Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/ba1987-522e-498c-a359-76a0f7b841dc/1/VLvU695jlmxr_Aa_-diXqvNVQGY.roa
File: VLvU695jlmxr_Aa_-diXqvNVQGY.roa (raw, json)
Hash identifier: /bKiG14xP3FUaKqcC1XqqIaBQA/QOWOmJHyp9J37dmY=
Subject key identifier: 54:BB:D4:EB:DE:63:96:6C:6B:FC:06:BF:F9:D8:97:AA:F3:55:40:66
Certificate issuer: /CN=2d634fb681802144f064c1b19f11f6aae7596dcf
Certificate serial: 019425FD36A780E6E8BBEC289A9A025AF602
Authority key identifier: 2D:63:4F:B6:81:80:21:44:F0:64:C1:B1:9F:11:F6:AA:E7:59:6D:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LWNPtoGAIUTwZMGxnxH2qudZbc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/ba1987-522e-498c-a359-76a0f7b841dc/1/VLvU695jlmxr_Aa_-diXqvNVQGY.roa
Signing time: Thu 02 Jan 2025 07:48:59 +0000
ROA not before: Thu 02 Jan 2025 07:48:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203358
IP address blocks: 185.253.59.0/24 maxlen: 24
2a12:c140::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:36:a7:80:e6:e8:bb:ec:28:9a:9a:02:5a:f6:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d634fb681802144f064c1b19f11f6aae7596dcf
Validity
Not Before: Jan 2 07:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=54bbd4ebde63966c6bfc06bff9d897aaf3554066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b1:26:c9:8e:14:b5:bb:63:99:30:a0:63:33:
ff:96:e9:76:7f:74:7a:9d:d6:c1:c2:5b:d9:f3:31:
25:0d:c6:05:ea:60:eb:2f:93:52:9a:3c:93:99:8e:
76:ac:7f:e0:2a:f4:74:df:33:b7:0e:3a:45:c9:88:
48:60:d7:a2:5c:79:ec:27:8a:06:02:17:91:80:0c:
a4:b3:78:e8:87:96:cb:82:21:4e:32:79:bd:ae:3b:
82:6c:14:21:60:8c:03:68:b1:0d:94:d6:5b:a8:f9:
b8:3d:3e:c8:6f:f4:d3:8f:71:62:b7:92:16:09:b7:
eb:27:5a:e1:d0:f5:88:67:bb:34:ca:0d:03:bb:7e:
ba:9b:9e:33:6f:08:b8:14:1c:db:57:cd:e7:42:dc:
22:12:31:15:9b:f6:78:c9:63:8c:87:76:38:21:c1:
b5:62:4c:29:b7:58:27:01:33:ce:07:c4:f1:a3:c9:
75:4c:3c:93:55:38:9d:c8:8a:bd:2c:2f:c3:b4:c9:
4f:68:1a:0f:1e:b3:ac:16:b4:38:03:8f:ed:2c:0e:
5e:ac:18:4d:9c:79:5e:42:1c:8b:0f:fb:01:7d:0c:
59:76:03:d1:43:91:c4:6f:51:1a:8b:d8:12:7f:64:
1f:db:78:f1:0b:61:82:40:0f:f6:4e:05:d1:d5:3e:
8c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:BB:D4:EB:DE:63:96:6C:6B:FC:06:BF:F9:D8:97:AA:F3:55:40:66
X509v3 Authority Key Identifier:
keyid:2D:63:4F:B6:81:80:21:44:F0:64:C1:B1:9F:11:F6:AA:E7:59:6D:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWNPtoGAIUTwZMGxnxH2qudZbc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ba1987-522e-498c-a359-76a0f7b841dc/1/VLvU695jlmxr_Aa_-diXqvNVQGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ba1987-522e-498c-a359-76a0f7b841dc/1/LWNPtoGAIUTwZMGxnxH2qudZbc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.59.0/24
IPv6:
2a12:c140::/29
Signature Algorithm: sha256WithRSAEncryption
02:e9:e8:28:8d:dd:83:8f:28:20:cf:c4:e1:c9:82:c9:74:63:
f6:19:8d:b2:da:bc:81:d3:b4:71:52:10:f4:85:ed:bf:e5:cc:
56:24:3d:d9:0f:42:a2:49:9a:73:ea:96:37:c1:4f:79:1f:b2:
3d:6f:72:cf:03:7b:ce:bf:86:4a:0b:0f:5e:45:dd:fa:31:4f:
fe:a8:5b:e0:4a:78:e2:23:9c:2c:8f:3e:67:82:56:57:b1:1e:
ec:0b:39:06:e0:8b:3b:f4:8b:42:95:5d:fc:2b:5d:22:72:88:
4c:16:5b:a7:6c:80:51:47:32:89:57:13:86:66:fd:30:a2:02:
34:a4:0b:7f:3e:c8:26:13:46:fe:0e:6d:d9:c6:08:cc:85:08:
de:a9:24:8f:3e:2f:de:fd:d4:03:16:9c:3b:f8:71:41:e7:ec:
05:12:ad:c5:b3:7b:c3:68:b6:4c:ae:ea:2f:39:b9:b0:26:8a:
17:af:86:c8:ed:98:bf:ef:27:c4:67:da:e2:cf:55:98:9b:3a:
36:00:3a:70:f0:05:cf:8b:d4:17:08:46:83:c0:60:2b:f4:2d:
8a:86:d4:b3:59:fe:e3:5e:53:c3:c0:9c:1d:47:0a:c2:2a:ed:
24:6a:8e:bf:d1:9c:08:0c:a5:0a:26:0c:99:81:73:01:c7:6c:
61:6a:70:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:36:16 2025 by rpki-client