Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/VSPD-P2x9AFJLPXM1ojyW1Zg_c8.roa
File: VSPD-P2x9AFJLPXM1ojyW1Zg_c8.roa (raw, json)
Hash identifier: FnMmXFo7/pADeCZZVw6+arBaWU3TQyiSyeLPL9HJFWo=
Subject key identifier: 55:23:C3:F8:FD:B1:F4:01:49:2C:F5:CC:D6:88:F2:5B:56:60:FD:CF
Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9
Certificate serial: 018F258FA7C1FA26E87630B7EFC3B370CB31
Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/VSPD-P2x9AFJLPXM1ojyW1Zg_c8.roa
Signing time: Sun 28 Apr 2024 16:35:22 +0000
ROA not before: Sun 28 Apr 2024 16:35:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 212.42.192.0/20 maxlen: 24
212.42.208.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:25:8f:a7:c1:fa:26:e8:76:30:b7:ef:c3:b3:70:cb:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9
Validity
Not Before: Apr 28 16:35:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5523c3f8fdb1f401492cf5ccd688f25b5660fdcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:50:24:67:07:60:2f:49:d3:49:71:bf:94:87:
3f:9e:99:e0:d1:ff:c2:97:8a:36:0c:36:49:1c:92:
13:9a:24:b9:4c:b1:82:cb:df:55:5b:4d:15:72:df:
09:4d:23:25:68:4c:a7:c2:6c:9d:92:93:8e:23:a9:
3c:f2:11:e5:fd:44:82:55:a3:c0:b8:62:c0:75:d0:
0a:a6:66:cc:ef:6e:05:b4:10:43:df:c5:59:62:36:
5c:94:f5:3c:de:8b:bc:3d:68:17:17:43:bd:0d:79:
8d:28:8e:90:e0:0d:f0:12:44:b8:16:85:c4:f8:2d:
5a:cc:c4:d8:09:77:67:74:6e:f5:d6:e5:da:d5:54:
61:8f:0b:5d:7d:40:c9:84:48:1d:50:36:cf:f1:0f:
a6:b3:8f:0c:9b:08:55:ae:f2:98:57:a2:bb:4d:fe:
c4:48:75:53:9d:ef:c2:7f:8d:ff:e8:cf:b4:99:e9:
f5:6b:23:e1:a1:b7:95:9c:5b:d7:54:50:d2:36:cf:
d7:7c:91:0c:f7:48:34:03:b4:f0:b0:74:f3:91:b9:
a4:31:dc:3a:ec:c4:19:96:1d:0c:98:16:97:b3:12:
43:28:57:11:38:49:27:ef:8a:25:98:ab:5d:a8:32:
a0:d7:aa:1c:5b:44:a1:a5:e8:6f:7f:a9:36:14:f3:
27:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:23:C3:F8:FD:B1:F4:01:49:2C:F5:CC:D6:88:F2:5B:56:60:FD:CF
X509v3 Authority Key Identifier:
keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/VSPD-P2x9AFJLPXM1ojyW1Zg_c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.42.192.0/19
Signature Algorithm: sha256WithRSAEncryption
5b:61:59:a5:29:2e:88:14:b9:14:ff:f8:9a:f1:a9:64:8e:0b:
3d:09:e0:a6:b8:e8:6f:88:aa:d5:14:a9:1f:28:71:5b:a4:12:
a0:f3:30:b8:62:e0:85:1d:f5:16:71:53:b1:c6:94:97:bf:14:
d5:d3:6c:aa:46:44:f5:1e:59:38:4b:91:ff:df:c7:94:fd:c1:
1f:7a:f4:55:c4:ca:73:df:7e:50:3b:eb:5e:46:42:c7:44:a5:
ee:83:2a:a8:eb:8d:10:ab:2d:f0:ac:0c:80:d8:9c:f8:17:50:
d4:64:17:f9:3e:2c:85:b6:e9:5d:9d:47:b0:18:31:42:16:89:
ac:27:47:eb:06:e7:01:d0:62:34:ec:53:88:ec:39:3e:42:83:
1a:81:fa:12:33:f2:0e:13:25:05:ce:18:29:1d:41:05:91:4e:
2a:fc:f4:f3:42:e5:db:86:85:f1:2b:66:f2:b7:9d:4a:8d:33:
b3:23:38:b8:95:ce:96:88:30:18:ab:02:77:c7:7f:8b:b2:82:
6f:64:11:56:c0:5b:3c:d8:2f:55:f8:d8:cb:6f:54:f2:01:15:
8b:f0:83:ef:77:2b:6c:74:35:18:4f:b0:bb:b0:81:97:94:10:
b2:3a:dd:80:ec:b8:a7:9a:5d:b3:4f:86:f2:94:26:86:df:27:
34:5b:01:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:03 2025 by rpki-client