Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/Vfaw8xN07VrfwnKtMtQ_CewTKoI.roa
File: Vfaw8xN07VrfwnKtMtQ_CewTKoI.roa (raw, json)
Hash identifier: 2wr8T0grb9p6jSoZGL4iOk6puHmWjQj/8ATxJRocBJM=
Subject key identifier: 55:F6:B0:F3:13:74:ED:5A:DF:C2:72:AD:32:D4:3F:09:EC:13:2A:82
Certificate issuer: /CN=ed64691c31892cc991ad4e9a9671147759e417ab
Certificate serial: 0194236A16155FD1676D290BBB022E65A503
Authority key identifier: ED:64:69:1C:31:89:2C:C9:91:AD:4E:9A:96:71:14:77:59:E4:17:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7WRpHDGJLMmRrU6alnEUd1nkF6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/Vfaw8xN07VrfwnKtMtQ_CewTKoI.roa
Signing time: Wed 01 Jan 2025 19:49:02 +0000
ROA not before: Wed 01 Jan 2025 19:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34689
IP address blocks: 95.131.202.0/24 maxlen: 24
185.75.242.0/24 maxlen: 24
2a05:5502::/32 maxlen: 32
2a13:9401::/32 maxlen: 32
2a13:9402::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:16:15:5f:d1:67:6d:29:0b:bb:02:2e:65:a5:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed64691c31892cc991ad4e9a9671147759e417ab
Validity
Not Before: Jan 1 19:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=55f6b0f31374ed5adfc272ad32d43f09ec132a82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9b:36:84:13:30:bc:53:2d:fa:63:21:ca:8f:
e4:5d:73:e2:e5:bb:34:65:ad:56:7b:e8:5a:b7:f3:
ce:93:a1:12:a4:28:ca:10:39:66:48:bc:4f:e4:c5:
6d:3b:05:d3:76:af:d7:1d:9b:e1:f8:dc:b1:72:1a:
37:6f:7f:08:cb:52:0b:19:6b:36:cd:be:c3:9e:e9:
36:99:db:c5:ae:0f:37:9c:6d:5e:e1:51:c5:c4:46:
81:6f:01:37:c1:4f:02:19:70:6d:32:0e:6e:ba:aa:
5f:03:d0:01:41:4f:a1:8a:ee:cc:31:2d:5c:74:27:
71:db:25:dc:cf:0e:c9:ce:5f:e5:49:11:3b:60:4e:
c2:7d:39:71:5c:c1:d0:97:86:a3:d6:d9:9c:53:2e:
9c:6d:74:2e:d1:6f:43:f2:5c:fe:13:84:45:fa:f6:
6a:9e:9b:5a:44:28:fe:87:f5:e7:0a:49:34:a7:3f:
10:c6:d9:20:45:cd:45:c1:47:e2:37:60:e2:1a:d6:
d6:dc:3f:ac:1d:12:6a:02:a1:2f:11:e8:54:ff:06:
98:b3:4e:61:b5:44:c3:ea:55:54:d0:ea:22:01:db:
c8:f6:6f:7d:be:c9:62:0f:71:64:63:e9:00:02:ab:
98:c4:cb:ec:6e:d7:bd:6c:1b:ae:f8:65:43:1d:aa:
47:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:F6:B0:F3:13:74:ED:5A:DF:C2:72:AD:32:D4:3F:09:EC:13:2A:82
X509v3 Authority Key Identifier:
keyid:ED:64:69:1C:31:89:2C:C9:91:AD:4E:9A:96:71:14:77:59:E4:17:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7WRpHDGJLMmRrU6alnEUd1nkF6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/Vfaw8xN07VrfwnKtMtQ_CewTKoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/7WRpHDGJLMmRrU6alnEUd1nkF6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.131.202.0/24
185.75.242.0/24
IPv6:
2a05:5502::/32
2a13:9401::-2a13:9402:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
4d:3d:7d:b5:a8:f9:da:83:0d:c0:9f:0f:c7:12:31:b3:43:21:
0c:68:e7:70:96:b6:3f:e8:cb:5d:8f:d1:44:2c:97:32:d1:71:
ec:c7:94:e8:9f:d2:68:73:8f:cb:24:f6:18:39:79:56:34:8d:
25:fd:8c:41:a6:27:cd:ba:9e:33:4e:59:dc:d7:d1:cb:bc:d6:
c3:1c:a3:e2:12:03:09:b9:7b:e0:62:6c:2f:3b:ea:e8:ee:e7:
6a:36:71:d2:37:6f:25:ca:f0:9a:dd:bc:53:92:c3:c6:22:e5:
aa:b8:38:cc:ac:24:3e:e4:14:7c:b5:59:6e:8f:c6:c5:72:19:
56:5b:d8:5a:c4:9a:0c:67:27:b9:b4:4c:58:26:40:18:65:4d:
d4:2d:86:c7:30:9a:9b:ac:09:98:84:4b:61:66:96:f9:1e:c7:
6a:3c:86:d4:69:6d:8b:ec:18:50:0e:85:69:dd:7e:81:74:a5:
86:45:c3:68:68:17:d5:9f:89:6b:d8:1f:5e:60:fd:56:8a:35:
5b:63:f4:5f:ab:5c:96:81:90:a0:9d:8b:c8:04:75:80:fe:f2:
ab:fa:a9:a1:b1:21:e6:21:c6:58:e7:48:84:9f:e6:f9:61:45:
e7:07:cf:75:d0:02:07:fa:3d:5f:54:fa:42:8a:8a:e8:b9:12:
c0:5f:12:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:08:00 2025 by rpki-client