Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/VYuREdVb0Bqi7CnoezxhU6a6xRg.roa
File: VYuREdVb0Bqi7CnoezxhU6a6xRg.roa (raw, json)
Hash identifier: eQ2VqACOSCzYSFfQa0NSP4dKymAYJwyQzEzau9vvL/k=
Subject key identifier: 55:8B:91:11:D5:5B:D0:1A:A2:EC:29:E8:7B:3C:61:53:A6:BA:C5:18
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 01942747DAC614F301F6C4B6EE072754FD44
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/VYuREdVb0Bqi7CnoezxhU6a6xRg.roa
Signing time: Thu 02 Jan 2025 13:50:08 +0000
ROA not before: Thu 02 Jan 2025 13:50:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202425
IP address blocks: 185.242.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:da:c6:14:f3:01:f6:c4:b6:ee:07:27:54:fd:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 2 13:50:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=558b9111d55bd01aa2ec29e87b3c6153a6bac518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c1:76:60:14:80:a8:3b:34:81:a0:06:e5:c6:
c7:b9:8b:15:02:57:52:f2:09:7c:7a:bb:c5:df:19:
bc:36:2c:fd:48:c1:b8:c7:28:2c:2a:3c:c1:a9:55:
c8:1c:eb:84:db:bf:a7:52:63:23:7d:2e:f2:06:44:
2f:21:97:42:0c:f6:64:b7:dc:9a:af:ac:29:94:9a:
b0:25:a8:81:09:c9:3c:b6:bc:fd:08:12:be:d3:81:
32:7e:db:7f:7d:25:24:06:6c:f8:37:74:40:bc:38:
9c:14:3b:2d:86:e4:56:ab:bd:29:f0:ad:6e:be:2c:
58:60:e7:31:71:31:32:aa:da:58:84:08:5c:98:77:
56:90:c1:cd:0f:fd:85:90:78:01:95:70:78:8a:0b:
88:97:89:eb:33:af:df:15:ba:d2:8e:7b:eb:ef:87:
ad:c0:80:9e:89:44:05:9f:12:16:34:9c:92:2f:5d:
9a:9f:07:fd:03:c7:56:5c:27:4e:83:6f:e7:ac:7d:
61:c2:84:86:d7:c5:3a:ce:74:dc:ac:9d:20:35:19:
6b:71:07:65:8a:55:61:52:f5:4c:e9:cc:58:18:68:
69:a5:2e:dc:61:5e:fc:c8:d9:54:b5:3d:7b:a1:2d:
a0:e5:d7:e1:18:d4:e7:0d:26:79:be:81:e1:18:4a:
5c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:8B:91:11:D5:5B:D0:1A:A2:EC:29:E8:7B:3C:61:53:A6:BA:C5:18
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/VYuREdVb0Bqi7CnoezxhU6a6xRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.242.226.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:5a:a7:83:20:3a:b9:f8:9c:a2:a1:ad:be:e8:f4:fb:1b:ff:
52:e3:d0:11:f3:4f:68:1d:c0:ff:c7:7b:b6:27:94:84:1b:dc:
0f:bf:02:ed:5a:d6:bb:31:3b:16:4f:dc:a7:df:0f:08:18:05:
c2:f7:c5:7a:d6:fd:c1:a2:af:23:8f:1b:fc:f9:04:7a:46:22:
7e:5e:63:7e:77:eb:31:38:b3:04:29:07:94:ee:80:0d:ae:7e:
bc:7f:3b:8f:1c:f3:0f:c6:cc:b7:57:01:28:0b:56:b9:1a:6c:
2a:e0:84:00:e1:2a:71:39:80:21:bb:4f:16:68:d5:e8:a6:7e:
2c:87:9e:c1:24:65:16:79:7d:ea:34:e2:eb:43:41:c2:8c:88:
0a:74:dd:c3:54:17:07:bd:5d:d0:f5:15:ed:7e:34:83:93:af:
b0:d5:93:18:8d:e7:06:8b:1f:4c:f5:6a:39:1a:9e:62:80:55:
95:bb:f7:60:7a:80:46:e6:a0:03:b1:bb:81:f4:63:66:64:e5:
a9:dd:7b:7b:c8:95:5d:d2:7f:65:6e:c0:35:e5:63:f5:9f:16:
a1:59:4e:cf:50:1f:c8:eb:d3:66:86:fa:c2:2a:57:6a:41:f1:
d2:d3:63:ec:02:03:8d:2a:8b:36:f7:48:97:0b:3e:b2:90:9c:
6e:bb:f6:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:01:49 2025 by rpki-client