Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/VklwYAMB76GdFlZEPkNhX4QuNYk.roa
File: VklwYAMB76GdFlZEPkNhX4QuNYk.roa (raw, json)
Hash identifier: 8+ZNddyslsyHAQNuItAdRnRBvt4AbAN/VlPdsNqo93A=
Subject key identifier: 56:49:70:60:03:01:EF:A1:9D:16:56:44:3E:43:61:5F:84:2E:35:89
Certificate issuer: /CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Certificate serial: 0194221FA1AA8EA36CA267B9E9DCD899E508
Authority key identifier: C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/VklwYAMB76GdFlZEPkNhX4QuNYk.roa
Signing time: Wed 01 Jan 2025 13:48:05 +0000
ROA not before: Wed 01 Jan 2025 13:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47890
IP address blocks: 2.57.122.0/24 maxlen: 24
45.13.38.0/24 maxlen: 24
45.13.212.0/24 maxlen: 24
45.13.213.0/24 maxlen: 24
45.129.14.0/24 maxlen: 24
45.129.15.0/24 maxlen: 24
45.134.48.0/24 maxlen: 24
45.138.96.0/24 maxlen: 24
45.138.97.0/24 maxlen: 24
45.138.98.0/24 maxlen: 24
45.148.9.0/24 maxlen: 24
45.148.11.0/24 maxlen: 24
80.94.92.0/24 maxlen: 24
80.94.94.0/24 maxlen: 24
92.118.39.0/24 maxlen: 24
185.232.64.0/24 maxlen: 24
185.232.66.0/24 maxlen: 24
193.32.162.0/24 maxlen: 24
193.46.254.0/24 maxlen: 24
193.46.255.0/24 maxlen: 24
193.47.69.0/24 maxlen: 24
2a0c:9f00::/48 maxlen: 48
2a0c:9f00:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:a1:aa:8e:a3:6c:a2:67:b9:e9:dc:d8:99:e5:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Validity
Not Before: Jan 1 13:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=564970600301efa19d1656443e43615f842e3589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:04:7c:40:07:47:74:0e:3b:79:6a:88:a2:93:
c9:56:78:bf:97:36:2f:d3:3c:f7:31:84:01:15:60:
24:fd:90:58:65:1c:8e:c2:3f:3a:00:04:ab:b9:4c:
b6:41:8c:3b:73:5c:57:87:8a:84:94:a2:c4:78:8d:
56:66:45:30:3c:7f:c1:6e:21:2d:60:15:36:98:9f:
2a:b1:3f:c0:46:a9:ce:48:dc:ce:b1:3f:b9:3e:ca:
64:d1:34:c6:b7:63:b7:57:3b:a9:03:6d:ac:b0:16:
4d:3a:64:ef:74:bf:0b:a6:75:2d:04:36:ee:a2:6a:
35:d9:2e:79:4c:cb:62:34:88:8c:e2:a3:f4:7c:7a:
c3:04:8c:76:5e:89:e8:64:8a:eb:4b:8d:ef:6a:7e:
82:74:f6:30:8c:bc:ee:83:94:2d:49:51:13:17:ca:
c9:30:41:25:9c:53:8a:ba:97:93:9f:86:3a:34:29:
bb:bb:f3:95:e9:9f:b7:9b:e9:34:b3:ca:d3:d3:2e:
1f:7d:5f:7c:7e:0b:49:79:f1:5c:93:5b:b9:83:86:
17:5f:de:b6:3f:14:5d:6c:38:53:44:1a:92:15:c7:
24:b0:97:d7:84:a1:c6:f1:b0:03:c5:94:9e:e5:9c:
a9:93:b2:81:c6:83:cd:0e:f6:c7:23:54:d8:0a:69:
4a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:49:70:60:03:01:EF:A1:9D:16:56:44:3E:43:61:5F:84:2E:35:89
X509v3 Authority Key Identifier:
keyid:C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/VklwYAMB76GdFlZEPkNhX4QuNYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.122.0/24
45.13.38.0/24
45.13.212.0/23
45.129.14.0/23
45.134.48.0/24
45.138.96.0-45.138.98.255
45.148.9.0/24
45.148.11.0/24
80.94.92.0/24
80.94.94.0/24
92.118.39.0/24
185.232.64.0/24
185.232.66.0/24
193.32.162.0/24
193.46.254.0/23
193.47.69.0/24
IPv6:
2a0c:9f00::/48
2a0c:9f00:2::/48
Signature Algorithm: sha256WithRSAEncryption
3f:1f:86:8f:14:f7:9a:12:76:62:02:3c:32:b3:81:bb:24:b8:
6d:45:b7:df:5e:14:91:c5:ff:ee:b4:7c:89:b1:c1:9e:3f:92:
86:f6:f1:f2:8c:8f:97:0a:cc:22:a5:9e:46:89:c8:de:af:7f:
c2:b6:d6:e8:f6:b8:1c:27:92:2b:3c:4a:21:8f:3d:dd:12:f3:
3e:fb:5c:1e:77:85:4c:c4:4c:c5:45:99:f5:c5:d6:9c:d6:49:
e7:2d:82:40:00:05:f0:b3:be:4d:6c:be:60:9d:a3:97:16:f0:
0b:08:e6:f0:98:91:bc:b4:77:2e:5f:06:5b:f5:98:55:d3:50:
78:13:67:f7:11:24:1f:06:8b:2e:52:e6:f4:b5:49:21:83:cd:
34:97:6d:37:e3:bb:12:b9:7d:d6:39:90:b7:f6:8f:89:39:88:
09:91:a8:16:12:3f:2d:08:9f:0a:10:d4:d7:a8:c3:c7:cc:d0:
8b:20:d2:1f:09:5e:88:eb:e1:45:27:65:41:f9:b8:b9:e9:23:
2e:ec:9b:dd:bb:2a:76:f0:d9:bc:15:b2:3f:b6:e1:da:04:91:
2d:4e:c5:44:f8:89:37:3e:c1:e3:01:59:4c:ba:ea:4d:66:fb:
6b:3b:ee:35:23:23:44:84:64:41:c7:cc:eb:b6:8e:39:f4:14:
09:cc:8d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:31:35 2025 by rpki-client