Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/VajIGedTAEjBNV3b8yhI3Gm_wwY.roa
File: VajIGedTAEjBNV3b8yhI3Gm_wwY.roa (raw, json)
Hash identifier: zWXkCVS1+asFBr2Z3nZVK8HEU5fThFspnuVO3DjbBl4=
Subject key identifier: 55:A8:C8:19:E7:53:00:48:C1:35:5D:DB:F3:28:48:DC:69:BF:C3:06
Certificate issuer: /CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d
Certificate serial: 019425FDC484417886308130F62C836B3AD8
Authority key identifier: DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/VajIGedTAEjBNV3b8yhI3Gm_wwY.roa
Signing time: Thu 02 Jan 2025 07:49:35 +0000
ROA not before: Thu 02 Jan 2025 07:49:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210001
IP address blocks: 93.187.32.0/21 maxlen: 21
185.52.116.0/22 maxlen: 22
185.52.116.0/24 maxlen: 24
2a00:dd00::/32 maxlen: 32
2a00:dd00:5::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:c4:84:41:78:86:30:81:30:f6:2c:83:6b:3a:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d
Validity
Not Before: Jan 2 07:49:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=55a8c819e7530048c1355ddbf32848dc69bfc306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:fe:57:70:87:1b:f8:ea:d6:a0:cf:1d:0d:34:
81:4a:db:6f:1b:ef:ce:cb:7d:21:0d:b2:17:0f:34:
72:be:e3:08:ba:1e:ac:7e:32:e9:a0:45:29:b9:c0:
9b:9f:0a:db:4b:7d:7c:f4:ba:f5:bb:59:2f:10:c4:
e9:a2:cf:ac:ce:f3:9a:90:ae:e5:97:82:c2:b9:77:
25:38:51:05:e1:ed:20:24:b2:a4:10:d8:2e:81:94:
f4:7f:13:fb:dd:63:f4:cb:17:15:75:c1:1d:d6:89:
c7:8f:4f:3d:b3:ad:d2:86:33:79:1e:29:39:de:4f:
fa:8a:83:e3:7a:12:40:10:c8:85:fd:d1:e9:b3:c8:
f1:6a:f0:ca:8e:70:4e:c6:b8:77:c1:80:9d:1c:db:
18:f1:88:79:2c:c9:88:8e:a0:55:d7:aa:2f:1f:60:
71:07:d9:f0:88:ff:11:17:84:95:ea:39:07:7b:15:
94:b1:23:1a:4a:3d:e5:3e:5a:c5:99:13:eb:76:be:
f4:21:c7:90:c1:67:d1:4b:7b:67:a9:86:c8:10:f1:
2b:62:20:5f:cd:b7:32:38:00:68:91:ea:9e:94:66:
db:26:ea:de:b3:84:6d:d5:10:87:45:68:e7:fe:d3:
da:0e:5b:e0:fa:e1:8f:d8:0e:18:eb:e0:f4:e5:77:
20:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:A8:C8:19:E7:53:00:48:C1:35:5D:DB:F3:28:48:DC:69:BF:C3:06
X509v3 Authority Key Identifier:
keyid:DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/VajIGedTAEjBNV3b8yhI3Gm_wwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.187.32.0/21
185.52.116.0/22
IPv6:
2a00:dd00::/32
Signature Algorithm: sha256WithRSAEncryption
25:b0:83:10:1c:02:8d:54:06:f0:98:71:30:a2:d3:51:2a:9e:
f2:13:d7:9e:50:62:dd:68:ed:55:f9:ed:e7:d0:89:ac:a8:88:
c6:50:c0:5c:45:b7:fd:4e:72:46:ac:83:86:0b:4c:20:f8:9c:
f6:5a:fb:2a:78:b9:47:f9:bc:f1:10:03:94:f5:97:b0:60:86:
aa:33:52:c6:af:e1:bf:bd:15:6f:f4:c4:1d:08:cc:8a:b5:10:
92:8c:d4:da:f2:f3:53:b2:d7:41:33:98:7a:a0:b5:06:55:7f:
45:42:81:b1:18:be:b5:19:b4:fc:c1:ca:58:79:1b:8a:e6:4f:
31:f9:e2:34:5e:47:28:e1:b0:ca:ee:f9:65:fb:11:db:4e:2f:
30:aa:f5:18:00:02:ad:14:6b:83:fd:4d:94:ca:7d:41:5e:5a:
c9:2c:b8:23:c5:a6:6b:2e:67:e5:a7:4c:3a:9c:b3:c6:47:20:
db:9c:8e:18:30:24:9a:cc:36:51:0c:37:42:48:62:0c:97:4a:
8f:29:b1:26:ab:6b:89:d4:c7:ad:05:e9:93:30:99:4f:0e:9d:
44:12:ee:59:8d:25:40:b5:dd:64:58:e9:b7:f4:6b:8d:33:36:
97:a6:cd:f4:76:4c:44:f0:9f:0c:2a:db:99:b8:39:37:54:a0:
fb:5d:e7:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:12:15 2025 by rpki-client