Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/VRw3DZ76n7ONqtgRd8Y5i0rsXGA.roa
File: VRw3DZ76n7ONqtgRd8Y5i0rsXGA.roa (raw, json)
Hash identifier: CijxXdzeiCJ95Wj2FBKEDYL0eux00cjAyjryrvjBkZY=
Subject key identifier: 55:1C:37:0D:9E:FA:9F:B3:8D:AA:D8:11:77:C6:39:8B:4A:EC:5C:60
Certificate issuer: /CN=4384f6fa6decced5578a85a51e0bd65701ea34ec
Certificate serial: 019450D91505A195F0A3D9584D058E141189
Authority key identifier: 43:84:F6:FA:6D:EC:CE:D5:57:8A:85:A5:1E:0B:D6:57:01:EA:34:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q4T2-m3sztVXioWlHgvWVwHqNOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/VRw3DZ76n7ONqtgRd8Y5i0rsXGA.roa
Signing time: Fri 10 Jan 2025 15:33:11 +0000
ROA not before: Fri 10 Jan 2025 15:33:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206947
IP address blocks: 185.198.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:50:d9:15:05:a1:95:f0:a3:d9:58:4d:05:8e:14:11:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4384f6fa6decced5578a85a51e0bd65701ea34ec
Validity
Not Before: Jan 10 15:33:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=551c370d9efa9fb38daad81177c6398b4aec5c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:b6:a5:79:89:5d:73:a8:ab:26:b2:71:64:38:
7c:17:10:4b:1c:0c:39:c5:04:db:c3:86:26:21:43:
40:84:44:41:90:87:c0:50:76:f8:1d:88:6b:d0:4a:
3c:b5:3c:c0:5c:60:e3:aa:4a:e8:20:1e:f0:da:60:
6b:1b:53:73:d9:e1:a2:e4:b1:70:03:66:f2:f0:6a:
15:32:2d:30:b0:55:89:93:76:64:d3:30:39:2a:c8:
42:39:6e:4a:bf:bb:29:72:98:a6:4a:98:d1:d4:de:
f6:71:d6:1f:c4:e9:a4:2d:3a:45:bc:03:f1:ee:65:
4a:a2:0b:9b:3e:a0:fd:ff:90:d6:3c:61:9a:f9:47:
63:7d:8d:e3:fc:f6:ab:24:07:b6:91:80:a4:af:1b:
fa:3d:2a:15:37:c7:99:67:57:06:2c:f3:b0:df:c3:
36:85:9f:1f:e5:29:49:48:34:be:bc:5a:35:e2:40:
37:5a:d9:a7:e0:9f:fc:3b:66:98:71:c2:10:3f:36:
d2:88:4a:04:1c:56:46:93:4b:ea:38:66:90:fe:24:
97:71:b6:d2:21:4d:07:db:5f:a1:9f:47:15:45:0b:
b8:6d:1e:8e:a1:19:5a:57:51:82:7d:83:00:2b:b1:
83:55:ce:1a:1a:e3:36:ca:0f:10:fd:0a:0a:38:cf:
18:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:1C:37:0D:9E:FA:9F:B3:8D:AA:D8:11:77:C6:39:8B:4A:EC:5C:60
X509v3 Authority Key Identifier:
keyid:43:84:F6:FA:6D:EC:CE:D5:57:8A:85:A5:1E:0B:D6:57:01:EA:34:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q4T2-m3sztVXioWlHgvWVwHqNOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/VRw3DZ76n7ONqtgRd8Y5i0rsXGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/Q4T2-m3sztVXioWlHgvWVwHqNOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.198.210.0/24
Signature Algorithm: sha256WithRSAEncryption
86:3e:2c:c4:55:49:0f:bc:6c:e0:3a:47:20:54:f8:2f:3e:d4:
69:f8:3c:5f:dc:58:ac:e4:56:7f:e6:81:0c:9e:44:a2:ee:89:
76:aa:11:03:64:eb:63:f1:c6:c9:07:df:32:19:fa:41:84:bb:
a0:8e:e8:d1:ff:d5:5f:d1:f2:3f:08:bb:39:31:34:62:31:0d:
45:4a:10:5d:d7:5b:61:15:be:82:ca:64:36:c5:a4:67:0f:45:
d1:19:02:a0:26:2a:30:91:03:62:fc:5c:f8:e7:1a:a5:9b:ba:
aa:d1:1c:3a:83:f2:b5:4a:52:52:9b:d3:03:87:6b:41:d5:f5:
56:34:2d:2b:ea:18:e3:ac:0a:8e:fc:cb:a6:3f:47:25:ff:8f:
b0:23:03:72:a6:ef:f9:96:ef:00:e2:a1:3d:4a:0c:ea:ae:c2:
8f:cd:8f:7d:29:d0:71:90:4e:01:9d:fe:ec:30:fa:d7:da:00:
c1:eb:ac:18:b5:98:b9:ff:ee:23:1b:7e:18:fa:ad:ca:66:71:
e9:c6:a8:7d:d3:f0:e3:25:f9:b2:3c:22:d7:25:af:20:ee:de:
09:ad:d9:d7:b1:f1:cf:34:1d:d5:de:87:3a:0a:a8:cb:7c:4f:
ad:a3:ca:4c:ff:cd:b3:87:06:5e:22:33:7a:8d:cf:03:65:5e:
94:9b:b1:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:13:23 2025 by rpki-client