Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/VBIY_4ZX7d--qrSUpgW89FVAVWo.roa
File: VBIY_4ZX7d--qrSUpgW89FVAVWo.roa (raw, json)
Hash identifier: AzFhP/8/SkY+LInhXtuO6wfRHi8oiGAOXtB2EAnhq2o=
Subject key identifier: 54:12:18:FF:86:57:ED:DF:BE:AA:B4:94:A6:05:BC:F4:55:40:55:6A
Certificate issuer: /CN=e85b83c87c4a3d8315025379f72987520bb5d046
Certificate serial: 01900CA6783024306AFFC95AE47E1870FD7A
Authority key identifier: E8:5B:83:C8:7C:4A:3D:83:15:02:53:79:F7:29:87:52:0B:B5:D0:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6FuDyHxKPYMVAlN59ymHUgu10EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/VBIY_4ZX7d--qrSUpgW89FVAVWo.roa
Signing time: Wed 12 Jun 2024 13:32:34 +0000
ROA not before: Wed 12 Jun 2024 13:32:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20910
IP address blocks: 62.84.0.0/19 maxlen: 32
62.205.192.0/18 maxlen: 18
77.38.128.0/17 maxlen: 32
79.135.128.0/19 maxlen: 32
80.254.208.0/20 maxlen: 32
85.115.96.0/19 maxlen: 32
87.226.0.0/17 maxlen: 32
89.18.192.0/19 maxlen: 32
89.201.0.0/17 maxlen: 32
91.142.0.0/20 maxlen: 32
91.188.32.0/19 maxlen: 32
93.177.192.0/18 maxlen: 32
94.30.128.0/17 maxlen: 32
109.110.0.0/19 maxlen: 32
136.169.0.0/17 maxlen: 17
185.144.184.0/22 maxlen: 32
188.112.128.0/18 maxlen: 32
195.62.128.0/19 maxlen: 32
195.244.128.0/20 maxlen: 32
213.180.96.0/19 maxlen: 32
217.198.224.0/20 maxlen: 32
217.199.96.0/19 maxlen: 32
2a00:9000::/29 maxlen: 32
2a00:f4a0::/29 maxlen: 29
2a03:6740::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:0c:a6:78:30:24:30:6a:ff:c9:5a:e4:7e:18:70:fd:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e85b83c87c4a3d8315025379f72987520bb5d046
Validity
Not Before: Jun 12 13:32:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=541218ff8657eddfbeaab494a605bcf45540556a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:52:01:17:6d:d0:7d:dd:35:a1:d0:0d:65:1f:
4e:2a:d1:2b:c6:36:ef:fe:00:6b:5c:90:6f:41:ac:
6d:4a:58:65:a6:d7:d2:79:50:e9:1c:d2:90:ee:99:
e3:f2:82:fe:29:17:e2:eb:5b:39:6c:b6:67:a5:c9:
5a:7c:92:44:a5:c6:18:92:fa:e6:91:35:7e:24:f2:
71:08:34:8d:05:38:c0:28:d0:5a:75:a0:b9:e6:07:
7a:0d:85:c9:4e:30:41:f0:d0:24:4e:ac:cb:97:61:
36:b2:e3:91:c4:5f:6f:8b:0f:e4:2d:84:f7:3f:dc:
49:5b:cc:d7:e7:cd:ca:6a:f3:79:6f:ab:2f:66:39:
54:a8:97:d5:49:19:00:af:ba:9d:45:f4:f0:06:23:
cf:68:b8:63:4d:bc:78:ef:d4:2a:14:48:61:b1:28:
a9:51:c1:fa:2f:e9:8c:34:7e:ca:f0:2d:5f:e6:5f:
5c:ad:dc:16:a1:e6:e1:a4:f3:aa:b9:85:e6:54:57:
5d:e8:1f:e9:18:bf:2e:6c:9d:58:a0:88:2c:53:04:
9c:c0:6a:35:93:a0:46:78:2e:71:1c:55:d3:8b:7a:
56:fa:28:72:5f:1a:6e:0e:65:f1:4d:66:da:67:0b:
a0:b6:d6:49:66:3a:1b:4d:cb:0f:6c:6d:2b:76:9f:
2d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:12:18:FF:86:57:ED:DF:BE:AA:B4:94:A6:05:BC:F4:55:40:55:6A
X509v3 Authority Key Identifier:
keyid:E8:5B:83:C8:7C:4A:3D:83:15:02:53:79:F7:29:87:52:0B:B5:D0:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6FuDyHxKPYMVAlN59ymHUgu10EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/VBIY_4ZX7d--qrSUpgW89FVAVWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/6FuDyHxKPYMVAlN59ymHUgu10EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.84.0.0/19
62.205.192.0/18
77.38.128.0/17
79.135.128.0/19
80.254.208.0/20
85.115.96.0/19
87.226.0.0/17
89.18.192.0/19
89.201.0.0/17
91.142.0.0/20
91.188.32.0/19
93.177.192.0/18
94.30.128.0/17
109.110.0.0/19
136.169.0.0/17
185.144.184.0/22
188.112.128.0/18
195.62.128.0/19
195.244.128.0/20
213.180.96.0/19
217.198.224.0/20
217.199.96.0/19
IPv6:
2a00:9000::/29
2a00:f4a0::/29
2a03:6740::/29
Signature Algorithm: sha256WithRSAEncryption
28:68:eb:ca:da:79:44:54:6b:93:cd:06:0f:19:4a:05:b0:8e:
14:9a:fa:cf:0b:6a:e7:0a:8c:04:e5:d5:9b:c1:13:6d:35:f7:
cc:f5:38:db:95:21:11:69:e2:fb:3a:7a:75:df:b7:7c:57:06:
e6:64:c9:ec:81:0e:7d:78:93:77:64:0b:41:50:88:30:9b:ed:
1e:ec:5e:65:ce:7a:43:a7:6a:9b:cb:37:2e:13:30:fb:d6:49:
71:ba:a2:33:cf:85:47:f9:c1:9d:9b:92:c2:d8:da:a7:23:dc:
5f:ae:4b:66:92:72:6e:6a:67:03:f2:48:6e:80:0b:26:7e:94:
be:fd:3d:35:14:3c:9a:0c:95:5b:12:9b:a6:f7:a8:76:d6:45:
6c:3f:cc:45:66:ea:05:8a:7c:9f:5f:89:98:16:e4:50:56:e2:
f2:1b:d4:61:fc:9f:67:9a:f1:57:12:7e:5e:8f:d2:45:c8:f4:
5d:90:22:c8:a5:16:db:8c:b0:94:30:52:0d:1c:92:37:26:11:
5a:45:ed:a2:d0:d2:80:2c:02:73:59:fa:91:90:5d:23:29:1b:
b3:a4:bd:d6:63:a3:fd:fd:47:9b:66:82:24:56:81:db:3f:60:
ce:69:a0:e7:0d:fb:56:f3:3b:84:45:0e:79:84:a3:f4:56:ed:
ff:46:67:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 7 10:40:55 2024 by rpki-client on console-ams.rpki-client.org