Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/5c1eec-3700-49bb-bfee-65d373ab573f/1/VyRcdQegnHw4kuW58Uqx25GobPA.roa
File: VyRcdQegnHw4kuW58Uqx25GobPA.roa (raw, json)
Hash identifier: lC++tHS3x+n6tHU4vit/ETgEcE0Z4ZJ+bg8pO+7AhEg=
Subject key identifier: 57:24:5C:75:07:A0:9C:7C:38:92:E5:B9:F1:4A:B1:DB:91:A8:6C:F0
Certificate issuer: /CN=d81843032164e0b62ed6da7c67557bf46895d0f0
Certificate serial: 019427480160EF3DD63EE7D3B0A1305C1E24
Authority key identifier: D8:18:43:03:21:64:E0:B6:2E:D6:DA:7C:67:55:7B:F4:68:95:D0:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2BhDAyFk4LYu1tp8Z1V79GiV0PA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/5c1eec-3700-49bb-bfee-65d373ab573f/1/VyRcdQegnHw4kuW58Uqx25GobPA.roa
Signing time: Thu 02 Jan 2025 13:50:17 +0000
ROA not before: Thu 02 Jan 2025 13:50:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48620
IP address blocks: 5.159.200.0/21 maxlen: 21
94.142.64.0/19 maxlen: 19
2a00:1cd8::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:01:60:ef:3d:d6:3e:e7:d3:b0:a1:30:5c:1e:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d81843032164e0b62ed6da7c67557bf46895d0f0
Validity
Not Before: Jan 2 13:50:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=57245c7507a09c7c3892e5b9f14ab1db91a86cf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:5a:0d:e8:3a:96:40:f0:f6:ae:30:a0:5d:0d:
72:3c:8d:14:88:92:78:51:be:34:80:77:b5:a9:6e:
aa:66:1c:a0:41:9b:7b:bd:59:73:3f:83:85:bd:3c:
0d:7e:97:2b:20:20:8c:93:d3:e1:67:57:b8:67:a1:
02:98:0b:2c:b0:67:b3:7d:d3:6d:50:cb:1f:65:ac:
60:6e:e3:d8:88:fe:80:a9:86:96:9a:22:16:cf:3b:
93:a2:9d:64:f9:e6:ed:20:fd:62:87:b7:85:3b:db:
ce:dd:d1:f7:1d:c9:75:0b:a7:00:3b:ea:c1:dc:76:
be:9e:31:79:f8:08:d0:ce:4e:93:8b:a9:31:85:9e:
f3:4a:e4:d3:0c:f3:51:5f:8c:c9:e7:62:80:0e:90:
44:62:d3:af:25:c6:99:2e:27:3d:13:6c:30:eb:e7:
f4:30:a3:22:73:fa:cb:c2:94:43:aa:50:2b:05:b0:
a0:55:fe:1f:d9:45:25:ba:d9:e3:53:8e:b0:8e:7e:
75:91:f4:7c:0e:a8:00:78:16:d4:05:ae:b9:c6:1a:
b9:fc:65:42:1e:fb:99:83:16:e5:45:97:cf:36:23:
b9:5e:43:b2:e0:dd:18:09:16:6a:df:12:1b:12:5d:
88:f9:df:db:df:70:91:d9:07:39:1f:88:64:a1:d7:
2a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:24:5C:75:07:A0:9C:7C:38:92:E5:B9:F1:4A:B1:DB:91:A8:6C:F0
X509v3 Authority Key Identifier:
keyid:D8:18:43:03:21:64:E0:B6:2E:D6:DA:7C:67:55:7B:F4:68:95:D0:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BhDAyFk4LYu1tp8Z1V79GiV0PA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5c1eec-3700-49bb-bfee-65d373ab573f/1/VyRcdQegnHw4kuW58Uqx25GobPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5c1eec-3700-49bb-bfee-65d373ab573f/1/2BhDAyFk4LYu1tp8Z1V79GiV0PA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.159.200.0/21
94.142.64.0/19
IPv6:
2a00:1cd8::/29
Signature Algorithm: sha256WithRSAEncryption
6a:99:5f:51:41:7e:e7:f9:79:00:e6:eb:18:ef:f9:9d:c0:78:
99:b8:3c:bb:2c:24:49:63:a2:70:67:b3:76:48:97:d9:21:b0:
6d:cd:d8:bb:07:47:0a:8a:7c:10:6b:43:bf:19:d3:ad:d6:f4:
f4:8d:95:89:9d:38:2a:7e:c7:6b:4e:59:89:b1:b6:9e:cf:0b:
44:42:03:71:99:18:45:ac:40:33:40:f3:fc:0e:8a:08:80:4c:
d3:ce:44:34:12:fe:7f:53:b9:9b:a1:b7:11:74:fa:59:c3:d7:
dc:26:f5:26:16:69:15:65:b8:9f:ec:eb:67:e5:8c:6a:a2:d1:
e3:e6:93:e3:01:97:ea:d9:e9:61:17:d3:a4:ed:7c:fc:28:84:
cf:f7:27:a8:6a:7d:dc:1e:36:3a:6a:c9:60:9f:2f:f2:5b:37:
b7:ea:4f:5a:d2:09:8c:7b:85:2d:b3:21:1a:eb:68:87:b9:b8:
d8:4d:a2:f1:72:f5:a7:23:72:dd:5e:3d:a5:3d:c5:e7:57:f4:
65:0d:92:ac:7b:28:76:c0:7b:ba:a1:b2:9d:d6:45:c6:cc:a2:
8d:2f:4a:d8:b6:7c:e2:9a:6d:10:b8:25:52:ed:19:b7:d0:fb:
04:2a:c7:d0:27:ad:fe:45:bc:71:eb:a5:91:7c:8c:f3:35:39:
20:30:22:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:59:24 2025 by rpki-client