Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/0d32fe-c9da-4493-ab8a-03afacea7010/1/VzLG7lyXvVkTshnFEB9kwkc4pkQ.roa
File: VzLG7lyXvVkTshnFEB9kwkc4pkQ.roa (raw, json)
Hash identifier: wIvPT3vGaYWNNjOSrAOSHFQIN6FXu9GPlBXc77PLE/s=
Subject key identifier: 57:32:C6:EE:5C:97:BD:59:13:B2:19:C5:10:1F:64:C2:47:38:A6:44
Certificate issuer: /CN=57d993319dcc9297694318b246eb36f55ff1370e
Certificate serial: 019426D95D69B9AFF13DB2DAB86206E25445
Authority key identifier: 57:D9:93:31:9D:CC:92:97:69:43:18:B2:46:EB:36:F5:5F:F1:37:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V9mTMZ3MkpdpQxiyRus29V_xNw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/0d32fe-c9da-4493-ab8a-03afacea7010/1/VzLG7lyXvVkTshnFEB9kwkc4pkQ.roa
Signing time: Thu 02 Jan 2025 11:49:26 +0000
ROA not before: Thu 02 Jan 2025 11:49:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41692
IP address blocks: 194.54.92.0/22 maxlen: 22
2001:7f8:3a::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:5d:69:b9:af:f1:3d:b2:da:b8:62:06:e2:54:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57d993319dcc9297694318b246eb36f55ff1370e
Validity
Not Before: Jan 2 11:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5732c6ee5c97bd5913b219c5101f64c24738a644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:80:01:4f:57:05:7f:a5:f1:36:2a:c6:8a:e6:
12:45:74:2e:bd:fe:72:f3:fe:e7:98:22:c1:f2:01:
8a:f9:68:78:a7:84:60:bf:b4:2d:e8:5d:28:8f:65:
c4:c2:eb:9d:04:67:a9:ff:c1:22:44:b7:da:cb:83:
50:db:c6:a2:a4:95:c8:c9:75:d8:31:69:82:61:3a:
ea:f5:a2:f9:5b:25:d4:a9:d9:10:70:ba:55:b9:5a:
2c:f2:05:50:aa:7b:48:fc:5e:10:dc:b1:dd:f9:95:
31:52:bb:0e:8d:62:75:52:2a:e8:34:09:40:8d:5c:
b1:88:ea:1f:b2:76:fb:a9:b5:af:a7:20:d4:f1:91:
57:c9:5f:18:69:96:e6:36:39:39:21:ea:cb:87:6d:
14:05:34:d0:57:f3:1f:07:ab:a4:20:a9:d8:e3:bb:
05:f1:c1:64:be:9c:ff:d3:84:ae:da:ff:88:13:4d:
91:0f:64:0f:b1:4b:f7:ee:5b:ed:46:9c:50:19:1b:
30:2d:d8:d3:2c:a2:0b:16:58:50:c2:8f:f9:af:d3:
bd:c8:06:00:4c:6c:e4:1b:1b:7e:8c:1e:7e:51:8d:
30:03:af:68:fb:f1:6d:ab:32:7a:d4:2e:72:19:03:
98:da:84:66:45:b9:f6:f8:0e:b1:a9:7a:a6:38:9a:
64:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:32:C6:EE:5C:97:BD:59:13:B2:19:C5:10:1F:64:C2:47:38:A6:44
X509v3 Authority Key Identifier:
keyid:57:D9:93:31:9D:CC:92:97:69:43:18:B2:46:EB:36:F5:5F:F1:37:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9mTMZ3MkpdpQxiyRus29V_xNw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0d32fe-c9da-4493-ab8a-03afacea7010/1/VzLG7lyXvVkTshnFEB9kwkc4pkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0d32fe-c9da-4493-ab8a-03afacea7010/1/V9mTMZ3MkpdpQxiyRus29V_xNw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.54.92.0/22
IPv6:
2001:7f8:3a::/48
Signature Algorithm: sha256WithRSAEncryption
92:de:7e:88:90:2c:82:e5:c3:3a:d5:9e:98:82:93:32:c0:c3:
32:0e:35:33:1f:5e:91:b8:1e:ba:a7:fd:33:cb:e0:c3:a0:0f:
0d:3a:7b:7f:a2:81:1a:4f:57:70:6e:4b:78:82:5f:fa:06:f5:
91:d7:43:ef:b8:ce:a0:bb:3d:7f:48:25:e0:f5:19:75:e0:fa:
cb:69:11:0f:8e:41:7f:08:7f:f2:9b:fb:ac:00:cd:c5:2f:b3:
6c:c8:26:e9:ea:8f:bd:fe:1c:fe:5b:d8:85:38:11:08:52:92:
f2:9a:13:52:68:c8:78:56:ba:6e:f6:77:af:f8:98:fa:39:7f:
a5:e3:be:08:19:d4:d4:53:35:4c:34:29:8b:62:23:37:a2:35:
29:89:16:63:b2:a5:79:03:6b:64:0f:b3:8b:f3:d5:cb:b0:28:
d3:0f:dd:21:e7:8f:29:dd:34:6b:bb:8a:19:a3:d0:35:4a:b4:
5b:78:4f:2c:87:9e:fa:4e:27:78:c8:d6:bc:4b:00:8d:8e:94:
d3:42:4c:91:7d:60:e0:79:be:e5:39:a7:09:ca:6b:4c:7e:c6:
e9:56:ec:43:bc:52:c6:41:0c:2f:ac:16:8b:80:84:8a:46:9f:
aa:95:a3:57:0d:8e:4f:4f:d7:fa:24:29:9d:f1:12:b9:64:c8:
34:9f:00:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:54:31 2025 by rpki-client