Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/VuOgcoXRVgGZnVIdFVVIMNuJkfA.roa
File: VuOgcoXRVgGZnVIdFVVIMNuJkfA.roa (raw, json)
Hash identifier: eAmrBVrQfiVr9deEdEnjqxiLaOIBgGtZOc+6CJVvJtU=
Subject key identifier: 56:E3:A0:72:85:D1:56:01:99:9D:52:1D:15:55:48:30:DB:89:91:F0
Certificate issuer: /CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Certificate serial: 0194258F532EE8F2EF8E3F10AE9E8D572C19
Authority key identifier: 4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/VuOgcoXRVgGZnVIdFVVIMNuJkfA.roa
Signing time: Thu 02 Jan 2025 05:48:57 +0000
ROA not before: Thu 02 Jan 2025 05:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 399734
IP address blocks: 83.231.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:53:2e:e8:f2:ef:8e:3f:10:ae:9e:8d:57:2c:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Validity
Not Before: Jan 2 05:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=56e3a07285d15601999d521d15554830db8991f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1e:b6:76:c6:8e:d7:c7:6f:02:0f:5a:d9:87:
33:77:87:0a:28:5b:50:fb:3a:c1:43:09:3e:d0:d9:
d3:2e:1c:10:cf:c5:04:d6:eb:8f:e5:50:e6:60:f5:
87:9a:f1:5c:b9:f9:39:7e:6f:55:af:7a:3c:e4:87:
ac:86:4f:0f:48:49:a1:6b:60:e1:c9:c3:ca:a3:94:
0a:f0:a5:73:35:1b:f3:83:8a:04:37:fd:b8:5e:ab:
d8:d7:87:6a:80:8b:30:2a:7e:d7:db:fc:47:be:b1:
74:2b:8d:7a:1b:e0:05:6c:11:fb:77:02:6e:3f:13:
9d:2e:ad:d2:88:e1:21:0f:d5:9b:31:66:3b:12:33:
d0:3b:d1:b0:9b:8b:1f:4d:26:86:42:68:ba:a0:f9:
0f:ef:ec:e8:57:ae:f5:ae:07:62:58:52:1a:a4:e1:
d0:48:e1:2b:93:d1:e6:d3:a5:54:1d:b7:0c:f6:44:
b1:bd:c4:72:20:81:b5:e4:3d:da:4d:e5:4e:8b:ec:
4c:3c:80:cd:9b:41:1f:40:b4:97:3f:88:52:84:2d:
49:af:02:d2:31:e5:8f:5e:46:ef:fc:0a:4a:86:39:
3c:7c:b2:ed:e9:6a:52:43:d7:c0:6d:ac:2d:9b:a9:
74:13:a1:85:73:7b:8f:c1:c3:3d:19:55:e7:c3:cc:
3d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E3:A0:72:85:D1:56:01:99:9D:52:1D:15:55:48:30:DB:89:91:F0
X509v3 Authority Key Identifier:
keyid:4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/VuOgcoXRVgGZnVIdFVVIMNuJkfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.231.238.0/24
Signature Algorithm: sha256WithRSAEncryption
75:ea:4b:ab:b9:ce:02:a8:02:b7:ff:be:cd:64:cc:09:21:1d:
2c:15:37:54:f7:25:8a:bd:03:df:77:71:9b:92:80:9a:9a:14:
a3:f8:17:a8:67:1d:ba:29:13:63:20:a6:3a:35:dc:26:52:43:
47:23:22:66:55:3d:e8:24:70:c3:83:3f:49:08:06:b0:00:a3:
cc:a3:68:1c:c2:60:f4:d9:c0:aa:03:e2:b4:00:e6:4a:e1:9a:
af:1c:52:f8:18:71:c5:7a:ef:16:35:32:42:37:9a:24:87:20:
b9:79:c3:d8:80:10:19:ca:d8:2c:87:3c:cd:d5:60:51:65:74:
3e:fc:10:6c:fc:bf:1f:45:55:4e:a4:20:ff:74:4d:da:19:bb:
3e:01:cf:23:ab:39:4c:ed:c9:9f:12:e6:00:08:91:aa:a5:5e:
80:fb:97:e9:09:9c:14:f0:95:b1:4b:aa:9d:0f:d4:7c:8c:cf:
3d:4b:ba:81:83:5f:0e:39:00:6f:b5:fe:23:14:41:23:bf:6f:
a3:55:53:2e:f5:f6:00:11:97:a4:3c:68:8f:94:a8:85:23:42:
57:f1:5e:01:ce:e7:a3:86:2c:8e:e6:60:7d:b3:49:7e:70:c9:
23:a2:7a:71:89:0e:c0:12:fb:83:46:9c:e3:e7:e4:72:46:69:
95:fe:b3:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:35:24 2025 by rpki-client