Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/vyP9hbS_76ZrupwSMef0B1pOVPk.roa
File: vyP9hbS_76ZrupwSMef0B1pOVPk.roa (raw, json)
Hash identifier: f7AZEySBA5XegD3mdK9pluMntAOS8jT+L60Mq8N3IVs=
Subject key identifier: BF:23:FD:85:B4:BF:EF:A6:6B:BA:9C:12:31:E7:F4:07:5A:4E:54:F9
Certificate issuer: /CN=659a6b975eafd2ce51468723814355f56c55bafb
Certificate serial: 019427B5EADA057868169A254776ABA1DA1A
Authority key identifier: 65:9A:6B:97:5E:AF:D2:CE:51:46:87:23:81:43:55:F5:6C:55:BA:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZprl16v0s5RRocjgUNV9WxVuvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/vyP9hbS_76ZrupwSMef0B1pOVPk.roa
Signing time: Thu 02 Jan 2025 15:50:21 +0000
ROA not before: Thu 02 Jan 2025 15:50:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9121
IP address blocks: 194.125.232.0/22 maxlen: 24
194.125.232.0/24 maxlen: 24
194.125.233.0/24 maxlen: 24
194.125.234.0/24 maxlen: 24
194.125.235.0/24 maxlen: 24
194.242.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:ea:da:05:78:68:16:9a:25:47:76:ab:a1:da:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=659a6b975eafd2ce51468723814355f56c55bafb
Validity
Not Before: Jan 2 15:50:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bf23fd85b4bfefa66bba9c1231e7f4075a4e54f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1f:9f:1d:07:84:f5:7c:a2:9a:8e:18:76:d6:
c7:de:e3:dd:12:00:68:0c:91:23:f1:9c:1f:24:67:
91:90:67:57:0b:c0:f4:24:5e:52:21:71:c3:c4:ca:
fc:62:50:55:8a:71:29:0c:e4:ea:2b:78:8c:a4:75:
a1:cf:0d:7e:ea:28:c6:18:8c:af:11:d7:bf:32:70:
77:69:3a:94:60:9c:64:55:72:6b:e6:4b:cf:b1:1c:
63:15:b0:22:fb:e8:ed:eb:9c:4d:d5:34:01:65:5f:
7f:fc:44:23:a5:6f:3b:05:83:12:12:d8:68:37:c2:
15:5e:76:03:ef:bf:8e:bb:31:fa:2a:47:4c:87:24:
5c:87:71:96:e9:11:ee:89:40:74:66:2b:7c:cb:57:
47:f8:19:ba:68:44:61:d1:dc:5e:30:d0:29:41:19:
d8:aa:56:dd:74:eb:92:6c:a4:9d:0b:f5:88:bb:8f:
b9:88:ea:cc:70:68:cd:8f:c2:3c:47:f8:ce:30:28:
f6:c2:f1:f0:a8:2b:e6:07:28:10:08:96:4c:22:e6:
b6:b4:bd:0e:77:e1:6b:3c:ad:06:24:16:93:2a:7a:
a2:82:69:20:a6:5a:1f:c4:bd:56:94:4a:84:bc:50:
4d:ad:44:5f:97:cf:f7:7d:21:23:b6:cd:9d:6a:e0:
52:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:23:FD:85:B4:BF:EF:A6:6B:BA:9C:12:31:E7:F4:07:5A:4E:54:F9
X509v3 Authority Key Identifier:
keyid:65:9A:6B:97:5E:AF:D2:CE:51:46:87:23:81:43:55:F5:6C:55:BA:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZprl16v0s5RRocjgUNV9WxVuvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/vyP9hbS_76ZrupwSMef0B1pOVPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.125.232.0/22
194.242.32.0/24
Signature Algorithm: sha256WithRSAEncryption
02:a3:f1:17:ec:8e:d9:98:3a:9b:15:1e:15:f7:15:01:25:9c:
1b:9e:1a:f6:81:41:86:de:13:0d:52:95:e9:5a:4f:7e:99:31:
0a:a2:87:63:c2:af:fc:74:dc:a2:0a:23:a1:37:06:4e:54:ae:
9e:71:f3:75:4e:fb:89:6f:44:d5:f7:f1:62:a8:fa:4a:13:73:
75:48:26:03:62:71:e8:78:39:06:6f:18:8b:c4:a9:54:19:4a:
27:27:08:c2:d3:1c:96:45:a5:88:c6:2c:ac:cd:62:ae:71:7c:
87:48:a8:37:29:5e:82:b8:e8:e6:44:8d:7f:48:12:b7:cc:89:
03:8e:be:c5:9f:6e:1f:20:88:65:6b:38:75:4e:1b:9a:6c:20:
0d:e3:d5:34:d6:37:4e:00:35:a8:11:9b:cd:74:15:8c:ba:b9:
c8:79:6f:a8:83:9e:3d:5f:50:a0:15:73:f6:7d:8e:34:2f:40:
72:d8:d7:a1:10:e1:34:1c:65:a2:bf:09:13:c0:c3:2a:0f:53:
29:04:19:bb:6d:56:4d:97:94:4e:18:df:d3:cc:bb:24:b7:a4:
15:a3:d8:12:b6:e2:d7:29:f6:38:ee:bd:fd:63:ee:51:cc:8e:
4b:25:6c:ae:89:1d:75:f4:7e:16:f5:ec:03:66:5b:7b:19:61:
7c:1e:8a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:58:57 2025 by rpki-client