Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/VyO46YpT23BvljW9CwqKp8OCvAA.roa
File: VyO46YpT23BvljW9CwqKp8OCvAA.roa (raw, json)
Hash identifier: iOrTV9PCcKDnK4SEk9hES8b1JaLYOrEkHnO7HcHHTeE=
Subject key identifier: 57:23:B8:E9:8A:53:DB:70:6F:96:35:BD:0B:0A:8A:A7:C3:82:BC:00
Certificate issuer: /CN=a817c7453f377e9cb6fae5c893c067a3e1d35145
Certificate serial: 01941F8C5F0EAD012E5433992B536E75EE24
Authority key identifier: A8:17:C7:45:3F:37:7E:9C:B6:FA:E5:C8:93:C0:67:A3:E1:D3:51:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBfHRT83fpy2-uXIk8Bno-HTUUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/VyO46YpT23BvljW9CwqKp8OCvAA.roa
Signing time: Wed 01 Jan 2025 01:48:00 +0000
ROA not before: Wed 01 Jan 2025 01:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15404
IP address blocks: 62.85.160.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:5f:0e:ad:01:2e:54:33:99:2b:53:6e:75:ee:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a817c7453f377e9cb6fae5c893c067a3e1d35145
Validity
Not Before: Jan 1 01:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5723b8e98a53db706f9635bd0b0a8aa7c382bc00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:57:ef:85:10:79:e3:fa:56:f1:64:75:0c:72:
45:7a:23:93:a1:73:44:ae:99:d5:8a:5c:80:69:5a:
6a:ac:3d:21:f7:ad:b5:92:4c:ca:43:f2:88:55:53:
20:7a:00:1e:f8:69:8a:51:35:5c:6e:69:3c:f5:6a:
6a:61:8d:5b:1a:6e:aa:38:0c:1b:42:2b:fb:f4:d6:
62:5a:b1:90:32:ca:bb:9c:f0:f4:0f:f9:30:9f:59:
b8:a1:7b:86:ee:a8:e0:bc:2c:7a:87:d2:4f:64:7c:
30:d7:1e:04:d9:d9:a8:50:ef:6a:9a:e9:6b:2a:6f:
1b:af:bb:0e:4f:1c:a9:b0:fa:0d:ac:79:c3:d3:95:
5b:7c:a8:b3:4d:54:a1:7d:6d:ec:87:1c:71:02:45:
b9:b8:32:4d:f1:dc:1d:5e:14:a8:21:89:5a:eb:4c:
2e:cf:75:a8:9f:44:c5:f5:5b:40:e4:12:8e:7a:d6:
e0:78:25:d5:26:a1:45:3c:97:d8:ac:2a:cd:43:d1:
86:64:ec:44:d6:7e:ef:f9:1c:41:10:6a:34:9c:95:
c4:22:a4:29:43:b2:2a:d3:72:5b:3a:95:72:e7:3e:
96:f8:c0:7e:fe:e5:3e:4d:2f:64:5e:e7:12:13:b2:
9d:aa:e9:40:f5:29:b9:d6:03:90:19:82:04:4d:b4:
20:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:23:B8:E9:8A:53:DB:70:6F:96:35:BD:0B:0A:8A:A7:C3:82:BC:00
X509v3 Authority Key Identifier:
keyid:A8:17:C7:45:3F:37:7E:9C:B6:FA:E5:C8:93:C0:67:A3:E1:D3:51:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBfHRT83fpy2-uXIk8Bno-HTUUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/VyO46YpT23BvljW9CwqKp8OCvAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.85.160.0/19
Signature Algorithm: sha256WithRSAEncryption
09:23:16:29:8f:aa:c4:25:d1:8f:b1:02:0d:25:bc:74:2b:b5:
95:15:68:fc:db:4f:6a:2c:63:3d:40:b2:f5:21:3d:26:98:ca:
92:6f:23:21:d6:a5:b8:71:ae:b4:8b:68:ff:33:24:c1:f0:f5:
43:06:a6:29:ae:bf:02:9f:c3:af:4f:07:8d:d2:a5:b3:ef:64:
3c:e4:2a:18:e5:e7:cc:8e:28:90:3d:1c:8d:38:bd:47:18:e7:
4e:80:e0:c1:5c:97:89:d8:12:a0:28:39:d6:a5:86:7e:eb:0c:
36:4a:f7:81:8c:ff:6d:63:b9:57:0f:32:97:dd:bf:f6:99:ec:
9b:d9:09:c7:8b:42:bf:99:a6:4e:02:0b:59:c0:ac:e5:55:7e:
95:da:9e:a3:b5:90:84:36:7c:ac:a5:38:54:f1:b2:40:7d:be:
47:8e:03:8f:30:c3:a4:96:0b:b3:61:25:fa:f1:22:13:de:07:
9d:d0:bc:9c:40:9b:7c:51:01:02:d9:cc:68:3c:16:06:1d:65:
1a:32:4c:ad:9a:ff:e1:6d:17:b3:ca:3e:b6:57:04:2b:96:aa:
df:13:4f:c8:e4:13:79:36:ec:90:79:4f:c6:4a:c2:73:47:3b:
a5:11:c7:58:af:56:31:64:61:74:c0:11:bf:47:82:dd:e9:a4:
dd:08:1f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:52:49 2025 by rpki-client