Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/VGVyrg_KWe6qJVf2EFW5rg282l8.roa
File: VGVyrg_KWe6qJVf2EFW5rg282l8.roa (raw, json)
Hash identifier: no1Xp/fKJZHQHLgUjaAU6HFgcxae88YxDTT3wdaVfTw=
Subject key identifier: 54:65:72:AE:0F:CA:59:EE:AA:25:57:F6:10:55:B9:AE:0D:BC:DA:5F
Certificate issuer: /CN=8a26f476d608625ad1fe06e52b974a9f66f0141a
Certificate serial: 01942827A4CF2D5CDE5D0A2A5CB0A986F38B
Authority key identifier: 8A:26:F4:76:D6:08:62:5A:D1:FE:06:E5:2B:97:4A:9F:66:F0:14:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iib0dtYIYlrR_gblK5dKn2bwFBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/VGVyrg_KWe6qJVf2EFW5rg282l8.roa
Signing time: Thu 02 Jan 2025 17:54:34 +0000
ROA not before: Thu 02 Jan 2025 17:54:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31651
IP address blocks: 81.88.108.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:a4:cf:2d:5c:de:5d:0a:2a:5c:b0:a9:86:f3:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a26f476d608625ad1fe06e52b974a9f66f0141a
Validity
Not Before: Jan 2 17:54:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=546572ae0fca59eeaa2557f61055b9ae0dbcda5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:35:d4:61:8e:34:9a:ff:18:91:e8:ad:5d:b6:
55:c2:f2:98:d3:1a:6f:da:23:5e:41:95:02:71:46:
c6:a4:f3:07:ec:05:db:bf:50:86:7c:13:3f:cb:19:
f0:d4:f2:f2:b7:99:03:80:c0:da:bd:eb:ee:7d:78:
d1:8c:c1:91:be:cc:2d:b4:ce:6e:bc:b8:f0:7b:40:
19:c4:c8:01:e5:2d:0d:03:bf:70:e0:e9:0f:cb:db:
93:e2:e2:2c:44:3e:5c:4f:01:c5:de:d0:cd:de:36:
06:97:04:74:63:02:22:79:05:06:fa:55:07:1b:c5:
32:34:37:c0:c9:ca:9f:47:fe:90:da:39:b1:f4:7d:
0f:29:f0:9c:0c:10:fb:73:f0:d4:d6:0b:10:74:f4:
9e:4e:2b:9e:7a:9c:0a:90:b6:8f:31:f5:3b:89:df:
0f:22:97:d1:39:99:bc:6e:1f:9f:5c:12:40:3e:0d:
65:4d:ee:c2:cb:4e:0e:74:cc:0d:d1:17:5d:df:d1:
8c:f1:b1:10:14:cb:87:3d:3e:48:5f:61:93:8b:75:
2c:1f:66:ca:0c:41:67:ee:3e:74:e9:9b:c2:4c:70:
ef:6d:a0:25:74:ce:de:94:39:d1:90:11:28:19:21:
4d:f7:4f:e3:31:34:f9:9f:11:2a:12:c1:8f:3c:c6:
82:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:65:72:AE:0F:CA:59:EE:AA:25:57:F6:10:55:B9:AE:0D:BC:DA:5F
X509v3 Authority Key Identifier:
keyid:8A:26:F4:76:D6:08:62:5A:D1:FE:06:E5:2B:97:4A:9F:66:F0:14:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iib0dtYIYlrR_gblK5dKn2bwFBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/VGVyrg_KWe6qJVf2EFW5rg282l8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/iib0dtYIYlrR_gblK5dKn2bwFBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.88.108.0/22
Signature Algorithm: sha256WithRSAEncryption
79:2f:6a:06:53:d6:7b:45:df:a2:b4:59:30:4c:a9:5f:f1:b3:
44:7b:88:c2:c2:eb:38:a3:57:9f:ed:2d:3b:7c:29:f0:74:9c:
d6:0f:7a:f9:f9:cd:eb:cc:96:fc:5f:e3:0d:5c:ff:b7:56:1c:
86:5e:da:96:07:d2:38:15:3f:85:0f:c1:26:a3:0c:ca:23:8e:
49:d8:6b:79:ac:54:df:21:7e:44:cb:27:99:f4:55:32:df:06:
a6:23:7a:0f:35:4d:9e:74:7f:14:d7:e0:2f:b9:29:c3:1b:73:
40:09:ae:42:d2:f0:05:00:37:b1:04:55:ad:82:c2:27:6c:4b:
f9:29:44:1c:ac:a8:34:fc:e3:5e:34:00:ea:0e:e7:11:d3:6b:
14:ab:0e:94:05:91:43:0e:b7:2e:08:b2:92:77:6a:f5:c1:6b:
dd:a8:72:3e:88:91:60:ba:30:dd:a8:5c:f1:c6:76:fd:0c:af:
14:85:83:55:af:29:d3:4b:3f:da:d7:a3:ce:50:b3:84:04:5e:
3a:c6:e7:2c:57:a5:5d:00:ea:b3:86:f5:6f:9b:39:1a:a0:75:
fa:4b:dc:bf:38:d8:9e:6b:3e:d4:6a:ff:6e:fc:a2:9a:8a:8a:
df:49:3c:b4:1f:34:c4:d6:f4:c4:1d:98:aa:30:67:48:cd:18:
6c:71:e0:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:51:54 2025 by rpki-client