Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/VuAVCD-mhoc5i9vtP0A_gPbk1w8.roa
File: VuAVCD-mhoc5i9vtP0A_gPbk1w8.roa (raw, json)
Hash identifier: js4ojfLf5VJc1gb3AG5cMspDXL3JZYEKqGj/N4sAQU8=
Subject key identifier: 56:E0:15:08:3F:A6:86:87:39:8B:DB:ED:3F:40:3F:80:F6:E4:D7:0F
Certificate issuer: /CN=9d89e7c53e92479df81171ebaaf2360a037c3248
Certificate serial: 0194214435D4B0D9BB2412A035AF9017F643
Authority key identifier: 9D:89:E7:C5:3E:92:47:9D:F8:11:71:EB:AA:F2:36:0A:03:7C:32:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nYnnxT6SR534EXHrqvI2CgN8Mkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/VuAVCD-mhoc5i9vtP0A_gPbk1w8.roa
Signing time: Wed 01 Jan 2025 09:48:25 +0000
ROA not before: Wed 01 Jan 2025 09:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209923
IP address blocks: 213.190.8.0/22 maxlen: 22
213.190.8.0/23 maxlen: 23
213.190.8.0/24 maxlen: 24
213.190.9.0/24 maxlen: 24
213.190.10.0/23 maxlen: 23
213.190.10.0/24 maxlen: 24
213.190.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:35:d4:b0:d9:bb:24:12:a0:35:af:90:17:f6:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d89e7c53e92479df81171ebaaf2360a037c3248
Validity
Not Before: Jan 1 09:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=56e015083fa68687398bdbed3f403f80f6e4d70f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:dc:40:5c:2e:72:b1:e2:f8:7d:85:c5:63:ff:
8c:cf:80:ab:e0:8b:1a:14:1e:77:1f:30:85:0d:05:
07:34:a7:c6:8c:d9:3b:e9:9f:ae:45:e0:4b:21:b9:
72:83:59:9d:a6:6b:fd:b0:7a:b9:79:7c:7e:4b:bc:
cf:d5:18:20:2f:06:09:fc:62:f6:aa:31:f6:fb:9c:
9b:04:62:2b:ee:b5:e9:71:a3:0b:d5:45:98:32:f1:
54:cd:08:01:e9:ce:a6:8b:7c:46:52:23:7f:01:6f:
53:62:90:37:06:a7:29:81:ff:47:2c:56:1f:f4:49:
fe:67:ec:6b:e3:4e:d3:e0:33:2b:a7:f7:d5:39:7a:
27:21:d2:fe:e9:d9:97:43:50:3f:be:10:1f:8c:d9:
c0:f5:23:bf:cf:1d:80:9e:79:a2:2a:88:c5:69:ee:
dc:2d:a0:30:49:cc:65:2d:c4:e2:c7:d5:f4:d9:60:
89:f4:95:7c:d4:49:10:ee:36:9c:6f:34:d5:a5:2a:
84:03:0b:f7:54:0e:2a:b1:98:bf:94:bb:b2:27:fa:
d6:52:62:e5:b7:71:a1:6f:f8:50:f0:d9:7a:f3:e7:
27:70:19:44:17:29:13:c7:ef:cc:73:8b:84:5e:5b:
90:fd:53:f4:72:d5:a8:de:b1:50:5a:79:17:16:e5:
da:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E0:15:08:3F:A6:86:87:39:8B:DB:ED:3F:40:3F:80:F6:E4:D7:0F
X509v3 Authority Key Identifier:
keyid:9D:89:E7:C5:3E:92:47:9D:F8:11:71:EB:AA:F2:36:0A:03:7C:32:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nYnnxT6SR534EXHrqvI2CgN8Mkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/VuAVCD-mhoc5i9vtP0A_gPbk1w8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.190.8.0/22
Signature Algorithm: sha256WithRSAEncryption
12:64:c8:35:dc:b2:39:c4:1a:cd:23:ad:56:1d:cf:82:46:ac:
04:23:94:4d:03:6b:59:e5:f7:d0:44:19:70:b4:50:ae:fe:9c:
55:1b:00:6a:8c:cb:60:ae:7d:8b:fd:ae:8d:26:72:14:97:e8:
28:78:db:24:a2:82:a9:17:dd:bd:3f:2f:cf:59:dd:1b:a9:6e:
c9:25:99:30:66:e0:c8:21:d4:af:63:6b:92:5e:93:d1:5a:6d:
a8:8b:e5:71:4f:55:62:f3:0c:36:d7:21:ed:29:7c:74:25:0b:
89:c6:cc:bf:4a:8e:1a:30:3f:ff:fd:57:8e:dc:f6:98:44:bd:
3e:90:0a:80:20:d0:c3:2c:02:23:62:69:e3:a9:07:f5:ad:4e:
7c:7c:d1:7c:6f:f5:4a:5c:91:10:ed:5f:79:43:be:62:dc:e1:
4c:79:b1:66:b1:5d:2e:f7:c9:02:2d:ce:3e:7c:d8:d8:d0:32:
c6:3c:64:19:21:44:b6:e9:85:c2:a3:7f:37:e0:4c:b0:81:83:
8c:05:ef:8a:7f:e2:99:a7:dc:1e:70:63:57:50:c8:1e:29:92:
67:39:aa:dc:37:6f:27:09:50:c0:dd:c5:69:cc:1c:6f:38:a5:
f9:b8:fa:f0:7d:3b:fd:54:21:c8:72:33:67:60:48:83:35:40:
c5:67:4b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:03:22 2025 by rpki-client