Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vBftDZbML64VeECalm18GDeyimI.roa
File: vBftDZbML64VeECalm18GDeyimI.roa (raw, json)
Hash identifier: 7ZPqkIzdTdMhNeQenmbdGpIB8SFDxsS6ZvZeEmcRqT8=
Subject key identifier: BC:17:ED:0D:96:CC:2F:AE:15:78:40:9A:96:6D:7C:18:37:B2:8A:62
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0194B5E195E25C7BC47F72E9E388EB0927B6
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vBftDZbML64VeECalm18GDeyimI.roa
Signing time: Thu 30 Jan 2025 06:24:07 +0000
ROA not before: Thu 30 Jan 2025 06:24:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207279
IP address blocks: 79.110.51.0/24 maxlen: 24
94.154.162.0/24 maxlen: 24
109.206.239.0/24 maxlen: 24
193.37.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b5:e1:95:e2:5c:7b:c4:7f:72:e9:e3:88:eb:09:27:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 30 06:24:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc17ed0d96cc2fae1578409a966d7c1837b28a62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:61:b6:f6:05:08:62:96:5c:4e:8c:af:d9:8b:
e8:39:7a:86:29:b0:6f:d9:8b:44:68:9c:ac:d1:80:
45:d9:ef:29:fd:fc:5e:de:b4:67:dd:32:0f:2b:5d:
fa:c2:65:61:11:92:53:60:49:49:f9:68:05:29:cd:
83:09:41:79:d4:4d:9c:70:95:b5:07:16:c8:6a:f4:
f7:9a:e1:fd:4c:9f:cf:15:11:bb:8d:34:a2:c0:78:
34:fa:ef:9a:59:3e:d2:16:ca:e9:67:ff:70:ed:5a:
53:a3:12:bc:7e:8e:1b:53:0d:ac:de:93:aa:7b:4e:
9d:79:3e:b3:11:26:7e:e5:29:1b:a4:6f:2e:50:e5:
9f:18:79:1b:a3:4f:5b:cd:13:73:b2:d5:a9:bb:0c:
a8:73:11:21:73:84:3e:44:f6:97:54:bc:63:fa:20:
3a:fa:6b:74:f5:19:53:69:8a:5b:33:a4:c6:43:65:
55:d4:70:ed:26:a0:f4:04:52:41:b9:45:26:62:1d:
3c:fb:2d:6d:e6:13:cc:d2:bc:04:b6:8a:a4:9b:31:
fa:9f:1a:0d:0e:fd:09:ab:3c:bd:a5:64:bf:1e:28:
6d:a0:49:23:bd:5e:a3:aa:58:63:f3:35:8b:1a:1b:
af:fe:0c:1d:82:5d:00:b0:a4:ce:9d:43:e3:5a:06:
6b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:17:ED:0D:96:CC:2F:AE:15:78:40:9A:96:6D:7C:18:37:B2:8A:62
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vBftDZbML64VeECalm18GDeyimI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.51.0/24
94.154.162.0/24
109.206.239.0/24
193.37.40.0/24
Signature Algorithm: sha256WithRSAEncryption
54:b7:c3:5f:95:b3:50:3b:3c:6f:7f:c1:5d:27:ab:7f:f0:fc:
3f:93:46:11:eb:46:8c:35:28:06:a8:1e:04:5a:55:9c:eb:ac:
68:bf:86:b1:e6:fc:c0:ad:e5:fb:86:78:f8:c0:e6:e7:34:ec:
cc:9a:d5:71:15:1c:3d:28:55:27:d1:52:8a:96:62:13:8b:4c:
44:e6:98:c2:6d:ea:04:4e:11:b2:1f:df:76:b7:17:62:74:10:
7b:20:7c:a2:c7:e3:b6:aa:59:da:35:3f:b6:ad:25:9b:f6:a2:
4d:a7:bc:e8:74:ed:e6:98:0c:71:41:44:b7:e5:d1:3d:4a:5c:
d1:d3:73:fa:a8:f9:a8:c1:cc:65:80:a2:8d:c6:8c:34:c8:d2:
df:35:08:76:ab:38:bd:89:56:da:e6:65:a7:c3:a0:3a:88:08:
0c:7a:93:e7:63:46:49:c8:79:35:f2:e9:10:63:cb:7e:6e:a4:
5f:c1:d7:f2:5b:02:95:d7:4b:b0:66:58:4b:12:cc:06:28:f8:
78:e0:62:fe:30:67:ef:b5:d7:64:e3:fd:df:06:4a:27:35:92:
84:d3:ed:da:8c:4b:ae:21:6b:1b:bc:3b:87:d3:f0:c7:b4:1b:
83:ad:0b:61:55:5e:5a:99:b9:d0:f4:dc:c3:b6:33:a9:d2:b6:
f2:7f:1e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:34:36 2025 by rpki-client