Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/vZ4v2lo2-sXeStle6vqKr87Cnyw.roa
File: vZ4v2lo2-sXeStle6vqKr87Cnyw.roa (raw, json)
Hash identifier: iuW5h9zDLSCcSeiWR+xV0dE4RiZoDLZqiq7ZP9qa/2g=
Subject key identifier: BD:9E:2F:DA:5A:36:FA:C5:DE:4A:D9:5E:EA:FA:8A:AF:CE:C2:9F:2C
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 0194206806CEA7F407A8DC540583E9A34B31
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/vZ4v2lo2-sXeStle6vqKr87Cnyw.roa
Signing time: Wed 01 Jan 2025 05:47:55 +0000
ROA not before: Wed 01 Jan 2025 05:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198513
IP address blocks: 185.227.81.0/24 maxlen: 24
194.146.45.0/24 maxlen: 24
2a0b:3c40:13::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:06:ce:a7:f4:07:a8:dc:54:05:83:e9:a3:4b:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Jan 1 05:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bd9e2fda5a36fac5de4ad95eeafa8aafcec29f2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:81:6c:68:58:5c:11:30:58:96:4b:be:80:1e:
ec:9b:18:87:c0:e8:b1:74:a8:56:f3:a6:48:37:78:
0f:50:66:57:22:63:8f:b6:f0:58:10:c4:20:3a:0d:
7d:7c:81:9a:58:a7:6d:e5:17:6d:36:86:22:24:9c:
95:90:b5:b4:6b:ca:d4:f2:72:bd:c3:3b:8a:b7:3f:
d9:37:89:7c:32:e5:c7:39:b7:2d:6e:cc:25:94:d3:
4b:8c:c6:ae:9c:ea:13:e8:88:21:6d:d4:da:36:d6:
10:3e:0a:79:c1:91:06:55:84:c2:c3:d0:e6:78:14:
ec:2d:75:38:44:94:75:b3:76:be:62:e8:04:d4:37:
3a:33:8e:db:78:b4:0f:c0:04:25:ce:10:6f:96:82:
12:89:0e:f2:93:89:3f:b2:a0:73:a3:75:1d:91:2a:
bd:3a:69:ba:f1:4c:63:51:dc:66:ae:29:50:e9:ad:
26:5e:cc:81:bd:b3:34:ab:9a:35:76:d8:f8:d0:c9:
7a:5f:76:75:d3:9e:cd:f8:8c:33:44:2c:0b:f1:2d:
91:91:7d:81:cb:76:36:6e:e8:e2:1c:0d:cf:ea:b6:
3c:29:64:06:e3:71:91:fa:db:a7:30:92:0a:f9:8e:
54:b7:69:5b:8b:c2:ac:0d:59:cc:02:c1:87:a5:fc:
23:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:9E:2F:DA:5A:36:FA:C5:DE:4A:D9:5E:EA:FA:8A:AF:CE:C2:9F:2C
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/vZ4v2lo2-sXeStle6vqKr87Cnyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.227.81.0/24
194.146.45.0/24
IPv6:
2a0b:3c40:13::/48
Signature Algorithm: sha256WithRSAEncryption
6a:08:8b:ae:b9:b9:76:f4:e6:98:62:9c:83:17:ee:b5:9b:f6:
d6:d3:d4:c0:05:49:ee:05:44:12:2e:3d:db:c0:4e:b7:ad:c0:
ab:24:06:5d:21:b2:90:49:a6:5f:bb:6e:a2:0a:4d:d1:85:3f:
b5:e6:83:96:13:c3:91:25:30:01:7c:10:c7:94:07:9b:51:0b:
06:ba:08:4b:53:80:4a:28:80:bf:2d:ce:65:5c:db:2c:13:b0:
4a:df:17:34:02:f4:c1:de:d8:3e:17:a2:1d:a0:12:04:06:bf:
a4:b5:b3:89:4d:71:42:2d:84:68:a7:2d:9c:9c:5f:35:01:11:
8e:6b:88:27:36:ba:7a:46:c0:d2:e4:46:0d:94:ec:fc:c3:2c:
40:1c:58:37:ac:ae:b2:6c:76:11:7f:7b:d5:0f:3e:88:f1:5e:
74:04:22:26:64:de:1f:1b:c1:55:40:2f:00:e1:17:34:29:6c:
23:51:74:1b:f5:b0:6e:8a:07:c8:7e:39:a3:2c:6a:f8:14:82:
26:47:1a:48:46:08:55:61:99:ef:26:cf:d0:1c:2f:bf:8e:9f:
8a:51:50:e0:38:90:ea:bf:01:9c:83:94:f9:8a:f6:b9:1c:74:
0c:eb:6d:4c:2e:f6:5e:e3:54:03:7f:a3:23:03:cc:ad:f6:c8:
80:86:20:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:23:34 2025 by rpki-client