Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/VYJ9qKilNSj9Z30pGpYaNAGU4Z0.roa
File: VYJ9qKilNSj9Z30pGpYaNAGU4Z0.roa (raw, json)
Hash identifier: j29BGrdUX9gZWLn/MqLu3C1IYATOJG6BtpBREfenzkc=
Subject key identifier: 55:82:7D:A8:A8:A5:35:28:FD:67:7D:29:1A:96:1A:34:01:94:E1:9D
Certificate issuer: /CN=b40d494333cb4d9e5fd10c846c47cf56445c503a
Certificate serial: 019423D7E8B21937A642D86BD74D9A09B892
Authority key identifier: B4:0D:49:43:33:CB:4D:9E:5F:D1:0C:84:6C:47:CF:56:44:5C:50:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/VYJ9qKilNSj9Z30pGpYaNAGU4Z0.roa
Signing time: Wed 01 Jan 2025 21:48:59 +0000
ROA not before: Wed 01 Jan 2025 21:48:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203068
IP address blocks: 185.145.176.0/24 maxlen: 24
185.145.177.0/24 maxlen: 24
185.145.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:e8:b2:19:37:a6:42:d8:6b:d7:4d:9a:09:b8:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b40d494333cb4d9e5fd10c846c47cf56445c503a
Validity
Not Before: Jan 1 21:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=55827da8a8a53528fd677d291a961a340194e19d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:74:7f:67:d6:29:75:95:93:e2:1e:d1:b4:9d:
3a:52:97:dc:dc:58:e1:64:ef:97:a7:24:b3:ff:6e:
32:40:4c:49:ba:a8:9d:8a:79:52:a4:09:39:c9:9c:
78:55:6b:5e:88:4c:35:ce:77:c7:e6:9d:38:4d:18:
89:58:d0:34:c6:d0:ef:fd:ca:6e:0e:d6:3e:b0:29:
bf:ac:d7:c6:f0:e5:9c:b4:87:09:48:84:6b:8d:f0:
81:51:34:12:30:bc:e8:30:13:5c:e8:3c:bd:77:4f:
55:ad:69:df:5b:e5:56:5c:b5:52:75:11:36:50:2b:
99:1c:31:b1:54:58:c4:ab:b3:46:15:78:42:75:c2:
bb:b5:91:94:83:b4:82:3c:12:14:3e:b6:59:4c:8d:
7e:56:55:7f:4c:14:e5:1e:17:a7:22:69:2c:bb:40:
21:c6:69:0e:da:cf:ca:c2:81:7a:7c:13:74:ca:d8:
0c:3d:ea:98:9c:13:e5:02:b9:5c:a1:29:73:68:4f:
a3:9b:ab:05:34:52:c3:dd:eb:f3:ef:81:f5:46:75:
14:78:73:34:c5:ab:9e:ae:6b:f5:35:fb:d0:d0:c4:
94:6b:dc:4f:90:f4:1e:85:68:81:52:6f:fb:90:ec:
0c:e6:18:f4:e6:f1:3d:0e:f2:8a:63:da:49:59:07:
19:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:82:7D:A8:A8:A5:35:28:FD:67:7D:29:1A:96:1A:34:01:94:E1:9D
X509v3 Authority Key Identifier:
keyid:B4:0D:49:43:33:CB:4D:9E:5F:D1:0C:84:6C:47:CF:56:44:5C:50:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/VYJ9qKilNSj9Z30pGpYaNAGU4Z0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.145.176.0/23
185.145.179.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:91:5f:b0:27:fe:33:73:06:ad:21:bf:8b:fb:b9:cd:b2:c7:
28:c6:68:d2:cd:28:6e:92:8a:46:2e:b6:8f:26:2e:88:a2:66:
62:65:8f:ad:75:77:8b:7a:4e:78:bd:d0:4e:64:d0:3d:d8:05:
97:d2:a8:99:ba:3f:a7:d9:6f:ba:98:52:78:87:d3:1a:b0:8d:
63:20:e4:d2:11:6e:47:a6:15:9a:99:aa:1d:86:e2:36:dc:40:
bb:8f:46:fd:62:63:5a:5a:44:fb:c3:8e:2a:e2:61:45:45:26:
32:05:be:3f:e0:f6:9b:d9:5d:03:c8:92:a8:59:a1:e0:0c:6f:
d8:99:e3:cb:0d:e3:32:ce:5e:75:9f:af:66:c1:96:a8:d5:6c:
dc:fa:72:36:78:82:ea:bd:4b:f9:34:37:46:8b:c7:d1:db:cc:
96:2f:1d:de:e8:ae:62:ee:32:c8:c2:b2:20:89:1a:7d:a2:0b:
7b:d8:81:7f:b0:9d:30:2f:25:45:30:d5:b2:08:f1:d1:d1:11:
4f:37:4d:1e:f7:e1:7c:71:92:65:ea:57:5d:39:d5:60:47:3e:
92:01:31:01:9f:77:9b:84:c5:b9:3f:70:a5:d3:e6:b5:c2:c1:
6d:9d:54:66:cf:9d:d5:bd:a8:2b:36:2b:38:2b:48:d5:6a:58:
85:d1:e1:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:58:41 2025 by rpki-client