Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/vfjUIsx7CDVuZMrXZKkgTFoznUI.roa
File: vfjUIsx7CDVuZMrXZKkgTFoznUI.roa (raw, json)
Hash identifier: kc2fyWr6FJL7rTi0mPaMQj4eZbP6Y0dyJoouX+alOvk=
Subject key identifier: BD:F8:D4:22:CC:7B:08:35:6E:64:CA:D7:64:A9:20:4C:5A:33:9D:42
Certificate issuer: /CN=40cf69cca2c86e194754788edcd88e352ed4e11c
Certificate serial: 019422FB8B00E609C4D59E0CA22E7FDB0FA3
Authority key identifier: 40:CF:69:CC:A2:C8:6E:19:47:54:78:8E:DC:D8:8E:35:2E:D4:E1:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QM9pzKLIbhlHVHiO3NiONS7U4Rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/vfjUIsx7CDVuZMrXZKkgTFoznUI.roa
Signing time: Wed 01 Jan 2025 17:48:17 +0000
ROA not before: Wed 01 Jan 2025 17:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15404
IP address blocks: 176.119.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:8b:00:e6:09:c4:d5:9e:0c:a2:2e:7f:db:0f:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40cf69cca2c86e194754788edcd88e352ed4e11c
Validity
Not Before: Jan 1 17:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bdf8d422cc7b08356e64cad764a9204c5a339d42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:4d:9e:c7:29:ee:92:d1:3c:e8:fd:7d:24:e4:
22:cf:bf:36:88:3b:e0:36:34:7b:24:d0:6e:f7:39:
f3:05:e4:9f:27:25:60:52:8b:6b:75:50:f5:09:f2:
be:df:e8:ab:c3:f6:ed:f1:1b:18:e7:2b:ec:64:2c:
c9:6a:36:9a:56:d2:8b:82:06:5c:c9:c7:41:5e:ec:
d0:a9:b4:5e:78:d7:0f:a7:17:83:a5:1f:41:9d:cb:
50:f9:18:a7:7a:e0:c3:04:b8:00:4f:b1:5b:54:f0:
64:f0:ed:7c:df:1f:d0:ef:77:99:80:c8:b0:6d:df:
7b:20:7b:e8:46:c0:9c:ca:f5:76:2a:a4:cd:70:a9:
f0:13:42:0d:73:49:06:64:83:89:27:81:a4:8a:0f:
b3:64:72:c7:6d:1b:6d:62:03:c2:eb:13:97:ed:db:
59:2a:3c:2b:99:f9:ff:78:a5:82:65:2a:b9:c1:70:
78:bc:fe:61:0d:ad:1a:97:60:72:b9:52:b5:73:3c:
80:c3:e9:1f:78:9c:e1:4b:c3:bf:4e:c9:28:6b:c2:
9f:3d:59:ce:b0:ac:b8:ce:6d:00:84:bb:19:18:a1:
95:bf:d3:5a:b9:18:4c:3a:12:d8:9c:31:ae:54:15:
09:36:74:90:c1:ce:31:6f:9a:ed:d3:44:fb:1a:3b:
d7:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:F8:D4:22:CC:7B:08:35:6E:64:CA:D7:64:A9:20:4C:5A:33:9D:42
X509v3 Authority Key Identifier:
keyid:40:CF:69:CC:A2:C8:6E:19:47:54:78:8E:DC:D8:8E:35:2E:D4:E1:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QM9pzKLIbhlHVHiO3NiONS7U4Rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/vfjUIsx7CDVuZMrXZKkgTFoznUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.119.201.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:e9:48:92:95:73:c7:f6:c7:96:67:64:26:14:28:29:86:6f:
b5:d0:5d:96:e6:3e:31:da:a3:3a:e5:82:77:09:1e:d6:c1:0f:
9a:48:79:54:01:6c:c5:c9:07:ca:93:cb:8a:ce:ba:88:be:d9:
f9:22:57:ba:98:43:2d:d5:a4:80:90:6a:57:44:95:00:18:44:
a0:8e:88:11:85:5a:21:fc:d7:34:ce:8b:e8:25:fa:63:40:a2:
b2:25:29:1f:50:86:09:de:f9:c6:35:9c:d7:17:37:25:c0:20:
f2:07:34:80:57:01:d2:84:59:b2:75:cd:98:d1:8f:56:54:89:
2d:31:89:b0:1c:60:27:23:86:99:7f:d3:be:61:79:ea:64:de:
85:e8:3d:4a:51:79:5b:c1:04:b2:9b:2a:57:ab:e5:f0:5e:02:
cb:d0:41:2e:c7:32:ed:67:29:bd:5f:bc:57:25:6f:d1:49:66:
9f:fa:0b:67:ad:3c:bc:67:4c:4e:8c:89:1d:06:0b:22:e5:2b:
6a:8d:33:b7:dc:d1:19:33:5e:53:59:74:3d:30:a6:42:30:bc:
4d:bb:7d:cf:64:b7:0f:6c:00:6c:3a:99:ec:3b:89:80:42:3e:
68:21:a3:ec:18:69:8e:e0:bc:c8:90:72:88:d0:d0:5c:59:41:
60:b9:7c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:57:49 2025 by rpki-client