Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/949daa-1ed1-4088-9c4b-52f8ff18d069/1/Vnw9H8iqt-gts3LY3CEVf7p6PaE.roa
File: Vnw9H8iqt-gts3LY3CEVf7p6PaE.roa (raw, json)
Hash identifier: s2vDBc3kUppwqWxQSMIljxY/yV7+Xm77EH+5A9yGbgM=
Subject key identifier: 56:7C:3D:1F:C8:AA:B7:E8:2D:B3:72:D8:DC:21:15:7F:BA:7A:3D:A1
Certificate issuer: /CN=dea85f21668a98d7e81a74183f0cce513086601b
Certificate serial: 019421443DAB31474AA6E3E734B629C1CECA
Authority key identifier: DE:A8:5F:21:66:8A:98:D7:E8:1A:74:18:3F:0C:CE:51:30:86:60:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3qhfIWaKmNfoGnQYPwzOUTCGYBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/949daa-1ed1-4088-9c4b-52f8ff18d069/1/Vnw9H8iqt-gts3LY3CEVf7p6PaE.roa
Signing time: Wed 01 Jan 2025 09:48:27 +0000
ROA not before: Wed 01 Jan 2025 09:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5089
IP address blocks: 193.36.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:3d:ab:31:47:4a:a6:e3:e7:34:b6:29:c1:ce:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dea85f21668a98d7e81a74183f0cce513086601b
Validity
Not Before: Jan 1 09:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=567c3d1fc8aab7e82db372d8dc21157fba7a3da1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:20:3b:21:84:93:2d:d7:28:94:4d:f6:22:f5:
26:08:98:65:2f:d8:43:50:37:18:1f:74:4e:b4:97:
06:1d:c2:2e:3c:07:3f:4f:1d:65:82:d5:5b:6b:f2:
66:ba:ae:fd:fe:49:c7:e5:b6:4f:91:bc:89:b4:13:
09:af:8b:4f:73:45:e5:7f:47:38:89:b5:95:0d:9e:
de:08:b5:07:43:9d:7e:3e:21:44:99:c1:4b:99:96:
d9:95:1c:68:92:d2:07:fe:f6:70:5c:4b:08:22:ba:
52:be:12:af:2d:4c:ed:cc:bf:53:cb:31:44:af:3f:
bc:96:7a:ba:a4:2c:b2:7e:52:e6:55:98:37:39:6b:
36:df:1e:83:72:44:3c:63:7e:b8:0c:1a:b6:9f:6e:
fb:99:de:7d:3f:12:78:bf:c9:e5:2e:a2:5a:d7:23:
f9:82:80:bf:48:fd:df:f4:fa:d5:aa:b8:b7:69:b6:
1f:9c:d4:72:1f:1a:3a:bb:ba:3d:a4:13:47:bc:d8:
c1:9b:9a:ec:64:1a:ed:1a:e8:ea:f1:40:15:cf:cf:
e8:01:9d:b0:f7:77:35:ee:c1:14:a0:62:88:8b:33:
30:f8:c8:bf:d9:37:49:41:d4:bb:f0:9f:14:d4:02:
cf:cc:69:f2:59:7c:ac:da:15:c8:5f:9c:1e:95:ca:
48:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:7C:3D:1F:C8:AA:B7:E8:2D:B3:72:D8:DC:21:15:7F:BA:7A:3D:A1
X509v3 Authority Key Identifier:
keyid:DE:A8:5F:21:66:8A:98:D7:E8:1A:74:18:3F:0C:CE:51:30:86:60:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3qhfIWaKmNfoGnQYPwzOUTCGYBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/949daa-1ed1-4088-9c4b-52f8ff18d069/1/Vnw9H8iqt-gts3LY3CEVf7p6PaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/949daa-1ed1-4088-9c4b-52f8ff18d069/1/3qhfIWaKmNfoGnQYPwzOUTCGYBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.51.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:2a:5e:10:9d:54:6a:f0:24:b9:f0:50:02:9c:72:14:08:16:
e2:8a:0a:6e:a6:35:8f:e4:23:74:50:ef:a1:66:3c:bb:fa:5c:
ef:9a:ca:46:f2:0c:3b:81:da:0a:ec:43:63:9a:7f:17:4e:f3:
c5:65:93:67:66:f8:ae:f1:19:b7:8e:e6:a1:f5:e7:a2:06:52:
89:b2:85:6b:83:ce:4f:4b:3b:1a:23:dd:e0:67:2c:7a:68:bd:
ff:04:cb:c3:64:40:82:96:6a:96:5c:1c:de:11:37:fe:a5:12:
51:b6:4a:70:26:9b:35:47:9e:05:18:ed:21:cd:ee:fd:9a:dc:
90:b7:1e:16:8a:a0:66:b5:49:ef:bd:01:02:e8:ab:0f:53:30:
f9:9a:3b:f7:59:da:46:29:02:6c:9e:94:1e:05:55:9e:80:7f:
c9:5b:ee:34:e3:21:dc:3c:62:ff:59:31:f0:40:d3:7f:01:72:
1a:fa:12:59:4f:4d:29:c8:94:f1:e4:2d:a4:e9:ef:96:8e:bf:
2c:1c:2f:2b:3b:53:7e:a0:dd:09:99:db:46:80:08:12:bd:9e:
67:a5:fc:0d:5a:e4:5a:a8:11:ad:e5:43:3b:37:1a:53:91:15:
79:26:a0:f7:e6:85:2c:b2:26:60:fe:9b:7f:30:62:95:89:27:
7c:29:3a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:48:37 2025 by rpki-client