Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/rVK1f_dmH8IkDbuaYgLPIHaLhTw.roa
File: rVK1f_dmH8IkDbuaYgLPIHaLhTw.roa (raw, json)
Hash identifier: ZQMoKPh7bf4f+FY2EcEyUK7kit9BSmoiMPRby8M1WLE=
Subject key identifier: AD:52:B5:7F:F7:66:1F:C2:24:0D:BB:9A:62:02:CF:20:76:8B:85:3C
Certificate issuer: /CN=d283616f1362c25d82ec2a70c4b9750565b1197f
Certificate serial: 0194221FC332C5510A78F0861E42E154DBA9
Authority key identifier: D2:83:61:6F:13:62:C2:5D:82:EC:2A:70:C4:B9:75:05:65:B1:19:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/rVK1f_dmH8IkDbuaYgLPIHaLhTw.roa
Signing time: Wed 01 Jan 2025 13:48:14 +0000
ROA not before: Wed 01 Jan 2025 13:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 185.54.72.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:c3:32:c5:51:0a:78:f0:86:1e:42:e1:54:db:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d283616f1362c25d82ec2a70c4b9750565b1197f
Validity
Not Before: Jan 1 13:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ad52b57ff7661fc2240dbb9a6202cf20768b853c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f4:f5:28:7c:81:76:c9:3a:cf:35:79:8a:49:
53:b2:4f:95:ce:b7:81:8b:20:33:17:92:04:f2:4f:
f4:31:44:28:bd:13:35:ed:b4:f9:9c:98:b7:a8:16:
9d:52:3b:01:1c:40:7d:9a:d8:03:91:d9:d1:c9:46:
f7:c4:ed:12:62:4d:d4:ff:eb:25:4a:ec:68:34:9d:
a4:aa:12:70:dc:0e:04:f8:9a:6e:22:49:1e:97:b5:
af:91:3a:0b:fa:3d:aa:d1:99:0b:5c:f8:22:7d:85:
e3:88:f7:2e:02:ba:56:38:7b:0b:9c:eb:bb:32:23:
4b:9a:74:05:e8:0d:95:87:a3:40:d5:06:ee:1b:f7:
91:64:26:93:09:5c:03:72:f3:fa:f7:21:6c:31:7d:
86:a2:2c:48:6c:57:c7:b1:a8:d0:0e:f5:a4:69:ed:
28:d4:9b:88:22:5f:be:74:48:ad:79:aa:0f:af:94:
c2:9b:0b:1c:df:32:95:fc:c8:1d:5f:3a:37:f0:5e:
0e:8a:ce:9e:2f:7d:0f:64:cc:e6:39:9e:15:41:35:
a2:73:ea:6f:1d:02:89:9c:6f:27:27:30:eb:94:2a:
92:51:12:62:3d:11:0f:75:ca:5d:d7:d9:3b:29:e7:
1b:f3:2f:76:2e:2f:e1:df:d2:0d:12:3f:d2:d2:de:
e7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:52:B5:7F:F7:66:1F:C2:24:0D:BB:9A:62:02:CF:20:76:8B:85:3C
X509v3 Authority Key Identifier:
keyid:D2:83:61:6F:13:62:C2:5D:82:EC:2A:70:C4:B9:75:05:65:B1:19:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/rVK1f_dmH8IkDbuaYgLPIHaLhTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.54.72.0/22
Signature Algorithm: sha256WithRSAEncryption
33:a6:29:d0:71:46:41:81:97:02:fe:fd:51:d1:da:1d:f8:67:
23:2e:ca:5a:0b:99:26:03:af:75:76:54:60:db:35:7e:b7:63:
49:9e:49:50:42:27:f7:f7:56:77:8e:b6:5d:04:c6:b1:96:d2:
d8:a1:74:cb:63:92:c4:f9:5e:94:5c:10:41:15:a5:15:f2:63:
4e:3c:f3:b5:d9:09:f8:d7:07:ed:0b:99:d9:8d:96:81:f1:15:
aa:3b:72:b0:da:a6:83:af:70:9d:be:4a:60:3c:a9:7d:21:4e:
e1:b5:12:54:46:6a:6f:2b:b9:d7:48:47:93:f2:11:02:71:72:
0b:a6:4f:7a:8f:c4:2d:27:d3:63:3b:15:6e:6f:f0:61:74:69:
c4:79:1b:d8:a9:6c:bb:32:b9:1d:0a:81:e6:e4:3f:95:47:0e:
29:09:c5:a4:e9:d1:c5:35:8b:af:80:5b:96:58:56:6f:7e:42:
53:ba:1e:1d:67:e1:dc:51:51:27:e3:9b:55:ad:41:08:c6:b0:
2a:7f:e3:6a:31:be:ea:9f:8f:f2:ea:28:42:d3:18:d1:5b:88:
17:c3:47:b0:23:2d:f0:40:44:00:9f:8d:8b:65:84:45:de:6a:
19:b9:6f:a6:f6:cf:5c:c1:19:65:22:d8:a9:11:ec:e6:70:d4:
78:f8:e8:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:08:27 2025 by rpki-client