Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/VnhOPBZDowa-khGe6_hFTUNqCsk.roa
File: VnhOPBZDowa-khGe6_hFTUNqCsk.roa (raw, json)
Hash identifier: qCIsr4GjCEdCucIllYzz4SFGtxqgpQsm/0HzykOXZ08=
Subject key identifier: 56:78:4E:3C:16:43:A3:06:BE:92:11:9E:EB:F8:45:4D:43:6A:0A:C9
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 01953E851080C0B571549F056DF67E4FD54E
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/VnhOPBZDowa-khGe6_hFTUNqCsk.roa
Signing time: Tue 25 Feb 2025 19:11:02 +0000
ROA not before: Tue 25 Feb 2025 19:11:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 46261
IP address blocks: 193.93.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3e:85:10:80:c0:b5:71:54:9f:05:6d:f6:7e:4f:d5:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Feb 25 19:11:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=56784e3c1643a306be92119eebf8454d436a0ac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e2:28:51:38:f7:16:3b:e4:07:bc:37:7a:c1:
64:74:fe:f6:d0:b9:b7:c5:ee:5c:df:7d:cc:c0:98:
e5:d1:31:5a:91:5b:57:77:65:76:87:82:db:84:70:
71:8e:f5:14:5d:76:37:93:b6:c7:9e:9a:ce:d2:55:
c3:6c:59:3d:bb:9c:0c:a0:a4:e0:7f:8d:e4:4f:71:
4b:57:0e:4a:f1:71:f3:ea:16:b8:51:1f:61:1c:08:
bb:c0:bc:ac:e2:5a:85:fd:d0:fe:1d:23:53:45:71:
39:20:10:7b:db:96:62:ca:72:29:05:85:8d:5a:6c:
de:79:25:29:f8:57:af:75:22:60:1a:64:82:95:81:
d6:ab:d2:ec:c7:f3:82:1d:4c:d2:08:b8:64:3a:19:
b3:f0:68:8a:ef:13:61:0b:c3:a0:76:0b:d2:f9:62:
c0:f2:4b:bd:c5:96:15:f7:9a:a0:7c:83:f2:0a:1a:
9c:70:66:fb:00:8c:34:96:24:9e:cf:3b:57:8d:57:
03:b8:2f:56:9f:a7:3b:73:0a:7d:a1:be:e9:d3:38:
06:46:b2:f3:5b:c6:92:92:cc:f8:c7:95:d2:58:e7:
54:82:14:2f:33:43:12:d0:a8:74:8a:0f:a6:60:d6:
37:1b:2e:4e:ac:02:1b:77:7d:9f:c0:6e:a4:26:00:
fe:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:78:4E:3C:16:43:A3:06:BE:92:11:9E:EB:F8:45:4D:43:6A:0A:C9
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/VnhOPBZDowa-khGe6_hFTUNqCsk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.93.55.0/24
Signature Algorithm: sha256WithRSAEncryption
78:46:8b:87:0e:ff:9a:45:4b:59:86:1a:12:a0:2d:48:e9:32:
68:05:e9:35:e5:69:5f:43:09:3b:a2:b0:dc:01:2a:c4:f9:4f:
17:8a:c1:7e:1b:dd:57:ee:ec:dc:bf:4f:71:c8:10:1b:96:d2:
21:a9:0a:0d:ce:37:a8:d5:d2:b1:95:dc:66:49:0c:59:2e:6d:
aa:e2:80:32:4a:4f:e7:48:1c:c0:e4:06:87:25:5a:95:88:f1:
e2:1c:ca:8a:ad:11:3e:43:9e:ed:a3:1f:07:2b:e0:cb:e9:06:
0d:63:e9:68:5b:5e:9b:c0:57:fb:ff:63:5b:a9:7c:bc:a4:ab:
19:05:b7:6e:6f:89:e7:91:d8:64:92:c6:66:d4:9c:b8:79:37:
ce:d5:1e:04:5d:d5:29:db:1c:61:cc:17:cc:e6:ed:af:28:08:
cd:e4:48:7c:b0:ca:e6:4b:27:94:2d:18:40:ee:03:2a:be:82:
da:50:86:44:e7:5e:5c:21:f0:f8:e9:53:ac:db:f6:96:20:9d:
d6:d3:6e:8c:1b:6e:0d:bd:a1:e0:c1:bc:02:10:18:8b:ae:05:
07:06:3b:c8:0c:2d:0d:3e:cf:2e:27:bc:81:d9:22:aa:cd:9e:
cb:cc:e6:3e:f3:97:43:0b:49:d7:59:de:c6:5f:c3:e9:3b:88:
3c:d5:d3:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:41:29 2025 by rpki-client