Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/VCA4mhEUpJ_JkE8W6YzbJO06bkk.roa
File: VCA4mhEUpJ_JkE8W6YzbJO06bkk.roa (raw, json)
Hash identifier: Ey27v1VSvBG1kOCOG9N8A9sC+9f+2KfQyTxQVT7GEW4=
Subject key identifier: 54:20:38:9A:11:14:A4:9F:C9:90:4F:16:E9:8C:DB:24:ED:3A:6E:49
Certificate issuer: /CN=ebc66403ad0c4537af9c32b0def0c52ac2aab104
Certificate serial: 019426D97A6C4DE042F696B29A0853762C10
Authority key identifier: EB:C6:64:03:AD:0C:45:37:AF:9C:32:B0:DE:F0:C5:2A:C2:AA:B1:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/VCA4mhEUpJ_JkE8W6YzbJO06bkk.roa
Signing time: Thu 02 Jan 2025 11:49:34 +0000
ROA not before: Thu 02 Jan 2025 11:49:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62240
IP address blocks: 185.33.92.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:7a:6c:4d:e0:42:f6:96:b2:9a:08:53:76:2c:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebc66403ad0c4537af9c32b0def0c52ac2aab104
Validity
Not Before: Jan 2 11:49:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5420389a1114a49fc9904f16e98cdb24ed3a6e49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a6:40:1b:a5:b4:25:83:85:2a:98:c4:f8:09:
8e:e2:9e:b7:e8:a2:a4:45:1c:81:3c:83:bc:aa:bd:
eb:d2:e3:de:f4:b4:50:e6:49:82:9a:1d:a0:4b:dc:
54:c9:6f:dc:44:af:f1:eb:f8:de:89:29:a5:96:e6:
5c:e6:c1:9e:48:51:b7:12:23:be:c7:65:58:11:65:
2d:f3:71:c2:c9:7e:2c:6e:c7:a1:b1:4f:b5:95:90:
f0:74:a3:8e:29:8e:82:7f:f0:d2:d9:f5:82:6f:66:
0d:1d:3b:2e:2d:45:f1:29:f7:a2:9b:14:cd:a3:e0:
94:46:4e:8c:a7:31:3b:b9:cc:1e:94:3b:9f:81:75:
54:28:cb:9c:2d:e9:a3:de:cf:03:49:38:0a:f5:bd:
74:c4:24:db:88:11:b1:91:3b:68:78:39:b3:29:40:
24:c3:a8:69:99:25:ee:5b:66:5b:63:95:2b:9e:68:
0b:1c:e9:da:de:40:cf:7c:13:3a:a5:be:69:14:1d:
43:6f:0e:7a:15:bb:d8:f1:ed:5c:d6:d4:d8:81:3b:
7b:32:a3:6c:ce:28:3a:5d:0a:14:22:77:ca:d8:6e:
d8:25:34:75:0d:98:07:f3:7f:d6:eb:88:65:bb:cc:
8c:a9:21:16:46:fa:99:25:82:e3:10:80:db:f5:88:
52:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:20:38:9A:11:14:A4:9F:C9:90:4F:16:E9:8C:DB:24:ED:3A:6E:49
X509v3 Authority Key Identifier:
keyid:EB:C6:64:03:AD:0C:45:37:AF:9C:32:B0:DE:F0:C5:2A:C2:AA:B1:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/VCA4mhEUpJ_JkE8W6YzbJO06bkk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.33.92.0/23
Signature Algorithm: sha256WithRSAEncryption
75:3e:54:00:ac:e8:a2:2f:a7:09:cc:d2:7c:62:2e:91:7f:43:
a2:4c:7e:7a:ec:89:6c:1d:f1:8f:38:f9:10:9b:f4:3d:ef:12:
e5:bb:f3:6e:06:7b:9e:0f:4f:8c:20:aa:5f:91:5d:b7:a0:f8:
7d:2f:c9:4e:1a:c7:de:94:93:e8:20:11:81:88:43:6a:4a:36:
d6:fd:ce:3f:db:0c:5a:50:f3:1b:5d:04:18:d4:24:16:7a:9e:
cf:77:f6:a0:1f:f3:c9:3f:c4:38:15:8b:8a:4b:67:22:4b:3c:
a9:4c:6b:2f:9f:03:2e:61:ea:03:7b:7b:93:0a:c2:86:52:16:
ea:07:3b:89:a0:31:d5:ad:04:df:81:eb:4d:98:b6:b0:7a:2f:
dd:cb:de:21:b2:b4:77:dd:32:e3:c9:fe:47:fa:48:af:0f:79:
d8:57:20:ac:cb:10:fe:a9:bc:f8:70:66:1c:de:98:5f:a3:88:
ad:31:94:72:4b:f6:2a:a6:41:b6:88:35:cd:0e:23:6d:e3:ca:
59:6e:4b:36:38:51:c2:3c:a1:40:66:bb:d7:95:09:45:35:b8:
65:6f:62:67:88:3d:91:cc:e7:d7:ee:55:49:1a:89:76:bc:07:
8c:52:0e:e5:56:a3:a1:33:39:27:7d:48:6e:23:55:38:58:5a:
12:e9:79:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 22:15:16 2025 by rpki-client