Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/fefc97-81cf-4fe4-ac75-c44de5fd78ba/1/VaDOB8Q5CbmEHDyMCCzIKY6mh6Y.roa
File: VaDOB8Q5CbmEHDyMCCzIKY6mh6Y.roa (raw, json)
Hash identifier: KfKk6OrqnPTOpUdG7aNIjJbXm7A1V8lv6lpt81hfP0I=
Subject key identifier: 55:A0:CE:07:C4:39:09:B9:84:1C:3C:8C:08:2C:C8:29:8E:A6:87:A6
Certificate issuer: /CN=bc69e2061e8c7cee42efa4fef9f30f7bf6f6d053
Certificate serial: 018217657CE6498499EF71343DBCCC7197F4
Authority key identifier: BC:69:E2:06:1E:8C:7C:EE:42:EF:A4:FE:F9:F3:0F:7B:F6:F6:D0:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGniBh6MfO5C76T--fMPe_b20FM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/fefc97-81cf-4fe4-ac75-c44de5fd78ba/1/VaDOB8Q5CbmEHDyMCCzIKY6mh6Y.roa
Signing time: Tue 19 Jul 2022 16:58:23 +0000
ROA not before: Tue 19 Jul 2022 16:58:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 193.187.108.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:17:65:7c:e6:49:84:99:ef:71:34:3d:bc:cc:71:97:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc69e2061e8c7cee42efa4fef9f30f7bf6f6d053
Validity
Not Before: Jul 19 16:58:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=55a0ce07c43909b9841c3c8c082cc8298ea687a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:47:7f:19:bd:c2:c1:d1:b4:83:30:aa:52:b7:
15:0e:7c:14:94:a8:dd:66:2d:fa:4e:45:6f:4c:b6:
72:73:73:3a:42:e6:0b:70:e0:8c:14:1f:8a:64:b5:
26:c9:e6:ae:2f:09:8c:4f:38:0d:da:cf:56:9e:3a:
44:0c:f2:ee:d9:8b:a0:d7:69:69:cd:df:a4:c5:0b:
07:4d:74:20:21:36:14:f0:b0:3e:34:05:c5:ba:c9:
31:56:6f:9b:ab:3f:95:30:16:9e:21:b0:d4:9e:3a:
87:b4:2f:f6:5f:9c:03:0a:2b:6d:f6:da:a4:b2:8c:
78:93:0c:37:d3:58:dd:42:a4:15:57:fc:03:d8:0c:
d4:64:d5:be:3c:b7:c6:98:6a:49:ba:a3:b4:f5:a0:
90:54:40:77:92:f1:05:39:32:94:26:fb:cc:64:fb:
b7:f5:07:aa:8d:4f:f0:4f:e1:21:85:f4:e3:18:1d:
73:9d:30:5e:b1:aa:5a:6a:8a:e0:59:a1:2b:f4:5f:
28:04:26:d9:a1:9a:b5:24:36:19:52:df:4c:0a:ae:
d7:1d:44:23:07:42:63:fb:63:e4:8f:e1:6f:80:d9:
ff:9a:1f:5c:08:72:69:7c:76:4a:0f:4b:a0:65:f9:
fc:df:55:f4:d3:74:3d:0e:b8:7e:12:5b:e4:4c:1a:
b0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:A0:CE:07:C4:39:09:B9:84:1C:3C:8C:08:2C:C8:29:8E:A6:87:A6
X509v3 Authority Key Identifier:
keyid:BC:69:E2:06:1E:8C:7C:EE:42:EF:A4:FE:F9:F3:0F:7B:F6:F6:D0:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGniBh6MfO5C76T--fMPe_b20FM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fefc97-81cf-4fe4-ac75-c44de5fd78ba/1/VaDOB8Q5CbmEHDyMCCzIKY6mh6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fefc97-81cf-4fe4-ac75-c44de5fd78ba/1/vGniBh6MfO5C76T--fMPe_b20FM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.187.108.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:d7:f3:71:18:94:27:f8:71:94:f8:a5:9a:aa:0d:21:a3:00:
2b:87:7e:33:43:69:16:63:1c:4d:5e:16:05:4a:96:cc:c3:ba:
a4:80:94:94:8c:8a:7a:be:d3:5e:9a:da:e0:90:b3:e4:a8:f2:
a0:12:80:2b:ac:2a:b3:56:84:6e:00:da:7e:9c:8b:9c:3e:0c:
c1:d2:b9:5b:6c:1f:fa:1f:75:5f:a6:ed:68:2d:3a:2d:ad:1f:
8c:f7:04:51:7b:f0:4a:32:ad:04:ec:7f:68:32:b2:f6:bb:fc:
a3:0f:ee:3a:11:fb:45:4b:7d:b2:0f:63:93:09:6b:c5:67:45:
34:9f:50:6c:ce:5f:07:24:35:bb:ac:2a:51:7e:0f:04:df:a8:
0e:0f:78:69:46:a6:0c:54:2a:38:c7:e6:de:e2:4d:76:0a:c9:
46:3e:9c:78:2c:cc:c4:76:76:66:c2:0d:a7:27:ee:82:e7:85:
5a:b0:d2:c1:e1:b0:44:96:e1:4a:be:a3:8b:77:d6:ff:cf:af:
8e:e2:7e:a4:6d:e6:95:db:d2:91:61:9a:aa:1b:1e:06:12:d7:
47:87:06:79:c8:ce:43:a9:eb:4c:8a:d5:2d:01:04:47:34:a0:
41:5d:49:04:d1:de:7a:b1:53:15:29:ea:bc:58:f7:74:04:6c:
49:84:b3:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:15:05 2025 by rpki-client