Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/4a839e-c86a-49ee-989e-7c42c494ef8d/1/V96aR0wvAhdv4_Vo66KppqILtKE.roa
File: V96aR0wvAhdv4_Vo66KppqILtKE.roa (raw, json)
Hash identifier: LNBtS+EcYVUr3nv0x6xPhdY7NT39ZB1NgsuntUPU224=
Subject key identifier: 57:DE:9A:47:4C:2F:02:17:6F:E3:F5:68:EB:A2:A9:A6:A2:0B:B4:A1
Certificate issuer: /CN=b754992ba488a872c89cbdf42ca4df895e609c53
Certificate serial: 0187EB7DF0A30BBF47810943BCF7FFE1294F
Authority key identifier: B7:54:99:2B:A4:88:A8:72:C8:9C:BD:F4:2C:A4:DF:89:5E:60:9C:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1SZK6SIqHLInL30LKTfiV5gnFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/4a839e-c86a-49ee-989e-7c42c494ef8d/1/V96aR0wvAhdv4_Vo66KppqILtKE.roa
Signing time: Fri 05 May 2023 10:38:32 +0000
ROA not before: Fri 05 May 2023 10:38:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200845
IP address blocks: 185.130.29.0/24 maxlen: 24
193.163.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:eb:7d:f0:a3:0b:bf:47:81:09:43:bc:f7:ff:e1:29:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b754992ba488a872c89cbdf42ca4df895e609c53
Validity
Not Before: May 5 10:38:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=57de9a474c2f02176fe3f568eba2a9a6a20bb4a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:de:37:a0:55:bb:75:0c:93:d3:f2:23:99:93:
e2:58:d1:99:a2:47:b7:b2:85:4d:49:55:a4:fe:91:
60:2f:24:54:55:07:c7:e8:64:6a:8e:46:8c:b9:1c:
ee:80:73:06:e8:a7:0d:63:ce:ff:69:8a:11:54:94:
52:e7:0b:90:dd:e5:2d:8f:32:87:01:32:b3:f7:13:
57:52:8b:cc:3c:74:1c:1b:cf:83:5d:90:17:df:1a:
f0:38:b9:d9:3f:6b:55:c1:86:a4:97:97:a9:53:ee:
3f:25:2d:ea:d1:cf:89:6e:8a:eb:d8:1c:65:b2:6c:
5f:28:39:15:d4:59:86:1e:4c:85:6c:89:b5:ff:91:
c4:0c:3c:8d:e2:2b:af:c1:6a:f9:ca:d3:b5:e6:cb:
2a:aa:57:3c:9b:ba:6d:7b:0c:99:9d:f1:c5:d6:8d:
84:75:f2:72:7d:3d:fd:66:8d:a2:5a:44:70:3d:94:
c8:6c:95:8f:d7:23:ec:c3:54:09:bb:15:03:0f:fd:
00:1d:af:4d:30:e8:20:98:66:e9:2f:5c:a5:11:83:
cb:8c:b8:2e:e9:2b:32:7a:1c:fb:fa:a4:ba:39:e6:
d6:03:a9:ff:88:b7:e3:e9:9b:47:bb:9f:2e:e2:2f:
ba:f1:98:27:7e:97:60:0d:63:a9:5d:93:bb:47:42:
f3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:DE:9A:47:4C:2F:02:17:6F:E3:F5:68:EB:A2:A9:A6:A2:0B:B4:A1
X509v3 Authority Key Identifier:
keyid:B7:54:99:2B:A4:88:A8:72:C8:9C:BD:F4:2C:A4:DF:89:5E:60:9C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1SZK6SIqHLInL30LKTfiV5gnFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/4a839e-c86a-49ee-989e-7c42c494ef8d/1/V96aR0wvAhdv4_Vo66KppqILtKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/4a839e-c86a-49ee-989e-7c42c494ef8d/1/t1SZK6SIqHLInL30LKTfiV5gnFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.130.29.0/24
193.163.126.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:61:18:51:df:8c:68:fd:60:77:19:06:65:9b:c0:11:cf:bd:
70:1d:f0:82:03:46:e4:a1:bb:55:18:b6:31:c2:32:8a:50:bd:
dd:5e:7c:40:ee:e4:cf:d6:8b:c5:04:cb:50:37:65:b8:a2:b6:
9d:27:12:67:39:e6:fe:a8:77:b8:3e:fa:00:6a:ec:76:83:7e:
cb:95:49:25:a4:e5:26:ca:b7:67:09:80:86:82:86:b8:8f:c1:
42:40:7a:38:24:8f:72:f6:dc:bd:f1:20:fb:46:70:15:ed:21:
0d:4a:a9:48:37:5f:7e:30:54:12:ed:b7:c0:27:e1:70:fa:f5:
49:a7:25:e4:80:15:f6:63:fe:62:fe:ba:98:64:f8:82:85:03:
31:9c:45:25:3a:81:e4:a2:a5:21:e9:3f:90:b9:76:64:99:d8:
1b:46:3b:11:38:21:57:43:fe:07:ad:0e:12:96:f7:af:fb:3d:
b7:d1:0d:05:06:52:17:a6:1d:c6:9f:54:91:3a:a7:b2:a1:13:
e8:28:c6:45:10:80:10:8f:e6:dd:e7:62:70:54:91:eb:a3:ea:
82:d0:c5:a9:45:4a:e2:8a:da:b3:91:0a:d8:e9:7a:a6:c4:68:
91:ff:fc:a9:12:2e:c8:35:f7:12:e8:54:16:93:00:cc:ac:6c:
f0:04:ce:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:52:18 2025 by rpki-client