17:1e:92:5b:ae:69:58:ae:aa:b4:23:a1:5a:c2:58:a2:
84:1c:44:06:31:72:4d:f3:86:6e:22:92:01:62:09:12:80:4c:
3c:b4:c4:0e:62:eb:44:35:ba:f9:cf:b2:b0:58:88:a5:3c:87:
7d:ca:86:22:11:7a:d1:17:39:32:a2:a5:bb:c8:a6:81:da:95:
50:c3:a3:b4:b8:3a:11:ed:27:95:22:53:63:98:3d:94:aa:b1:
d5:19:ca:87:52:ae:48:9b:1a:91:2c:46:7d:ba:16:ff:93:42:
74:56:8a:35:be:03:2e:78:79:3e:3e:54:e2:b1:27:de:bd:52:
25:f2:43:ec:c7:d1:be:b5:de:98:f7:dc:66:ab:94:3f:1b:88:
3f:87:c5:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:09:49 2025 by rpki-client