Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/vtX7rusa6fZMmF3lc_ZvTTSyZII.roa
File: vtX7rusa6fZMmF3lc_ZvTTSyZII.roa (raw, json)
Hash identifier: /Q3goqDnJ6EwR3K+qh2LYwfBLshEeT0YC75y12sQLG8=
Subject key identifier: BE:D5:FB:AE:EB:1A:E9:F6:4C:98:5D:E5:73:F6:6F:4D:34:B2:64:82
Certificate issuer: /CN=042ac382689687b60fce5ce9db887b21d68a6abc
Certificate serial: 019424B38C52F69B57243AAAB1B11B729B80
Authority key identifier: 04:2A:C3:82:68:96:87:B6:0F:CE:5C:E9:DB:88:7B:21:D6:8A:6A:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/vtX7rusa6fZMmF3lc_ZvTTSyZII.roa
Signing time: Thu 02 Jan 2025 01:48:54 +0000
ROA not before: Thu 02 Jan 2025 01:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57152
IP address blocks: 185.226.92.0/24 maxlen: 24
185.226.93.0/24 maxlen: 24
185.226.94.0/24 maxlen: 24
185.226.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:8c:52:f6:9b:57:24:3a:aa:b1:b1:1b:72:9b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=042ac382689687b60fce5ce9db887b21d68a6abc
Validity
Not Before: Jan 2 01:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bed5fbaeeb1ae9f64c985de573f66f4d34b26482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:07:8e:16:54:df:b2:11:50:c8:a5:0e:03:d6:
fb:ea:aa:03:92:47:82:21:6e:c6:28:6a:a8:44:24:
d2:a8:03:30:ec:12:90:9a:3a:9f:f1:4b:dc:d2:8b:
0f:8c:f2:ee:f6:22:5d:65:c1:c5:a1:65:a3:11:3b:
2c:01:97:1a:0b:79:6e:77:5d:eb:7a:1c:1c:bb:c6:
25:61:f7:7c:3f:b6:fb:0e:f1:cb:c7:a4:5c:8e:48:
13:1e:b4:88:0a:4d:c1:8e:19:73:9c:33:0b:89:0e:
56:be:3a:a8:45:a7:b4:e6:6e:26:a7:16:82:df:78:
1b:b5:19:6f:f3:54:98:cf:52:fe:2d:81:31:66:9f:
48:48:f7:b2:6c:a7:90:74:f5:1d:34:73:22:7f:0b:
f4:6c:cc:89:54:4f:f6:1a:95:4e:14:13:f0:89:5a:
33:9a:27:4e:41:b3:87:35:9b:55:c8:96:56:d9:6e:
d2:fd:d2:75:fe:87:97:a9:33:60:70:6b:93:e9:4f:
ba:86:0b:cf:da:34:9e:8e:61:69:d7:61:b2:e8:98:
d2:fb:cd:16:b6:9b:94:57:c3:4a:2b:cc:48:7b:9a:
4b:67:04:75:e1:08:e9:a4:14:e5:60:30:65:60:72:
78:cd:4a:09:cc:01:91:57:53:39:7d:a1:41:6f:96:
da:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:D5:FB:AE:EB:1A:E9:F6:4C:98:5D:E5:73:F6:6F:4D:34:B2:64:82
X509v3 Authority Key Identifier:
keyid:04:2A:C3:82:68:96:87:B6:0F:CE:5C:E9:DB:88:7B:21:D6:8A:6A:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/vtX7rusa6fZMmF3lc_ZvTTSyZII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.92.0/22
Signature Algorithm: sha256WithRSAEncryption
04:fb:7d:1f:16:19:15:a8:51:58:97:1e:78:18:e4:83:cf:da:
23:d2:23:05:ac:b2:c8:25:46:45:57:3f:50:e3:81:22:19:9b:
1a:44:1e:0b:e7:83:e8:fe:03:f0:b2:75:0f:71:ae:49:df:6b:
29:a5:e8:51:3e:be:4a:da:39:f6:35:fd:ce:e6:61:a3:2a:c6:
10:1e:2d:f6:fd:a2:39:2c:79:1e:a4:e3:af:45:9f:12:b2:3e:
97:70:0b:1a:7d:9d:f3:ef:1c:3b:fa:78:ff:c4:8b:99:1e:7b:
00:f7:eb:a4:8e:41:88:59:ce:cf:72:a6:55:0c:33:22:15:3a:
b8:6d:67:3d:60:02:21:1e:c6:3d:75:0f:79:be:39:67:62:b9:
17:b2:fb:3c:81:9c:3e:cf:7f:4f:90:01:ac:b0:05:26:58:ac:
69:36:8a:21:2f:ad:32:7b:f9:e8:f5:f3:ff:9b:36:ce:2d:99:
a8:33:f5:a3:c2:33:34:09:08:98:28:06:ca:2b:12:23:30:6e:
38:7b:40:1b:a7:2d:07:f7:91:8b:8a:cb:d6:90:35:ad:01:06:
16:a9:ca:4a:0c:8e:c3:18:31:17:96:04:f7:dc:22:d7:f3:12:
96:cc:48:c9:78:48:94:33:42:06:b1:96:28:97:d0:dc:43:e0:
ea:a3:c1:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:20:56 2025 by rpki-client