Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/c75f12-97a4-4d9e-9978-b1822755f712/1/vCN5n7XgRlbJNVyUvtiVehd0W-c.roa
File: vCN5n7XgRlbJNVyUvtiVehd0W-c.roa (raw, json)
Hash identifier: doLyWpoVrhe1vhRGrAeN+5Um0tW+zvGku8pJrn/YoG0=
Subject key identifier: BC:23:79:9F:B5:E0:46:56:C9:35:5C:94:BE:D8:95:7A:17:74:5B:E7
Certificate issuer: /CN=ce22dd19725b6a59e79f0ff39789a5658e4a5fdd
Certificate serial: 0194258EF237451CCABAE4D7B5FF4314215E
Authority key identifier: CE:22:DD:19:72:5B:6A:59:E7:9F:0F:F3:97:89:A5:65:8E:4A:5F:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ziLdGXJbalnnnw_zl4mlZY5KX90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/c75f12-97a4-4d9e-9978-b1822755f712/1/vCN5n7XgRlbJNVyUvtiVehd0W-c.roa
Signing time: Thu 02 Jan 2025 05:48:32 +0000
ROA not before: Thu 02 Jan 2025 05:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56395
IP address blocks: 185.215.120.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:f2:37:45:1c:ca:ba:e4:d7:b5:ff:43:14:21:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce22dd19725b6a59e79f0ff39789a5658e4a5fdd
Validity
Not Before: Jan 2 05:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc23799fb5e04656c9355c94bed8957a17745be7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:25:74:4e:43:ba:06:e5:b6:bd:8d:68:6d:20:
dd:4f:a8:49:2c:2a:ea:c7:ef:c1:e8:bd:07:0c:2f:
1c:08:57:d2:24:83:58:50:c8:e7:92:78:c8:69:16:
55:b5:cf:53:aa:78:2d:ff:0f:05:f1:43:dd:ff:b6:
5a:b1:c2:91:88:77:0d:a2:da:1b:e2:15:27:c4:01:
b0:ce:be:58:70:a8:42:28:6b:5c:77:0a:f1:7d:34:
b4:a1:f5:db:53:87:8c:87:26:80:6a:35:03:88:56:
a2:39:ac:f6:aa:ae:57:3c:3d:30:f9:3f:8f:6b:54:
25:a7:df:03:36:b0:22:ba:18:bb:bc:05:55:4b:b9:
eb:84:9f:87:78:04:5d:18:c5:dd:3e:f3:21:67:48:
36:f2:14:1d:29:29:25:6f:29:b7:c9:c1:8f:04:aa:
d1:f7:8b:0c:f8:4f:99:21:0c:17:fd:ae:f0:d9:36:
03:04:f1:75:cf:11:bc:27:74:a4:fc:1e:65:19:76:
07:89:dd:38:82:ea:22:fa:05:bc:6c:e6:23:bc:5c:
76:46:95:64:6b:58:a1:ac:ec:ee:2e:c5:22:70:a9:
62:ab:86:da:d4:e6:e3:d7:9a:67:df:e5:4d:16:e6:
97:f6:1a:8c:5e:cb:f0:76:22:19:e2:cb:44:de:c8:
80:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:23:79:9F:B5:E0:46:56:C9:35:5C:94:BE:D8:95:7A:17:74:5B:E7
X509v3 Authority Key Identifier:
keyid:CE:22:DD:19:72:5B:6A:59:E7:9F:0F:F3:97:89:A5:65:8E:4A:5F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ziLdGXJbalnnnw_zl4mlZY5KX90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c75f12-97a4-4d9e-9978-b1822755f712/1/vCN5n7XgRlbJNVyUvtiVehd0W-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c75f12-97a4-4d9e-9978-b1822755f712/1/ziLdGXJbalnnnw_zl4mlZY5KX90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.215.120.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:a4:39:24:93:35:63:b1:4b:46:27:cb:5e:b4:33:29:f1:8e:
26:00:92:83:db:01:0c:41:e1:8c:1f:d9:fe:b4:d3:08:f0:60:
db:51:f9:7d:e5:ec:5f:a1:13:d9:5b:1d:ef:4a:10:54:80:87:
5f:23:e4:35:f5:a9:75:4e:d8:3d:c3:7f:fd:83:c0:20:7f:b6:
37:98:6d:c0:2d:68:9e:c9:80:27:8c:9a:25:5e:7f:7a:06:62:
fb:1b:84:8d:1c:bc:cb:05:5f:cf:e6:a7:75:7e:82:eb:5b:53:
db:e0:2b:31:18:54:c7:48:99:4c:fc:73:62:3c:54:b4:4d:55:
ad:fc:49:4a:11:7d:72:cc:41:53:4f:7c:33:b9:df:f3:dd:60:
6d:74:2c:02:46:4d:1f:15:e6:64:69:48:a0:13:c6:e1:70:b7:
c7:dd:67:33:0c:da:a1:ba:9f:40:07:99:e9:63:2a:13:80:36:
72:1d:62:87:45:1e:87:8e:67:5c:38:6e:07:11:ba:1c:fd:c8:
48:5f:4c:c7:1f:78:dc:25:0d:ce:0b:15:81:7c:85:ce:80:02:
ad:bf:d2:5b:fb:b8:21:e7:1b:2b:df:90:ab:d3:31:5d:83:4c:
41:6d:41:5a:ef:ad:fa:dd:34:8a:64:b2:b1:30:92:d4:ae:fd:
09:59:d2:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:36:30 2025 by rpki-client