Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/rVUGBY7fSHRdgwiwSTJNMCcfyNQ.roa
File: rVUGBY7fSHRdgwiwSTJNMCcfyNQ.roa (raw, json)
Hash identifier: v4r5O9V3uCwthJQaW7p93eueHMwrwQPk1c2FCdhE7Iw=
Subject key identifier: AD:55:06:05:8E:DF:48:74:5D:83:08:B0:49:32:4D:30:27:1F:C8:D4
Certificate issuer: /CN=63fa5e2bec0a3ec795f8f19cd47fecc680678b08
Certificate serial: 01941F8C56F01E5FC9B32390FE08FBF1B6C8
Authority key identifier: 63:FA:5E:2B:EC:0A:3E:C7:95:F8:F1:9C:D4:7F:EC:C6:80:67:8B:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_peK-wKPseV-PGc1H_sxoBniwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/rVUGBY7fSHRdgwiwSTJNMCcfyNQ.roa
Signing time: Wed 01 Jan 2025 01:47:58 +0000
ROA not before: Wed 01 Jan 2025 01:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203416
IP address blocks: 185.227.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:56:f0:1e:5f:c9:b3:23:90:fe:08:fb:f1:b6:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63fa5e2bec0a3ec795f8f19cd47fecc680678b08
Validity
Not Before: Jan 1 01:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ad5506058edf48745d8308b049324d30271fc8d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ab:2e:2c:5c:2e:b9:53:09:56:b1:88:aa:c4:
7c:da:f3:26:0e:40:e7:02:f9:9a:4e:5f:0c:48:2f:
3d:a0:be:03:25:00:87:a6:e6:cd:4f:60:d9:cd:a0:
42:df:58:b9:89:c9:07:7d:ab:bf:58:44:6a:d3:e9:
1e:f7:59:a7:73:57:74:0a:a4:7a:e7:a9:11:df:3e:
99:a1:7f:1b:37:d3:cf:45:6d:6d:39:54:74:df:ae:
af:a5:cc:9a:11:31:2e:ae:4b:04:94:9c:3b:d2:33:
16:5b:b2:a9:20:a8:16:62:45:ab:f0:b0:bb:11:cd:
3c:bd:4d:2e:6e:5b:4c:43:ca:0e:28:73:2f:07:8f:
15:2a:c2:9f:cf:45:27:07:66:ef:37:ef:77:97:45:
a7:70:4d:87:53:8b:49:a0:c9:ce:a9:fd:e6:ac:00:
29:e9:de:ce:57:04:b0:52:68:b4:e4:2c:26:d9:40:
64:d9:9a:40:52:8f:98:ba:9d:58:c7:e9:ab:d5:0f:
22:89:c0:38:76:6b:fe:30:d3:1b:ae:bb:1f:fb:36:
eb:35:a5:d3:24:10:34:68:b9:4d:dd:94:12:3b:46:
23:87:1f:57:d9:ca:38:23:d8:c2:dc:99:d0:a1:3a:
08:3d:f0:f4:81:b2:5e:96:cb:ca:27:72:02:0a:89:
8c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:55:06:05:8E:DF:48:74:5D:83:08:B0:49:32:4D:30:27:1F:C8:D4
X509v3 Authority Key Identifier:
keyid:63:FA:5E:2B:EC:0A:3E:C7:95:F8:F1:9C:D4:7F:EC:C6:80:67:8B:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_peK-wKPseV-PGc1H_sxoBniwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/rVUGBY7fSHRdgwiwSTJNMCcfyNQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.227.4.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:d6:b5:fb:12:5b:73:de:d8:41:e8:31:c0:97:72:f9:97:de:
79:17:90:68:cf:bd:81:57:0c:66:65:3a:76:70:45:f4:4c:ba:
6d:24:c0:97:62:93:01:bf:3c:aa:4b:e7:4d:d4:c6:b8:0e:93:
36:2e:2a:2e:a5:88:7a:3f:78:21:0f:52:54:a1:ac:e2:aa:93:
18:95:92:2f:46:9c:26:b9:b4:49:20:76:87:b8:b5:5e:cf:bd:
48:b4:b6:ee:a0:9d:ec:d5:85:4b:fd:3d:29:b8:4f:a7:e4:4d:
55:0f:31:be:5f:27:9e:25:0d:f7:0e:c2:67:6f:3f:6a:ca:fc:
e5:87:b0:22:95:d0:8c:36:32:75:b6:40:29:06:cc:30:ff:c1:
67:7f:e8:05:1e:a7:2a:6f:01:f4:26:d4:24:ad:c2:95:e5:b3:
61:e8:cc:b9:e5:10:3f:d0:d6:48:0f:e6:c2:c6:b4:fb:06:2a:
67:a6:e5:bc:15:fc:45:41:57:48:67:2d:c2:84:4b:08:3b:9e:
86:03:19:08:0f:fa:4d:9a:d3:92:66:e1:cf:3d:0c:eb:1d:31:
01:16:0a:96:93:3d:1e:a4:62:54:9a:f9:a7:62:1f:ad:6e:83:
37:2f:c5:65:b4:a2:0b:17:b1:ee:60:11:3b:34:ca:0d:d0:b7:
fe:29:3a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:47:21 2025 by rpki-client