Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/vlECbF8HkBG6WpBhMBZnOl_AraI.roa
File: vlECbF8HkBG6WpBhMBZnOl_AraI.roa (raw, json)
Hash identifier: 3UR9pQsXBE1n+38LaDwJGSYsS95ZptnvsHsDatSDo+E=
Subject key identifier: BE:51:02:6C:5F:07:90:11:BA:5A:90:61:30:16:67:3A:5F:C0:AD:A2
Certificate issuer: /CN=a934b8dec1281bc54317c7fed0e9acbc7b97cac7
Certificate serial: 0194221FB825839747FE5065E1FE2DDF692F
Authority key identifier: A9:34:B8:DE:C1:28:1B:C5:43:17:C7:FE:D0:E9:AC:BC:7B:97:CA:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qTS43sEoG8VDF8f-0OmsvHuXysc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/vlECbF8HkBG6WpBhMBZnOl_AraI.roa
Signing time: Wed 01 Jan 2025 13:48:11 +0000
ROA not before: Wed 01 Jan 2025 13:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57761
IP address blocks: 185.27.216.0/24 maxlen: 24
185.27.217.0/24 maxlen: 24
185.27.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:b8:25:83:97:47:fe:50:65:e1:fe:2d:df:69:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a934b8dec1281bc54317c7fed0e9acbc7b97cac7
Validity
Not Before: Jan 1 13:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=be51026c5f079011ba5a90613016673a5fc0ada2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:cc:be:66:d9:25:86:53:01:0d:e4:69:ce:bc:
f1:c5:7c:96:a5:cb:d1:67:fc:8d:88:06:e0:32:ac:
4e:09:ec:b2:85:2d:fe:cd:14:a3:52:72:fa:f2:46:
36:95:66:80:ae:51:aa:81:06:6c:ca:3e:e3:f1:1c:
2d:f5:7d:77:d7:94:19:9e:88:6d:c2:5d:ea:54:c1:
26:e1:87:c1:33:c4:32:af:5c:c7:13:aa:93:e8:a7:
dc:4b:d0:64:d4:69:78:a4:39:06:d9:21:71:50:82:
38:6e:50:6a:5a:09:1c:18:58:91:02:a8:eb:5d:a1:
f3:a7:fe:d4:86:cc:d0:58:07:34:da:5f:cb:28:f0:
a3:d7:44:48:51:46:73:7f:7e:21:e5:a2:ce:84:bc:
3c:7e:ad:93:84:75:b9:8c:a9:2f:3d:cd:49:4b:86:
71:d3:27:f5:1f:48:3c:58:d1:1d:be:5f:12:90:1d:
ec:c4:a1:a3:1c:63:1c:31:ed:50:38:84:49:20:3a:
a2:1d:f7:9d:b3:ec:f5:2d:77:a5:af:32:ef:b9:ea:
88:89:d4:04:d4:a5:08:a3:14:3d:fa:68:21:4c:fc:
29:37:95:49:53:fe:64:0b:e6:a5:25:8c:eb:26:30:
96:88:02:11:6a:b1:b1:6d:b0:fa:e6:83:30:e2:ac:
cf:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:51:02:6C:5F:07:90:11:BA:5A:90:61:30:16:67:3A:5F:C0:AD:A2
X509v3 Authority Key Identifier:
keyid:A9:34:B8:DE:C1:28:1B:C5:43:17:C7:FE:D0:E9:AC:BC:7B:97:CA:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qTS43sEoG8VDF8f-0OmsvHuXysc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/vlECbF8HkBG6WpBhMBZnOl_AraI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.27.216.0/23
185.27.219.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:6b:68:e6:04:ea:d3:13:2e:7b:34:83:56:df:b7:be:30:99:
14:17:a6:ed:12:7f:d7:70:8f:c4:2d:81:67:54:fa:3d:5e:84:
12:ca:6d:13:ab:5f:71:46:43:7d:5e:7c:fa:cf:9a:ae:cd:1b:
97:6c:6e:1d:21:ef:9f:1b:2b:98:e1:65:f7:af:9f:15:ba:08:
51:8a:0b:1f:c2:78:1e:2f:56:61:48:46:43:5e:2e:c1:99:d7:
0c:cf:bc:61:bb:d0:95:84:e7:fe:4f:b7:c2:79:0b:8c:d0:dd:
8b:59:43:43:e1:d5:0c:6b:a9:43:e2:0b:84:f1:e6:83:af:ac:
31:bb:5b:30:e7:30:56:66:72:08:23:e2:77:42:2a:f8:b6:9e:
cb:45:59:b6:20:c1:a8:7a:fb:66:69:2c:96:62:ad:fe:14:f2:
a4:0f:07:d2:64:11:29:9e:15:57:80:04:82:fc:d3:b7:06:32:
6c:72:fc:8e:25:a3:94:0b:21:64:f1:21:b0:99:af:56:90:51:
e9:db:95:f7:8e:42:18:eb:4e:d4:1c:42:f6:13:7e:95:de:2e:
98:d1:6e:de:17:48:61:00:7d:25:3c:7d:64:0a:13:9c:d5:e5:
db:de:47:f4:6d:0e:81:66:4f:c6:2d:5b:d9:f0:b8:93:d9:2d:
9e:a9:10:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:35:25 2025 by rpki-client