Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/vzUoCVHRR9ZHE2kigNi06PdimLU.roa
File: vzUoCVHRR9ZHE2kigNi06PdimLU.roa (raw, json)
Hash identifier: a4CslL3J1RRiTZFOjWgZdX3HIAOzGd5qiCR9i0+UhrY=
Subject key identifier: BF:35:28:09:51:D1:47:D6:47:13:69:22:80:D8:B4:E8:F7:62:98:B5
Certificate issuer: /CN=9eee4669fc08a4d4337509110613862b314f1ac7
Certificate serial: 019427B3727D3585774C3D24ACFCBB88D0E8
Authority key identifier: 9E:EE:46:69:FC:08:A4:D4:33:75:09:11:06:13:86:2B:31:4F:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nu5GafwIpNQzdQkRBhOGKzFPGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/vzUoCVHRR9ZHE2kigNi06PdimLU.roa
Signing time: Thu 02 Jan 2025 15:47:39 +0000
ROA not before: Thu 02 Jan 2025 15:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60475
IP address blocks: 37.202.16.0/21 maxlen: 21
45.10.84.0/22 maxlen: 22
185.241.200.0/22 maxlen: 22
2a02:ff00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:72:7d:35:85:77:4c:3d:24:ac:fc:bb:88:d0:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eee4669fc08a4d4337509110613862b314f1ac7
Validity
Not Before: Jan 2 15:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bf35280951d147d64713692280d8b4e8f76298b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2c:24:79:a6:36:ae:d1:5b:c0:45:c0:ec:91:
70:7a:e2:ad:13:7d:b4:9a:58:32:c1:36:e7:32:84:
7d:04:06:7f:71:a0:68:77:d7:5a:51:87:55:0c:85:
96:f8:78:26:59:8a:0c:4c:1c:6b:7b:a1:91:08:63:
58:c4:ca:33:7e:77:b7:05:6e:c3:e4:fb:50:d4:8e:
5a:f7:2c:99:2b:d6:4c:b9:8d:af:40:0d:50:b0:83:
3c:25:e1:96:d6:dc:de:f7:69:f2:dd:47:8a:7c:f0:
82:5a:1b:62:9c:1c:61:ce:1b:77:ac:ef:7f:02:24:
a7:41:cd:2a:86:b9:ef:53:0c:ee:a9:72:ab:08:a8:
dd:a9:c0:75:62:6e:57:d6:63:1f:91:bf:11:7f:85:
69:36:47:94:23:0f:b4:6e:5b:72:6f:11:c0:2f:8b:
d6:0d:ab:22:a8:53:cd:c9:33:7e:28:a6:63:ff:bd:
35:e0:8b:c2:f6:be:b5:4d:7f:65:b6:18:75:3c:34:
7f:99:a7:41:da:85:8e:d1:bd:50:ca:bb:38:fe:92:
d7:69:1b:07:7b:9c:19:e7:a9:8d:24:a4:56:5b:a9:
e3:76:3f:46:7c:6a:b2:1c:47:d0:6d:94:c9:09:92:
f6:b9:5c:ce:b1:0e:6b:61:3f:86:a6:51:db:76:8d:
00:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:35:28:09:51:D1:47:D6:47:13:69:22:80:D8:B4:E8:F7:62:98:B5
X509v3 Authority Key Identifier:
keyid:9E:EE:46:69:FC:08:A4:D4:33:75:09:11:06:13:86:2B:31:4F:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nu5GafwIpNQzdQkRBhOGKzFPGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/vzUoCVHRR9ZHE2kigNi06PdimLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/nu5GafwIpNQzdQkRBhOGKzFPGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.16.0/21
45.10.84.0/22
185.241.200.0/22
IPv6:
2a02:ff00::/29
Signature Algorithm: sha256WithRSAEncryption
81:2c:3d:9f:69:33:40:41:ab:41:9f:00:4d:63:d5:96:2c:f2:
54:53:f4:18:21:34:e5:d1:fc:e8:3c:d3:4b:55:a7:53:71:fc:
a1:a4:07:e1:8c:8a:50:12:02:6c:43:13:64:82:7d:57:03:46:
b2:05:5d:ec:9f:c3:d7:0d:c7:78:a0:5f:91:d8:9a:9f:a6:41:
0a:81:37:6c:1a:9b:a0:04:e9:d1:06:db:41:4b:de:86:6b:eb:
19:7c:47:bf:3b:f7:e7:dc:ff:86:ac:68:9b:e1:3f:a3:e6:4a:
a4:b2:cd:c5:81:8f:fc:c3:e1:66:cf:82:09:91:9c:f5:2d:51:
92:3d:7e:5a:3e:49:b7:c9:42:8f:7b:a1:5e:45:b4:b1:a7:d9:
d2:0e:ed:5d:35:38:81:00:5b:5b:06:5c:9f:c0:40:18:bb:4b:
64:df:40:cd:23:58:36:a5:bd:6f:dd:d6:bf:ea:69:a0:3d:1a:
fe:3e:a0:e2:b2:8e:7e:e3:33:b3:ad:03:bd:67:5b:af:aa:7e:
8c:d4:36:26:ca:8c:0d:0c:e8:64:01:06:6b:a6:3b:cf:70:cb:
04:13:7e:63:48:3c:cc:32:67:dd:1a:5e:82:42:bb:dd:8f:98:
38:7d:2f:3f:64:b8:49:b5:f9:d4:75:69:2f:b7:d4:63:6d:a6:
9e:f8:79:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:54:02 2025 by rpki-client