Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/VNrppWVy36SKNgtS_F1qaT2zJHY.roa
File: VNrppWVy36SKNgtS_F1qaT2zJHY.roa (raw, json)
Hash identifier: 9DXGS+oBa4dlfj3+GMMrbil8G+vwg9kQTst1kCj/GhM=
Subject key identifier: 54:DA:E9:A5:65:72:DF:A4:8A:36:0B:52:FC:5D:6A:69:3D:B3:24:76
Certificate issuer: /CN=20f638107abb84ae6fb03cc1db2cfd1bc4487f8d
Certificate serial: 01942747A87D5401B4B73BC130ACDCADB370
Authority key identifier: 20:F6:38:10:7A:BB:84:AE:6F:B0:3C:C1:DB:2C:FD:1B:C4:48:7F:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPY4EHq7hK5vsDzB2yz9G8RIf40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/VNrppWVy36SKNgtS_F1qaT2zJHY.roa
Signing time: Thu 02 Jan 2025 13:49:55 +0000
ROA not before: Thu 02 Jan 2025 13:49:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35199
IP address blocks: 178.219.16.0/22 maxlen: 22
185.214.67.0/24 maxlen: 24
185.226.98.0/24 maxlen: 24
193.19.164.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:a8:7d:54:01:b4:b7:3b:c1:30:ac:dc:ad:b3:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20f638107abb84ae6fb03cc1db2cfd1bc4487f8d
Validity
Not Before: Jan 2 13:49:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=54dae9a56572dfa48a360b52fc5d6a693db32476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:06:0a:e2:dc:6a:13:a6:be:f9:96:f3:dc:e6:
c8:10:86:70:7a:3f:4e:3d:4b:fc:08:8b:0e:77:0b:
01:76:57:79:e9:49:ad:00:c5:51:42:b0:2f:28:da:
14:10:92:4b:06:43:57:0c:0c:8a:cc:97:c4:b1:2b:
c9:21:20:8d:5f:be:bb:cf:84:3c:40:58:20:78:c0:
80:f4:18:0c:f8:05:04:3d:77:43:87:22:dd:21:36:
9a:af:2a:79:cd:33:ec:31:0a:02:60:03:95:21:d6:
b4:87:c5:63:0b:e5:45:e4:fc:9f:f4:92:30:97:04:
6d:80:b9:ca:19:95:d3:5c:dc:61:68:cd:bd:68:c9:
d3:a7:92:ab:17:6c:5b:95:cf:da:d6:41:25:e2:2f:
92:47:8f:48:40:a0:df:af:95:92:3d:b6:7d:66:0a:
98:9b:03:66:ad:d1:11:7a:b1:2d:0e:39:88:11:28:
f6:85:8a:5b:0f:a1:38:4d:c8:12:8d:63:c9:e3:55:
68:03:a9:c9:49:0f:9a:d4:06:c3:3d:78:a8:4a:39:
c7:28:f3:17:e4:18:80:2c:be:7a:6a:8d:b0:1c:ff:
a2:27:3c:96:eb:ab:34:f2:7d:70:ed:59:84:b9:e9:
09:9b:65:4e:8d:e2:86:f0:4d:99:f2:bb:b3:99:14:
58:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:DA:E9:A5:65:72:DF:A4:8A:36:0B:52:FC:5D:6A:69:3D:B3:24:76
X509v3 Authority Key Identifier:
keyid:20:F6:38:10:7A:BB:84:AE:6F:B0:3C:C1:DB:2C:FD:1B:C4:48:7F:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPY4EHq7hK5vsDzB2yz9G8RIf40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/VNrppWVy36SKNgtS_F1qaT2zJHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.219.16.0/22
185.214.67.0/24
185.226.98.0/24
193.19.164.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:ef:5d:56:90:c0:c6:39:5e:13:cc:91:e5:f0:3d:11:bf:bb:
21:6f:f5:a0:5b:36:e8:ed:13:af:c0:95:c0:f3:da:ba:18:2d:
c5:47:82:88:90:e9:42:da:51:cb:c6:d1:3d:e6:11:87:c0:d2:
bf:87:f6:a8:69:f3:61:60:9a:ca:ca:67:b8:fe:eb:bc:34:fd:
a8:00:44:2d:bc:c4:72:04:01:cd:6b:c1:f0:c1:6f:ad:32:7f:
37:60:77:b2:f8:98:9d:b3:01:84:a8:42:3a:44:52:be:72:cf:
72:52:59:c8:56:8b:e5:42:e6:0e:c4:8e:d7:da:6e:94:28:da:
7f:df:73:b3:0b:a6:b0:f7:57:a3:6c:72:fd:a9:f6:68:f8:f1:
df:d4:bc:eb:12:b1:39:01:d7:18:71:a6:67:10:73:c8:75:f4:
50:a7:61:38:11:64:be:e8:76:3e:31:70:a5:b8:34:a5:ed:31:
a9:42:ac:7c:ee:73:bf:1d:3a:00:85:9b:bd:8b:b3:d4:f3:12:
23:53:fe:7a:8b:46:62:97:05:f8:4e:49:ca:cb:1d:f2:f9:2d:
76:d8:60:d2:12:79:01:38:4a:3f:9d:c9:64:77:e9:e7:b3:7b:
9d:74:2e:7b:8a:95:76:d6:a4:c1:39:1e:71:92:08:3d:16:d9:
f2:65:0b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:53:18 2025 by rpki-client