Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/VJnm1AkHiE7SuesA5idFH1REQdA.roa
File: VJnm1AkHiE7SuesA5idFH1REQdA.roa (raw, json)
Hash identifier: 1LlBKB7vOsPJ8FvhzoxofY1Pd+poAd3OYPCwf4CTRNU=
Subject key identifier: 54:99:E6:D4:09:07:88:4E:D2:B9:EB:00:E6:27:45:1F:54:44:41:D0
Certificate issuer: /CN=46055e82002cc0bd7b9987e5d7365420eafd4970
Certificate serial: 019422203D1C8BAD9063D70F248297072D75
Authority key identifier: 46:05:5E:82:00:2C:C0:BD:7B:99:87:E5:D7:36:54:20:EA:FD:49:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RgVeggAswL17mYfl1zZUIOr9SXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/VJnm1AkHiE7SuesA5idFH1REQdA.roa
Signing time: Wed 01 Jan 2025 13:48:45 +0000
ROA not before: Wed 01 Jan 2025 13:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12735
IP address blocks: 193.160.144.0/24 maxlen: 24
2a0c:bec0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:3d:1c:8b:ad:90:63:d7:0f:24:82:97:07:2d:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46055e82002cc0bd7b9987e5d7365420eafd4970
Validity
Not Before: Jan 1 13:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5499e6d40907884ed2b9eb00e627451f544441d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:1a:fa:15:6d:25:53:ad:96:22:44:7d:f9:d0:
aa:5c:93:5a:64:03:75:1f:15:68:30:00:fe:9f:f8:
4d:4f:78:8f:67:dc:09:28:85:18:78:3a:82:b3:ef:
59:ea:56:90:e4:df:d0:59:19:e4:19:73:56:e8:84:
82:98:fe:77:27:75:6f:99:80:59:7f:90:6d:22:9f:
a8:6c:30:82:cc:2c:c5:44:85:90:b2:aa:00:b9:84:
12:28:17:d5:db:14:24:77:e2:ce:64:49:20:a3:87:
af:93:14:4a:04:94:bd:ab:9a:54:e2:fb:10:56:83:
73:f7:99:24:6c:c9:06:8f:37:dc:6c:ef:cf:75:26:
89:1a:13:00:9f:ef:be:c2:87:a4:97:fe:99:a7:84:
fa:08:3c:49:7e:69:86:25:f1:78:3e:72:25:65:86:
dc:b5:c9:4d:b8:e1:cd:6b:88:50:8a:5c:27:bf:24:
76:5e:7a:c7:ad:9a:74:1d:59:4e:26:79:74:df:18:
be:0e:14:48:58:18:94:de:99:0d:68:9a:d2:61:f9:
69:bd:44:ef:cd:04:d2:f3:91:cf:9e:4f:e3:21:76:
e1:66:02:3c:d6:ec:16:94:8e:02:b7:12:dd:94:cc:
3a:ad:27:34:80:75:a9:40:fd:49:ee:90:8f:a8:73:
9a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:99:E6:D4:09:07:88:4E:D2:B9:EB:00:E6:27:45:1F:54:44:41:D0
X509v3 Authority Key Identifier:
keyid:46:05:5E:82:00:2C:C0:BD:7B:99:87:E5:D7:36:54:20:EA:FD:49:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RgVeggAswL17mYfl1zZUIOr9SXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/VJnm1AkHiE7SuesA5idFH1REQdA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.144.0/24
IPv6:
2a0c:bec0::/29
Signature Algorithm: sha256WithRSAEncryption
84:b5:16:9d:20:b9:97:ba:9a:c5:9a:6c:65:43:1a:0c:64:41:
75:3d:e1:02:2e:9f:05:be:6f:4c:38:d2:f1:db:b5:ca:94:c2:
d4:a7:63:a0:78:59:54:ed:de:54:70:51:eb:39:49:d3:eb:0d:
d0:f5:7c:36:20:87:dd:2d:84:be:3c:53:e3:20:81:02:b2:e1:
ae:a9:e9:f4:a8:c3:8f:11:e6:6c:59:aa:f4:3f:76:31:42:e5:
83:7c:6c:87:f5:f1:13:f6:bf:bd:5c:c5:a7:40:2b:ff:6d:be:
e8:e0:4f:41:b8:bd:f0:88:f8:60:ec:a0:55:9a:28:d7:da:05:
ed:34:d3:d3:77:35:e4:a5:f9:67:b6:fb:da:31:36:96:91:5d:
b2:a2:5c:f6:9b:e8:ec:57:aa:ed:f0:36:f9:ae:89:81:62:39:
8b:d8:55:c8:df:5d:3b:37:a9:ed:5a:4c:80:8d:b0:01:34:b5:
ad:10:f0:45:29:c4:f9:9e:b2:8d:1c:5e:82:19:9d:54:e3:52:
db:14:66:cb:d6:6a:1c:86:56:aa:e9:40:72:46:f7:ac:de:9e:
cb:7c:62:8c:c2:2e:1f:79:a1:7c:9c:a7:4b:3f:50:59:93:53:
67:22:2d:d3:1d:6c:c0:cc:8b:67:2c:22:f3:56:20:76:2a:bc:
9d:35:92:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:32:16 2025 by rpki-client