Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/VWhDL_pbFyyRh5F_p1365369fw8.roa
File: VWhDL_pbFyyRh5F_p1365369fw8.roa (raw, json)
Hash identifier: h0UGnV1yT7TAR4sgEMb7SSbuBaNRRDcOsgJUpZU75gM=
Subject key identifier: 55:68:43:2F:FA:5B:17:2C:91:87:91:7F:A7:5D:FA:E7:7E:BD:7F:0F
Certificate issuer: /CN=c469fe3d882c93e38e8b6a286a3177dc17e99ac7
Certificate serial: 01941FFA87060614EFFF686BCE029A584F1F
Authority key identifier: C4:69:FE:3D:88:2C:93:E3:8E:8B:6A:28:6A:31:77:DC:17:E9:9A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGn-PYgsk-OOi2ooajF33Bfpmsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/VWhDL_pbFyyRh5F_p1365369fw8.roa
Signing time: Wed 01 Jan 2025 03:48:19 +0000
ROA not before: Wed 01 Jan 2025 03:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201275
IP address blocks: 178.57.92.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:87:06:06:14:ef:ff:68:6b:ce:02:9a:58:4f:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c469fe3d882c93e38e8b6a286a3177dc17e99ac7
Validity
Not Before: Jan 1 03:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5568432ffa5b172c9187917fa75dfae77ebd7f0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b9:b6:f5:e7:1b:8f:4a:1d:a3:18:f4:0a:ff:
68:db:01:e9:c2:f8:9e:d7:30:72:3a:79:af:6d:12:
84:9e:2b:c7:95:bd:d4:bb:5a:c6:83:59:81:d5:3e:
4a:bd:1a:af:a8:04:17:a2:5a:73:0e:cb:36:ec:50:
4e:af:f0:e2:63:ec:eb:f6:7e:36:ed:07:30:ba:6d:
f1:36:79:7a:c0:4e:3b:6f:64:af:e3:53:ad:ec:d0:
8c:9b:4b:3f:f8:fe:c7:a3:44:4c:80:db:6b:6e:0d:
62:5a:c7:0a:c0:04:68:11:2e:ec:5c:8c:a9:4d:41:
8b:d7:a5:96:23:12:8a:33:34:00:53:4d:ee:c2:a3:
55:35:20:cc:02:7e:da:70:7e:53:02:dd:91:37:90:
e3:53:47:a3:cf:35:2a:1e:c3:da:1c:a1:82:11:7d:
a3:b9:00:b5:e3:d3:9d:be:a9:6f:b2:fb:f7:13:bc:
5a:c5:48:9a:9f:e7:41:a3:e6:75:3a:27:9f:f4:18:
47:0e:c8:ef:58:1d:d1:67:bb:2f:81:23:cc:52:f8:
c2:89:6d:35:a1:70:7c:7d:3f:d7:07:be:8e:f3:b2:
39:08:1e:a6:5a:3b:00:0f:3f:9b:6f:99:64:e0:21:
93:5a:b4:7f:ac:c1:f8:68:38:c7:3b:e6:4c:80:bd:
95:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:68:43:2F:FA:5B:17:2C:91:87:91:7F:A7:5D:FA:E7:7E:BD:7F:0F
X509v3 Authority Key Identifier:
keyid:C4:69:FE:3D:88:2C:93:E3:8E:8B:6A:28:6A:31:77:DC:17:E9:9A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGn-PYgsk-OOi2ooajF33Bfpmsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/VWhDL_pbFyyRh5F_p1365369fw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/xGn-PYgsk-OOi2ooajF33Bfpmsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.57.92.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:50:4d:d1:0c:2a:55:79:71:a2:48:31:c9:8d:19:a5:6e:b3:
00:db:5e:f1:a3:8a:6a:0e:af:e6:f3:94:1a:0c:ff:f2:cc:1f:
5e:51:42:dc:fe:39:26:83:1b:5c:1d:f7:c0:18:d1:10:4d:ce:
56:77:c9:f2:80:57:0f:f0:6b:cc:58:59:e8:7d:97:a3:18:3e:
3f:4d:13:5a:e9:09:c4:9f:88:f9:2a:e5:ac:b9:17:49:48:da:
bb:d5:1c:46:b5:8e:fb:2f:50:00:ef:32:6a:ef:23:8f:38:bf:
fe:ad:2b:7d:63:c9:22:8b:69:f2:af:13:3a:01:44:b2:f4:0e:
8f:a3:2d:96:9e:68:be:ba:02:11:9d:f7:24:67:15:7b:50:f5:
fc:af:ba:65:f8:88:b4:e4:5f:dd:56:84:87:f4:1e:60:93:90:
05:63:b6:23:c1:11:33:7a:7c:16:cc:5a:55:b3:32:86:f6:0c:
8d:6e:b7:99:cc:07:39:6a:c2:a0:14:12:3c:19:23:7d:99:8a:
83:10:8f:36:5d:48:9c:c8:af:1e:91:61:fd:6e:8e:b0:19:61:
bb:4c:4e:36:24:04:bd:96:65:5a:eb:09:ed:65:70:17:50:a6:
e8:c3:86:17:33:e7:19:7e:c4:34:50:44:e7:35:c5:d3:67:47:
b8:44:e2:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:00:40 2025 by rpki-client