Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/2d8b1a-29a2-478f-a0b3-551c78a052e5/1/VnX78gvGHHbjcFDbhurvjy4Caic.roa
File: VnX78gvGHHbjcFDbhurvjy4Caic.roa (raw, json)
Hash identifier: r1Fg3VBUdWf9JypFPu77yl7V04t7KsnS3GrSwmPdY7o=
Subject key identifier: 56:75:FB:F2:0B:C6:1C:76:E3:70:50:DB:86:EA:EF:8F:2E:02:6A:27
Certificate issuer: /CN=88ed6b04bd83dad71c299c795b3c1066bb6f3c5a
Certificate serial: 0225E2AF
Authority key identifier: 88:ED:6B:04:BD:83:DA:D7:1C:29:9C:79:5B:3C:10:66:BB:6F:3C:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iO1rBL2D2tccKZx5WzwQZrtvPFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/2d8b1a-29a2-478f-a0b3-551c78a052e5/1/VnX78gvGHHbjcFDbhurvjy4Caic.roa
Signing time: Sat 01 Jan 2022 13:59:48 +0000
ROA not before: Sat 01 Jan 2022 13:59:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 193.187.140.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36037295 (0x225e2af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ed6b04bd83dad71c299c795b3c1066bb6f3c5a
Validity
Not Before: Jan 1 13:59:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5675fbf20bc61c76e37050db86eaef8f2e026a27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:11:26:76:e5:58:1b:42:d0:97:8a:78:15:18:
78:fd:78:1f:f8:1b:0e:fc:c7:ba:f3:95:8c:18:8e:
f6:1d:c9:65:73:45:e3:ba:5a:f2:32:61:ed:89:4b:
84:b5:33:78:48:96:48:a3:16:d8:38:75:5d:ec:fc:
27:47:4b:e0:2b:43:58:00:c0:b6:00:91:d7:c4:55:
89:71:f5:40:e0:3b:8e:d3:e5:ee:27:6d:b6:c1:f9:
32:86:d0:18:16:93:71:82:aa:b8:ce:d9:80:3d:43:
6b:6e:ef:72:03:94:4e:98:d0:5a:96:c6:4a:03:df:
13:e9:4d:8b:4e:06:74:d1:a5:cb:55:aa:49:9b:d1:
63:f9:0a:2f:90:22:c2:49:45:ad:89:9b:a3:d4:fd:
89:b2:06:43:9a:f8:7d:56:3a:02:45:5f:7c:5f:21:
0a:bc:76:88:79:23:7f:e4:5e:3e:35:d1:fe:ad:e0:
36:37:65:a6:2a:df:bc:f4:12:4e:7c:bc:85:12:f9:
f4:86:4c:72:6b:7d:88:57:25:16:bd:0d:37:9d:c5:
d1:4f:9c:1f:46:d8:3d:3d:ef:63:f8:4b:43:02:d9:
f8:3c:89:86:29:7d:fd:91:c1:ee:db:6e:ac:8b:8c:
a4:24:47:ac:82:bf:c0:71:fb:4c:ff:b3:27:c1:0b:
c3:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:75:FB:F2:0B:C6:1C:76:E3:70:50:DB:86:EA:EF:8F:2E:02:6A:27
X509v3 Authority Key Identifier:
keyid:88:ED:6B:04:BD:83:DA:D7:1C:29:9C:79:5B:3C:10:66:BB:6F:3C:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iO1rBL2D2tccKZx5WzwQZrtvPFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2d8b1a-29a2-478f-a0b3-551c78a052e5/1/VnX78gvGHHbjcFDbhurvjy4Caic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2d8b1a-29a2-478f-a0b3-551c78a052e5/1/iO1rBL2D2tccKZx5WzwQZrtvPFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.187.140.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:e6:91:f9:16:73:ad:8f:32:a3:16:33:b2:8f:32:77:81:77:
10:37:44:5b:5d:0d:0b:ba:57:a1:97:86:84:63:e4:5e:98:ec:
38:b6:67:bb:1e:3a:15:1c:73:25:99:c5:fb:50:2d:15:81:e8:
46:bf:17:31:be:a8:9a:2c:97:c1:36:31:2c:3e:02:b5:10:5e:
06:69:f0:21:e7:4c:bd:f6:5e:fa:60:b4:6e:6c:2c:8a:6d:ab:
68:f1:e9:f0:fb:4b:a0:a7:18:5d:31:32:73:5a:7f:41:47:c1:
36:f6:11:7f:83:29:12:f6:e9:7a:ed:8c:73:ca:71:e9:af:28:
45:bb:61:f8:63:36:c3:ad:30:bb:12:0d:11:36:f0:fa:87:07:
9a:e8:d3:b3:5f:5d:18:70:59:e0:cd:d5:5b:3b:8c:2d:97:0b:
4a:f7:e8:43:e2:3b:f2:5c:e0:c9:e3:48:bd:3c:db:bc:b0:98:
d2:c6:1b:85:1c:5a:27:9e:54:22:3b:49:42:f8:4e:30:c7:07:
a1:7b:6a:2e:c9:0e:79:2a:ab:1c:f8:50:41:8d:67:78:b3:3d:
90:81:44:4a:e1:a3:83:e5:b6:9b:d9:9d:58:94:0b:4b:a8:a0:
e7:07:98:a6:a4:4b:7e:77:de:d1:cc:55:aa:39:6f:1b:2b:b8:
1c:1b:1d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:56:13 2025 by rpki-client