Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/VyPRPElyLMa64hjFDMtKRmA01ZE.roa
File: VyPRPElyLMa64hjFDMtKRmA01ZE.roa (raw, json)
Hash identifier: +7F5UqAf5wUUZwuFkWwjFywpzFhfs0Yb0eBzU06/pPY=
Subject key identifier: 57:23:D1:3C:49:72:2C:C6:BA:E2:18:C5:0C:CB:4A:46:60:34:D5:91
Certificate issuer: /CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Certificate serial: 0194236A02C030C4F1A8D30FFC3BD92EEBB0
Authority key identifier: 1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/VyPRPElyLMa64hjFDMtKRmA01ZE.roa
Signing time: Wed 01 Jan 2025 19:48:57 +0000
ROA not before: Wed 01 Jan 2025 19:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216246
IP address blocks: 77.221.151.0/24 maxlen: 24
109.120.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:02:c0:30:c4:f1:a8:d3:0f:fc:3b:d9:2e:eb:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Validity
Not Before: Jan 1 19:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5723d13c49722cc6bae218c50ccb4a466034d591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8a:f3:31:f9:a7:34:79:a4:32:0d:55:34:d1:
43:e7:50:8e:51:4f:35:98:12:61:70:97:23:f0:68:
be:ea:e8:73:4c:e1:e0:14:d7:fe:44:9c:ed:8e:e2:
37:7e:c3:d5:80:cc:d6:91:67:df:f0:b0:af:69:8f:
a7:2e:66:13:d3:f7:3a:95:46:09:fb:1d:03:cd:92:
dc:4b:1d:5a:7c:c2:64:3d:18:b8:9b:26:33:7f:0b:
d9:2a:f8:8f:3b:56:c7:8f:8a:32:4e:05:84:f1:03:
25:42:04:a7:6f:1d:07:58:2b:21:91:c2:5a:64:18:
3c:95:f3:02:66:c1:58:16:68:51:0d:97:6b:fb:e3:
e1:c8:ab:c3:e3:1d:72:0d:88:b3:ee:b5:0b:3d:a9:
bc:ef:e8:c0:de:51:e6:9d:92:f4:9c:7b:69:3e:83:
76:d1:1d:4c:33:47:3b:17:db:27:cf:80:e6:c2:fe:
d8:16:fa:d8:48:13:f0:f5:e0:71:93:90:15:bd:13:
7d:75:c9:8e:f9:36:85:92:fc:4e:64:00:7b:67:ae:
8f:37:c1:a4:ae:ad:0e:d3:59:c6:f7:d5:c0:16:f8:
20:6f:4a:25:67:20:ac:28:97:08:19:ea:93:76:a0:
c6:54:05:14:b5:55:8c:5a:df:ed:1a:c4:88:74:b6:
a0:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:23:D1:3C:49:72:2C:C6:BA:E2:18:C5:0C:CB:4A:46:60:34:D5:91
X509v3 Authority Key Identifier:
keyid:1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/VyPRPElyLMa64hjFDMtKRmA01ZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.221.151.0/24
109.120.152.0/24
Signature Algorithm: sha256WithRSAEncryption
00:b7:9f:7c:2c:54:60:15:4a:af:e3:cf:93:3d:8d:b7:2c:0a:
8f:93:ba:a3:f2:c2:90:1c:13:32:87:3a:2b:6b:8f:44:4e:4b:
e5:b6:e4:94:f5:13:23:8d:96:19:a1:c9:93:ab:4e:69:cf:fb:
9a:36:30:fb:53:99:55:2f:82:3e:e2:9d:4e:f9:e1:d2:3f:c9:
a9:12:78:18:25:06:3e:cc:f5:08:12:4f:82:fb:c2:c0:62:f1:
20:ec:80:9e:c6:7a:cd:ce:ff:fd:0a:73:10:f7:48:ce:72:09:
15:25:64:cf:99:2c:ac:55:96:09:34:86:57:83:0c:52:43:01:
56:a4:67:e4:00:91:ba:16:74:91:b6:f4:9d:bf:d6:db:4b:18:
4c:32:ad:00:18:9b:5c:f2:c0:60:3c:c2:f6:42:0c:07:2f:45:
5b:2d:f0:41:f7:5f:e4:55:e6:46:5a:54:fc:0d:e1:97:4c:31:
ac:a1:a3:5c:79:7e:d3:e7:63:7f:65:9c:b9:3b:8f:2b:a6:ac:
3c:a6:13:29:bc:17:6c:31:b5:b8:16:6b:42:25:48:13:7f:34:
71:24:4a:5c:8d:ca:e2:b2:92:09:77:2b:6b:63:07:3a:92:21:
87:04:1d:69:c9:cf:d0:a7:82:2f:5d:a9:33:87:0f:45:71:03:
44:11:91:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:06:03 2025 by rpki-client