Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/VXGu7cRy3TUPyfgbIf2vopAF1Lc.roa
File: VXGu7cRy3TUPyfgbIf2vopAF1Lc.roa (raw, json)
Hash identifier: 40vRMPsPFPCFnDUP/ikEgH9v+gi1iVOQkLoxtLSkOqE=
Subject key identifier: 55:71:AE:ED:C4:72:DD:35:0F:C9:F8:1B:21:FD:AF:A2:90:05:D4:B7
Certificate issuer: /CN=dc5c532f3cd5e11e19feb19655d4f19926f02020
Certificate serial: 0194221F3F6FB6F0846094638EA1BF31CE8A
Authority key identifier: DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/VXGu7cRy3TUPyfgbIf2vopAF1Lc.roa
Signing time: Wed 01 Jan 2025 13:47:40 +0000
ROA not before: Wed 01 Jan 2025 13:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212293
IP address blocks: 213.202.85.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:3f:6f:b6:f0:84:60:94:63:8e:a1:bf:31:ce:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc5c532f3cd5e11e19feb19655d4f19926f02020
Validity
Not Before: Jan 1 13:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5571aeedc472dd350fc9f81b21fdafa29005d4b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c0:a1:72:6e:e4:82:5b:88:e6:e8:e4:1c:af:
61:02:d5:fb:b9:f5:a1:95:d6:0d:59:bc:5b:48:f0:
7c:53:f8:84:72:24:c1:d3:ed:f9:89:1a:0b:08:bb:
0e:33:3d:fe:fb:92:db:ed:e6:47:0d:e9:2b:38:12:
ad:c2:5f:31:aa:4e:17:49:6e:2f:65:f0:82:9f:bb:
ba:f4:26:9a:c3:04:57:e9:d0:f3:07:43:aa:af:8f:
bb:8e:6d:41:fd:3f:8c:40:7f:d4:fe:59:68:6e:94:
40:3e:81:c9:6e:f9:af:b4:08:33:12:3a:9d:6f:7b:
c8:d5:4e:55:2d:ff:8f:da:a7:27:28:ca:a0:0a:eb:
c6:ff:da:82:85:67:2d:f0:df:04:4c:1d:41:dc:76:
c2:d4:15:65:2d:51:f2:1c:03:c9:a2:e9:ef:62:ad:
b8:06:c9:fd:6f:77:b2:5e:ed:14:62:67:ef:47:1c:
b9:56:b8:71:3c:6a:53:6c:0e:97:61:a2:07:09:e3:
54:0d:be:8a:bd:73:83:15:77:58:bd:5d:bb:bf:8f:
bf:e4:ba:94:08:62:7a:ca:b6:71:7f:78:db:bb:c0:
55:08:79:be:5c:84:df:a0:2a:29:02:e2:d3:f8:0f:
ef:20:02:89:c3:56:80:07:ff:cd:d7:1c:aa:ed:fe:
11:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:71:AE:ED:C4:72:DD:35:0F:C9:F8:1B:21:FD:AF:A2:90:05:D4:B7
X509v3 Authority Key Identifier:
keyid:DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/VXGu7cRy3TUPyfgbIf2vopAF1Lc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.202.85.0/24
Signature Algorithm: sha256WithRSAEncryption
51:a3:85:28:2c:a3:c5:d9:6c:54:e3:f4:6e:ae:89:13:7d:36:
79:e9:33:60:cc:ab:85:73:82:c6:af:b4:9d:68:4d:a6:16:34:
e2:19:71:ea:ac:e6:52:9c:a4:71:2c:ba:42:16:4b:05:08:30:
e7:e6:ff:f2:59:52:53:53:c6:56:dc:36:88:5a:0b:b7:43:0c:
73:03:27:b3:3f:0b:aa:65:cf:38:71:7e:39:2d:cc:a8:25:b4:
21:d5:71:f9:9c:93:08:02:ce:f2:f3:57:cb:d3:18:ea:d3:fc:
08:21:f3:61:be:0a:e1:5e:fb:9e:5d:58:b9:5d:5e:ef:84:df:
87:dc:b2:ce:51:9a:4d:c8:23:1e:0c:b3:85:5e:d5:7e:ba:60:
8b:20:b5:6e:ef:da:b8:97:61:9c:5b:50:64:cb:23:a2:4d:bb:
0a:2a:0b:3e:fc:15:a8:05:c7:c5:28:18:a0:2d:3a:51:af:3a:
b9:6a:36:6a:1c:fa:92:f0:53:0e:2a:49:fd:0e:bf:cf:e4:95:
0e:61:f7:6b:61:f8:f0:f3:a4:86:0c:f2:5f:e7:96:c5:a3:83:
57:e6:8f:f5:02:fe:04:83:7f:a0:33:1d:15:92:3b:8a:dd:30:
e2:c4:2f:94:82:79:5d:07:08:f2:f5:c2:98:b4:c0:5e:09:aa:
68:45:66:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:55:49 2025 by rpki-client