Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/8065d5-04d0-43e5-a2f4-041a48d2123f/1/1-vk3La2yyZFnILeGGhJFe58kLvs.roa
File: 1-vk3La2yyZFnILeGGhJFe58kLvs.roa (raw, json)
Hash identifier: RGkYbhYFu12+UlOAOHZuU+R1lpv4+udmzfRD0bN3gMw=
Subject key identifier: FA:F9:37:2D:AD:B2:C9:91:67:20:B7:86:1A:12:45:7B:9F:24:2E:FB
Certificate issuer: /CN=a4767bc5fbcbcefb1c1c747bb0eb5337dab691c0
Certificate serial: 019421437DA8C790704F0A444BFF8C8155CB
Authority key identifier: A4:76:7B:C5:FB:CB:CE:FB:1C:1C:74:7B:B0:EB:53:37:DA:B6:91:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pHZ7xfvLzvscHHR7sOtTN9q2kcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/8065d5-04d0-43e5-a2f4-041a48d2123f/1/1-vk3La2yyZFnILeGGhJFe58kLvs.roa
Signing time: Wed 01 Jan 2025 09:47:38 +0000
ROA not before: Wed 01 Jan 2025 09:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50827
IP address blocks: 193.42.215.0/24 maxlen: 24
212.63.223.0/24 maxlen: 24
2a01:298:fd::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:7d:a8:c7:90:70:4f:0a:44:4b:ff:8c:81:55:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4767bc5fbcbcefb1c1c747bb0eb5337dab691c0
Validity
Not Before: Jan 1 09:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=faf9372dadb2c9916720b7861a12457b9f242efb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:14:ae:b0:d7:ef:8e:eb:dd:27:30:3c:35:bc:
49:02:d6:2b:12:e2:05:58:34:44:0a:b1:28:0e:f8:
a7:93:8d:30:6f:3b:83:de:c4:05:53:70:1e:bb:1f:
8a:ad:1e:85:e2:2c:55:dd:5f:55:01:c3:b7:82:53:
b5:18:2d:02:c5:62:0f:20:cd:b7:a5:4a:11:8a:d7:
9c:c2:1e:6a:23:ed:75:57:0b:f4:f3:8a:f8:72:01:
be:e8:8a:b7:07:47:3f:79:a8:26:dc:51:df:f3:83:
1e:46:c3:1d:8d:48:ca:eb:33:bf:6b:a4:dc:d9:9c:
6e:fa:f1:b1:67:25:c4:a7:b4:36:d0:3f:4a:5d:d6:
8c:d6:a2:48:e0:e0:83:27:2e:fd:b4:be:11:63:95:
85:63:37:7e:cf:a7:1b:34:d3:f8:1f:4a:84:e2:76:
83:af:83:df:9f:14:29:c7:93:5e:0f:75:c1:cc:f6:
df:33:d7:15:54:17:34:92:90:59:37:cb:ba:ba:d2:
8b:ab:75:05:d1:bc:29:e5:42:55:1e:31:be:f6:b0:
a2:df:6f:91:eb:27:8d:98:f8:92:e9:7d:cc:e1:65:
30:ad:37:bc:21:da:cf:d0:a9:1d:f1:9d:99:06:22:
65:d6:48:79:6f:a0:3b:0f:dc:9e:01:8c:b6:59:84:
d6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:F9:37:2D:AD:B2:C9:91:67:20:B7:86:1A:12:45:7B:9F:24:2E:FB
X509v3 Authority Key Identifier:
keyid:A4:76:7B:C5:FB:CB:CE:FB:1C:1C:74:7B:B0:EB:53:37:DA:B6:91:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pHZ7xfvLzvscHHR7sOtTN9q2kcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/8065d5-04d0-43e5-a2f4-041a48d2123f/1/1-vk3La2yyZFnILeGGhJFe58kLvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/8065d5-04d0-43e5-a2f4-041a48d2123f/1/pHZ7xfvLzvscHHR7sOtTN9q2kcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.42.215.0/24
212.63.223.0/24
IPv6:
2a01:298:fd::/48
Signature Algorithm: sha256WithRSAEncryption
c0:03:ae:59:df:6a:a1:89:78:17:b9:9f:6b:dd:63:be:48:5e:
79:63:51:cb:3a:14:31:e0:dd:a0:13:79:87:94:38:aa:8e:c9:
e4:4a:e7:97:cf:d5:70:87:40:00:41:91:11:d2:81:31:32:76:
91:20:89:59:63:bf:37:f4:17:b1:0a:93:88:fc:c5:aa:6d:b5:
ac:a4:11:97:7e:78:42:98:f6:cc:00:ac:fc:51:c1:96:6b:c9:
14:10:c3:30:0f:15:f7:d2:8b:e3:66:b4:4a:ef:ed:ad:07:05:
e8:da:5e:d8:0d:49:1b:73:1a:4b:ee:0f:5e:e7:38:06:e6:75:
03:40:98:cb:c3:19:1f:80:7d:c6:30:a9:6b:d0:41:18:6c:df:
11:2c:05:d0:4e:b1:3e:bb:e0:6a:e0:af:08:05:96:c0:86:3c:
b5:e3:47:46:7e:98:d4:1c:d4:db:6f:7d:ff:67:39:12:3c:ac:
13:aa:ad:65:6b:8b:63:3c:8e:3b:3f:bb:f5:b2:e0:6a:b5:1b:
d7:40:47:21:e2:da:7b:e8:d5:58:aa:48:02:82:a0:0c:ea:85:
5e:95:b3:3f:f3:d3:b9:02:93:59:71:51:34:9f:ce:92:28:0d:
26:25:c4:c1:d2:a8:a3:2a:ff:7e:d3:ea:55:e0:33:dc:1c:b2:
a5:29:ad:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:31:04 2025 by rpki-client