Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/vefvwnoYIdWpFVXD70WwERcwJEY.roa
File: vefvwnoYIdWpFVXD70WwERcwJEY.roa (raw, json)
Hash identifier: xqcPsqfVx0/vo3jPqCJu0lbng7biC9QAMk+swFwchXE=
Subject key identifier: BD:E7:EF:C2:7A:18:21:D5:A9:15:55:C3:EF:45:B0:11:17:30:24:46
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 01942067E0D7596EB0E28B09802FA3484864
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/vefvwnoYIdWpFVXD70WwERcwJEY.roa
Signing time: Wed 01 Jan 2025 05:47:46 +0000
ROA not before: Wed 01 Jan 2025 05:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213011
IP address blocks: 194.209.39.0/24 maxlen: 24
194.209.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:e0:d7:59:6e:b0:e2:8b:09:80:2f:a3:48:48:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 05:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bde7efc27a1821d5a91555c3ef45b01117302446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c7:a5:3d:d8:58:7c:13:db:d6:49:a1:ed:7e:
02:13:c8:ad:dc:4d:9b:fd:39:32:84:05:3a:6b:22:
61:51:b5:51:c6:a7:94:8e:55:87:dc:a5:64:6d:4c:
db:44:0a:ac:92:a9:c1:bd:b7:fa:7f:0f:6c:27:6a:
fd:54:fe:26:d5:f3:57:65:0a:f5:98:67:cd:7a:4c:
0e:ca:92:e8:aa:63:5a:06:23:b7:be:55:87:d8:39:
fa:22:ad:37:a4:ab:c9:e3:25:97:cf:a2:17:7d:52:
23:ad:e6:a6:ba:5b:45:ec:a3:9a:84:71:81:ee:1d:
78:d9:b9:50:25:1e:f5:a1:e5:d5:e0:91:a8:58:5d:
8b:89:e8:91:55:22:84:3a:07:df:ba:0d:4a:58:4c:
15:c8:ad:62:dc:8d:bd:ca:bb:b8:e5:36:54:22:91:
b6:2f:25:c8:af:5c:71:48:33:78:53:58:9d:29:7d:
df:51:aa:54:8d:7f:3c:e0:07:ff:67:bc:7e:c9:e1:
3a:a1:a9:89:7c:59:10:69:02:c2:da:48:c2:10:16:
87:80:22:cb:68:77:de:76:75:50:c1:1a:43:cc:98:
5f:55:64:b4:74:2c:c3:1a:ec:40:9b:4f:92:73:43:
b3:d7:3b:16:f5:77:29:cf:ef:fc:ba:f9:8b:b8:75:
ef:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:E7:EF:C2:7A:18:21:D5:A9:15:55:C3:EF:45:B0:11:17:30:24:46
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/vefvwnoYIdWpFVXD70WwERcwJEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.209.39.0/24
194.209.198.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:2e:2f:0c:4d:f1:ec:6f:7d:22:cf:78:89:21:11:c4:02:24:
f3:23:8f:48:52:56:1e:e6:39:96:9b:39:87:f9:6a:c1:9a:0f:
58:e0:e0:65:ba:66:98:72:cb:65:24:c4:8b:3c:7f:68:a7:f4:
37:bb:84:68:08:20:0b:c8:76:b4:67:ee:f2:26:c3:78:15:1d:
06:1c:9a:fb:eb:5b:71:d3:89:d9:80:7b:ff:53:b0:61:9f:06:
89:b7:58:c8:21:0e:22:4e:14:d5:71:72:91:57:de:29:9e:20:
92:5e:19:79:92:ca:3f:ff:90:05:4d:98:74:1b:d0:08:9f:6d:
6f:18:6f:68:02:76:51:b4:f0:11:6d:6f:40:b8:29:9e:29:ca:
d6:f9:15:32:89:45:77:ff:c7:e4:14:72:f9:b2:6e:0e:55:e8:
c2:c3:54:f1:9e:50:d4:af:81:c9:71:cc:54:04:c5:e5:2a:61:
40:ae:8b:20:85:f5:a8:55:77:bb:cf:51:c3:27:2b:db:48:2d:
cf:ce:16:54:59:c4:64:c1:cb:f8:da:67:0c:08:96:47:ba:1e:
d7:89:b7:e8:a4:e1:e7:c3:c1:b0:5f:c7:71:ba:c1:f5:e9:a6:
c2:34:07:c1:61:7a:96:4c:5b:83:07:c0:b7:c8:92:5a:6f:e7:
d4:c9:ee:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:55:18 2025 by rpki-client