Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/VgQVNXTLznzmHsP79v3Zsr2IWwU.roa
File: VgQVNXTLznzmHsP79v3Zsr2IWwU.roa (raw, json)
Hash identifier: V8Zv8ak7cEH62i1TGjfWmCMowy8kun9bTSlwi87+E9s=
Subject key identifier: 56:04:15:35:74:CB:CE:7C:E6:1E:C3:FB:F6:FD:D9:B2:BD:88:5B:05
Certificate issuer: /CN=75386a6fae1e55f576a405bd74b7f08e7a6c4653
Certificate serial: 0194266BE4A09D10A029B97982D5FEFAB85C
Authority key identifier: 75:38:6A:6F:AE:1E:55:F5:76:A4:05:BD:74:B7:F0:8E:7A:6C:46:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dThqb64eVfV2pAW9dLfwjnpsRlM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/VgQVNXTLznzmHsP79v3Zsr2IWwU.roa
Signing time: Thu 02 Jan 2025 09:49:52 +0000
ROA not before: Thu 02 Jan 2025 09:49:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 84.252.112.0/24 maxlen: 24
84.252.113.0/24 maxlen: 24
84.252.114.0/24 maxlen: 24
84.252.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:e4:a0:9d:10:a0:29:b9:79:82:d5:fe:fa:b8:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75386a6fae1e55f576a405bd74b7f08e7a6c4653
Validity
Not Before: Jan 2 09:49:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5604153574cbce7ce61ec3fbf6fdd9b2bd885b05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:be:26:ac:18:41:76:11:b1:4e:fb:08:02:46:
90:74:97:07:e2:5d:86:7f:fc:07:4a:14:fd:26:ab:
75:5c:31:b0:e0:f0:8e:01:87:da:7c:64:2d:2c:04:
b2:8f:3f:f6:17:b8:cf:16:54:c2:d2:2a:fe:6f:fd:
a4:0b:df:0e:69:12:7c:91:27:d7:4a:20:1e:fc:9a:
09:59:ec:02:c9:2e:f2:39:c5:8d:5c:cb:ea:10:22:
0d:94:88:f9:77:54:5d:b2:76:37:92:eb:cb:2a:43:
13:b8:d6:e5:0c:37:bc:ac:45:fa:e1:c5:ed:c4:3f:
ce:21:61:c7:a3:a1:e1:ee:e3:90:5d:72:79:23:12:
9e:cd:69:ce:1a:db:64:54:92:19:23:c2:fe:63:9b:
36:e3:ef:68:57:c6:34:7d:99:45:37:e0:6d:ae:c0:
80:48:85:9d:ea:de:86:67:4a:bd:09:85:d7:b3:25:
6c:e5:55:f7:14:ff:6f:8a:33:8a:f7:d7:12:49:46:
5f:df:a7:cb:b5:ec:1e:41:99:d6:99:e2:29:20:e9:
ad:e3:da:d4:61:04:78:f9:38:11:2d:47:ba:78:58:
99:95:67:df:07:55:66:97:31:c4:bc:ae:fd:68:2d:
85:d6:27:ab:27:18:c9:4e:8e:38:a0:44:be:d0:df:
5a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:04:15:35:74:CB:CE:7C:E6:1E:C3:FB:F6:FD:D9:B2:BD:88:5B:05
X509v3 Authority Key Identifier:
keyid:75:38:6A:6F:AE:1E:55:F5:76:A4:05:BD:74:B7:F0:8E:7A:6C:46:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dThqb64eVfV2pAW9dLfwjnpsRlM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/VgQVNXTLznzmHsP79v3Zsr2IWwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.252.112.0/22
Signature Algorithm: sha256WithRSAEncryption
b3:b4:71:10:c8:a4:67:30:fd:30:be:b1:d3:6a:6a:a2:50:a6:
39:d0:ed:5c:eb:63:cd:53:a4:7f:3c:b2:6f:8b:99:d2:6b:ac:
4e:0e:81:eb:bc:bf:c9:1d:35:65:9a:fd:3a:42:5d:b1:7f:41:
35:8d:e3:0f:12:6b:7d:0a:9c:cc:15:d9:2b:03:08:78:0f:6a:
db:43:0c:e9:40:c9:1f:ae:ad:3f:b4:ed:6e:9d:7f:e4:9b:38:
11:7c:0f:e0:8d:87:67:dc:08:22:54:71:c1:bd:ef:a6:cd:26:
8c:4a:87:31:57:95:c3:0a:0d:d9:26:0f:dc:e0:81:41:5b:15:
ae:6d:12:fe:b0:32:49:73:39:25:44:22:5a:a2:31:e9:aa:e3:
e9:d3:12:27:ab:35:93:eb:dc:35:51:78:d3:5b:3a:bb:4c:8d:
62:75:20:41:0e:62:fb:34:fd:10:95:25:3c:74:0d:55:ed:85:
57:70:ad:54:c9:20:b1:42:4a:4b:73:b3:85:ae:c6:b0:10:d7:
e3:af:de:18:f1:35:5a:35:99:4e:64:af:f4:fb:8f:52:9f:f7:
85:ac:9a:5d:4b:a7:1c:a4:70:68:e1:fe:60:55:0d:62:e3:ee:
a3:ba:39:4d:97:41:af:a9:24:13:5c:61:3b:ef:46:9d:2a:68:
21:0c:74:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 07:47:27 2025 by rpki-client