Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/vBgsgkwekmg8ZVE8b4TJhK80LrM.roa
File: vBgsgkwekmg8ZVE8b4TJhK80LrM.roa (raw, json)
Hash identifier: c0jtWq7YzOBVoEF72n6cPgI2PZIibyOgb+LV/XfWszE=
Subject key identifier: BC:18:2C:82:4C:1E:92:68:3C:65:51:3C:6F:84:C9:84:AF:34:2E:B3
Certificate issuer: /CN=c4ff23b1c371352f39b73d39a4e07f8ca98ccd67
Certificate serial: 0194258FBEA08AD60C68093F6C96AC059FBD
Authority key identifier: C4:FF:23:B1:C3:71:35:2F:39:B7:3D:39:A4:E0:7F:8C:A9:8C:CD:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/vBgsgkwekmg8ZVE8b4TJhK80LrM.roa
Signing time: Thu 02 Jan 2025 05:49:24 +0000
ROA not before: Thu 02 Jan 2025 05:49:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201461
IP address blocks: 93.191.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:be:a0:8a:d6:0c:68:09:3f:6c:96:ac:05:9f:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ff23b1c371352f39b73d39a4e07f8ca98ccd67
Validity
Not Before: Jan 2 05:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc182c824c1e92683c65513c6f84c984af342eb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:2f:23:4a:fa:e4:e7:57:bd:eb:f9:c5:ad:38:
9b:15:6e:43:2b:f3:d2:25:c8:86:43:ec:89:32:ce:
20:0b:30:51:85:c6:24:b9:c1:4e:13:79:4b:4a:f2:
1a:e5:05:3d:78:82:41:6f:fb:85:3e:f1:c2:3d:41:
c9:19:17:43:0b:0c:f1:b4:af:0b:f7:95:7f:d4:17:
77:52:b0:4e:61:74:d6:a2:83:79:59:0b:59:aa:d0:
eb:c1:02:aa:04:58:44:8b:f1:6c:c0:0f:25:cd:d9:
4f:11:e5:4d:ec:64:3c:67:4a:2e:73:f5:cb:fd:ef:
4d:69:5b:d1:e1:17:9c:4d:f7:45:11:e9:ae:c9:d8:
a7:85:e9:4f:45:41:96:f4:6e:7e:43:63:c0:02:38:
87:eb:1c:bb:34:72:c6:8b:7c:42:f9:c3:13:71:1c:
86:15:59:5a:40:06:b4:c4:70:5e:1b:63:39:27:cd:
11:08:99:aa:b5:f9:ba:5e:33:79:c1:80:82:31:51:
56:ea:d5:d4:ef:8c:a2:8b:ca:1b:20:bd:74:0d:88:
f0:50:5f:eb:d9:86:e1:66:7c:ac:30:2e:64:cc:52:
c7:a3:15:10:0c:5d:b1:54:7a:99:1e:b5:39:5d:0c:
44:34:53:e4:5b:50:4f:2a:77:06:2e:a7:3f:29:04:
95:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:18:2C:82:4C:1E:92:68:3C:65:51:3C:6F:84:C9:84:AF:34:2E:B3
X509v3 Authority Key Identifier:
keyid:C4:FF:23:B1:C3:71:35:2F:39:B7:3D:39:A4:E0:7F:8C:A9:8C:CD:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/vBgsgkwekmg8ZVE8b4TJhK80LrM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.191.198.0/24
Signature Algorithm: sha256WithRSAEncryption
43:5b:26:b4:53:1e:23:75:12:1e:35:fa:85:40:8e:a7:64:10:
4b:2b:09:32:c7:24:5c:96:70:65:00:99:ce:0d:96:ae:f3:8c:
2f:e7:f8:7b:f0:1d:fc:91:37:0b:b0:d2:f1:48:9d:73:ce:3a:
b9:f4:18:87:1a:ed:73:73:a3:81:c1:cf:3b:5f:70:26:2e:58:
a3:33:90:d1:ff:88:f5:0f:c2:f3:9c:57:20:ab:67:c7:a5:eb:
fa:2a:b8:39:29:b7:55:67:60:94:04:00:5b:a5:f6:78:1f:e9:
e0:ed:0a:41:e8:42:61:77:bf:70:4e:08:80:df:44:e1:26:6b:
88:2e:b8:e3:62:d1:28:a8:9f:42:39:c8:f4:9a:29:e5:d5:30:
50:56:52:5a:4c:77:3f:25:bc:39:2f:b0:cd:62:e7:63:1c:5f:
f1:e7:1a:68:1a:0d:f9:9a:aa:be:7f:a0:1f:25:05:a9:91:9a:
4f:0c:1e:1b:e0:d1:e5:52:df:26:d8:90:36:a1:f5:26:78:eb:
aa:d8:59:87:7c:9f:82:18:b8:7d:02:1f:46:33:25:01:4d:d1:
a1:07:4d:1d:b6:d2:bf:8b:bf:9c:11:f8:17:df:aa:26:5e:ea:
6f:21:8e:55:28:35:ec:07:a8:85:cf:fb:74:91:62:9b:1c:8d:
9c:d0:38:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:25:50 2025 by rpki-client