Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/vPKCfihyP4aceHhSVf5O5t7dhks.roa
File: vPKCfihyP4aceHhSVf5O5t7dhks.roa (raw, json)
Hash identifier: BSL3nS6RO+KWTxuVXzJtjXxdHmqwKWboA1DQ+yINRvk=
Subject key identifier: BC:F2:82:7E:28:72:3F:86:9C:78:78:52:55:FE:4E:E6:DE:DD:86:4B
Certificate issuer: /CN=10771dd7dea22e35fdaf19b51b839f43721270ba
Certificate serial: 01942746668EF9B36B07BBD3B30D0CE6B113
Authority key identifier: 10:77:1D:D7:DE:A2:2E:35:FD:AF:19:B5:1B:83:9F:43:72:12:70:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHcd196iLjX9rxm1G4OfQ3IScLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/vPKCfihyP4aceHhSVf5O5t7dhks.roa
Signing time: Thu 02 Jan 2025 13:48:32 +0000
ROA not before: Thu 02 Jan 2025 13:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201863
IP address blocks: 212.146.132.0/24 maxlen: 24
212.146.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:66:8e:f9:b3:6b:07:bb:d3:b3:0d:0c:e6:b1:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10771dd7dea22e35fdaf19b51b839f43721270ba
Validity
Not Before: Jan 2 13:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bcf2827e28723f869c78785255fe4ee6dedd864b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7d:cf:f7:ee:a8:d0:99:ff:0b:0d:10:55:55:
df:dd:4f:f1:fe:eb:92:5d:5e:9a:1d:eb:f7:1d:4c:
c4:d9:9d:73:38:0b:c1:6c:80:79:23:8b:c3:ef:9d:
e4:52:81:5b:29:2f:c5:71:68:91:46:68:00:4d:e1:
ff:10:13:c3:30:86:ee:2b:34:5d:78:3d:39:90:fb:
37:11:32:3c:86:9d:52:ef:9a:2a:ae:e0:c9:ce:2b:
f3:a5:59:9f:9f:92:23:61:ad:65:35:0a:be:ef:97:
b9:aa:31:8a:41:10:2c:ab:ad:89:99:2c:e0:47:84:
6a:c1:34:fe:8e:ac:31:fa:28:19:01:df:f3:45:6c:
06:da:b2:13:b7:98:df:4d:5a:7b:09:40:23:ac:8b:
19:02:ab:52:43:e2:fa:3e:c2:93:b3:37:a6:28:ec:
1d:62:7a:0d:26:e0:77:fe:7b:0d:f6:94:14:6e:a6:
a1:6f:05:b5:de:ec:df:1c:2a:86:eb:bb:5a:38:4a:
a8:73:fd:a4:4f:37:cb:ad:4e:2d:9e:ac:74:f7:02:
82:e6:e4:0e:b6:fe:b6:92:27:3b:ac:89:dc:39:76:
4e:de:59:8c:c9:87:15:2b:3c:c9:a8:a1:e3:6c:78:
2d:45:a1:57:23:ad:2f:2c:24:ef:b3:55:ec:79:9d:
30:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:F2:82:7E:28:72:3F:86:9C:78:78:52:55:FE:4E:E6:DE:DD:86:4B
X509v3 Authority Key Identifier:
keyid:10:77:1D:D7:DE:A2:2E:35:FD:AF:19:B5:1B:83:9F:43:72:12:70:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHcd196iLjX9rxm1G4OfQ3IScLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/vPKCfihyP4aceHhSVf5O5t7dhks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.146.132.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:ed:73:33:1a:e7:37:5f:f8:03:93:95:7e:91:82:44:43:d3:
3c:a4:f3:eb:14:67:73:6f:6f:a2:8c:20:68:7a:ef:63:4b:37:
00:c5:17:83:e8:11:1a:b8:1f:35:89:b2:45:cd:74:b9:4a:7c:
e9:dd:f1:76:72:86:74:cf:87:f2:8e:ad:43:b3:11:53:0a:63:
9b:4b:a3:bf:f5:5d:ac:0d:7f:c7:e8:ad:17:85:ce:c1:fa:72:
3b:51:a7:77:ac:e9:0c:c6:11:2a:1a:6b:d5:1c:cf:cd:fc:d7:
fb:e7:97:15:fb:7c:71:de:c8:92:14:5f:e1:76:7c:20:65:68:
49:2a:c5:6d:dc:25:75:c3:83:ec:95:d6:cc:60:16:9a:4f:c3:
39:bc:bd:78:9d:b3:45:02:c2:da:70:c0:4e:b7:0b:32:a1:c2:
91:54:33:bb:72:c1:52:23:4d:0c:d9:dc:65:c4:49:70:30:50:
64:f4:89:7b:0f:c4:32:e6:a5:a2:07:1e:6e:28:38:5c:df:e2:
06:55:fc:ff:2a:a5:c4:63:79:6e:ab:d0:ef:5b:7d:5e:81:d2:
29:75:54:32:99:1e:3a:b5:72:ce:06:cc:16:50:ad:a9:dc:cc:
f6:f6:15:d6:cc:6b:f8:b2:e4:a5:50:c3:f7:af:73:a3:17:c2:
3e:a0:aa:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:04:11 2025 by rpki-client