Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/VHyzCTSbs2CwlLKYVfEUKGgZYGU.roa
File: VHyzCTSbs2CwlLKYVfEUKGgZYGU.roa (raw, json)
Hash identifier: /siW604iDLkyDsTA5hDxMl+aIVYpD9UrXufKqlhouGo=
Subject key identifier: 54:7C:B3:09:34:9B:B3:60:B0:94:B2:98:55:F1:14:28:68:19:60:65
Certificate issuer: /CN=63a759b06e6fed03b0930749153fc16a12a501e0
Certificate serial: 019425FDBEAD03528D67C4A13EE868A17EC1
Authority key identifier: 63:A7:59:B0:6E:6F:ED:03:B0:93:07:49:15:3F:C1:6A:12:A5:01:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y6dZsG5v7QOwkwdJFT_BahKlAeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/VHyzCTSbs2CwlLKYVfEUKGgZYGU.roa
Signing time: Thu 02 Jan 2025 07:49:33 +0000
ROA not before: Thu 02 Jan 2025 07:49:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207589
IP address blocks: 89.40.210.0/24 maxlen: 24
91.205.43.0/24 maxlen: 24
185.109.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:be:ad:03:52:8d:67:c4:a1:3e:e8:68:a1:7e:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63a759b06e6fed03b0930749153fc16a12a501e0
Validity
Not Before: Jan 2 07:49:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=547cb309349bb360b094b29855f1142868196065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:99:d2:87:4f:8d:00:60:25:b2:dd:45:83:aa:
08:08:22:c5:53:6b:14:b7:cb:d0:0c:73:44:73:5c:
1f:37:68:67:5c:80:8d:60:52:3c:ba:a1:01:a1:0c:
13:6b:ec:8e:e0:a4:8b:b7:7d:55:62:47:46:78:e8:
1e:60:e9:67:2b:8e:4b:61:82:cf:09:a5:c7:48:ff:
3c:ee:77:a0:cc:7c:c6:1f:cf:94:9c:14:b5:dc:52:
70:e5:db:1c:ab:9f:8f:03:49:65:7f:76:ba:64:60:
6f:07:a0:58:fc:e4:55:a7:9b:ab:0d:04:d4:7a:e3:
e3:a5:76:1a:be:b0:46:9f:8c:11:3c:fe:70:f1:b2:
15:97:04:2a:a0:92:61:0e:8b:04:10:12:56:9a:36:
50:eb:63:6c:f5:1b:19:b4:a9:be:95:7f:e6:b2:fc:
bd:6a:1b:b4:6c:0c:2b:a1:f9:3a:72:79:e2:2b:01:
25:7d:da:7e:a6:93:6b:fa:bd:32:d5:2b:ff:3c:b3:
12:03:13:13:4e:21:e3:39:78:e6:be:1b:e9:0e:5c:
3d:da:c7:5a:75:13:b9:60:4a:d3:fa:9f:56:17:5d:
ef:8b:b9:19:1d:57:06:28:70:88:6c:09:db:25:ea:
42:46:04:d2:b4:0b:19:1f:c5:e1:46:7c:8a:97:ee:
c2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:7C:B3:09:34:9B:B3:60:B0:94:B2:98:55:F1:14:28:68:19:60:65
X509v3 Authority Key Identifier:
keyid:63:A7:59:B0:6E:6F:ED:03:B0:93:07:49:15:3F:C1:6A:12:A5:01:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y6dZsG5v7QOwkwdJFT_BahKlAeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/VHyzCTSbs2CwlLKYVfEUKGgZYGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.40.210.0/24
91.205.43.0/24
185.109.254.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:57:ec:32:b4:89:27:3b:62:a1:88:34:8c:eb:11:d2:e3:d5:
52:6a:62:ab:ea:a7:e5:76:3c:5f:f5:60:16:4a:fc:cb:3a:c6:
0a:14:85:6d:cf:63:e1:b7:60:a8:e4:84:ea:c8:0b:59:59:8b:
0a:05:f8:ad:4a:12:8e:de:62:29:7e:da:d8:3d:6c:7f:ca:2f:
40:46:da:4b:b1:17:dd:f2:96:93:a1:a6:c1:f6:81:72:13:9a:
2a:76:64:5e:09:b7:41:78:ac:7c:9e:b2:d6:93:78:92:59:b4:
b8:78:33:26:87:0d:2d:b7:6f:1b:5f:13:a2:91:b2:d6:2d:99:
84:11:f0:13:f6:6d:04:61:2e:37:14:d2:98:3d:2f:4b:63:0f:
80:6a:d0:79:1c:d3:e6:cc:ec:0a:6a:ce:a4:60:1f:ac:00:35:
71:7a:74:80:fa:b8:41:12:e7:c8:b4:35:c5:f7:37:de:75:7e:
ea:43:24:4e:d3:cf:ba:fb:90:76:ca:42:6e:d1:b4:d4:cd:9b:
52:34:5d:72:ec:1d:73:32:98:93:a5:d8:a2:5f:fe:74:ef:e4:
6a:91:7f:2f:74:ac:76:14:de:2e:82:e8:57:f3:04:ac:0c:9b:
0a:a6:08:98:42:88:53:60:cb:fc:e7:33:97:60:64:f9:4c:63:
cf:c0:f2:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:47:50 2025 by rpki-client