Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/f9d8d0-cc02-4abf-99bb-e018da53d129/1/VI-dWQcY37xUT1kUINfwRf4ITOY.roa
File: VI-dWQcY37xUT1kUINfwRf4ITOY.roa (raw, json)
Hash identifier: /K+hbbpjK6p98+FcPVOwuQPFXuHi6fBZ7x81PS6CuTg=
Subject key identifier: 54:8F:9D:59:07:18:DF:BC:54:4F:59:14:20:D7:F0:45:FE:08:4C:E6
Certificate issuer: /CN=ce43fe94da4aef7adfb1c162875af1cac7cba4b1
Certificate serial: 0194258F31B71BF10DF78442537AE0716488
Authority key identifier: CE:43:FE:94:DA:4A:EF:7A:DF:B1:C1:62:87:5A:F1:CA:C7:CB:A4:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zkP-lNpK73rfscFih1rxysfLpLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/f9d8d0-cc02-4abf-99bb-e018da53d129/1/VI-dWQcY37xUT1kUINfwRf4ITOY.roa
Signing time: Thu 02 Jan 2025 05:48:48 +0000
ROA not before: Thu 02 Jan 2025 05:48:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48544
IP address blocks: 185.86.200.0/23 maxlen: 24
185.86.202.0/24 maxlen: 24
185.86.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:31:b7:1b:f1:0d:f7:84:42:53:7a:e0:71:64:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce43fe94da4aef7adfb1c162875af1cac7cba4b1
Validity
Not Before: Jan 2 05:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=548f9d590718dfbc544f591420d7f045fe084ce6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:73:ca:a3:67:67:09:27:f4:93:0a:5a:e2:a3:
fc:0e:a4:fa:df:f2:1b:47:14:9a:98:6d:f3:fe:c5:
9f:1b:2d:95:70:71:ad:b8:39:91:e6:7e:47:1b:ca:
16:80:03:4d:bf:92:c9:c7:7d:47:98:ab:d3:67:d8:
6e:b0:70:7f:c1:0f:a1:85:4d:56:a9:97:76:06:e9:
28:b1:ed:13:f3:83:3e:cb:eb:8d:1a:4b:fe:93:79:
9d:ed:e1:2b:42:8d:39:b4:e4:84:2d:93:fa:fc:be:
3b:30:ea:02:7d:9e:7f:33:26:c4:e3:e3:61:74:bb:
61:e5:af:de:d7:55:a9:85:b6:f4:38:34:b1:e0:48:
11:f7:87:de:ad:a7:b3:12:03:ef:07:9c:8b:85:41:
50:ae:a3:2c:ec:76:bf:ac:3a:74:ee:bb:8e:19:01:
69:fc:fc:a0:ba:d0:9a:27:40:fd:4d:b6:00:98:0f:
44:f2:0d:1d:0b:d3:8b:36:85:e9:87:42:8a:b8:60:
f1:da:26:ae:6e:f3:fd:ab:bc:4d:76:94:c4:dc:a8:
1f:0a:c8:47:3b:b7:bb:60:a5:10:fa:6c:e0:1a:3a:
8c:a6:71:2b:8c:c4:e9:1f:a7:15:3a:ca:8c:98:24:
8a:f9:63:45:cb:ee:28:11:d2:d3:d3:e0:34:db:e6:
81:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:8F:9D:59:07:18:DF:BC:54:4F:59:14:20:D7:F0:45:FE:08:4C:E6
X509v3 Authority Key Identifier:
keyid:CE:43:FE:94:DA:4A:EF:7A:DF:B1:C1:62:87:5A:F1:CA:C7:CB:A4:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zkP-lNpK73rfscFih1rxysfLpLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f9d8d0-cc02-4abf-99bb-e018da53d129/1/VI-dWQcY37xUT1kUINfwRf4ITOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f9d8d0-cc02-4abf-99bb-e018da53d129/1/zkP-lNpK73rfscFih1rxysfLpLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.200.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:5c:1b:c8:0a:b5:33:d0:f0:e5:8b:5a:9a:ac:e8:8c:a3:44:
f8:d2:78:a8:5b:98:70:dc:20:16:c8:1b:e1:bb:8f:be:70:e0:
49:7f:51:51:1d:32:6b:fe:87:ef:09:7d:6c:3f:c2:bb:ca:0e:
0b:fd:d9:6c:86:f8:d1:2e:0a:1c:a5:57:b7:96:5e:c0:29:33:
83:db:d2:1f:37:8e:de:d8:09:58:00:11:7b:ce:6f:9f:be:c7:
e9:79:97:e7:1f:7e:33:c6:23:28:22:76:b7:1f:bc:a3:a1:5b:
76:b6:d0:c6:0f:0b:d6:9f:38:7f:95:07:96:3e:8b:9d:c0:ef:
69:38:fd:e0:6b:e3:3e:9e:97:e0:8c:13:3f:27:b2:63:42:70:
e1:55:ac:e8:93:6f:38:25:a2:d7:aa:45:fa:e3:f8:24:8c:f8:
ed:48:02:f0:64:3d:2f:5b:a9:93:20:1c:ce:40:ee:67:42:c0:
0e:ce:42:f4:96:7c:4c:fd:5b:eb:38:a4:09:2b:9c:28:6a:38:
e4:75:47:f7:b1:1e:54:fd:1f:a2:58:2c:85:11:07:4d:f2:0d:
21:77:40:9f:ae:a8:86:2f:3b:a4:25:02:9d:2a:30:a2:c7:66:
24:9a:12:64:11:8f:c9:4a:f1:9a:42:38:42:18:35:45:33:38:
a5:a8:8f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:43:00 2025 by rpki-client