Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/VJASrMOyLg85AblR9YiVSWxHxZs.roa
File: VJASrMOyLg85AblR9YiVSWxHxZs.roa (raw, json)
Hash identifier: REvGVujT8OfpbkY6GeJPSg8UwmOkMcFqkev3bGvsPwQ=
Subject key identifier: 54:90:12:AC:C3:B2:2E:0F:39:01:B9:51:F5:88:95:49:6C:47:C5:9B
Certificate issuer: /CN=5a68d699d1a9457c78acfbec004f98677aa4cc16
Certificate serial: 0194236A0B9762BEBC9A4BABFD61B70B630E
Authority key identifier: 5A:68:D6:99:D1:A9:45:7C:78:AC:FB:EC:00:4F:98:67:7A:A4:CC:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/VJASrMOyLg85AblR9YiVSWxHxZs.roa
Signing time: Wed 01 Jan 2025 19:48:59 +0000
ROA not before: Wed 01 Jan 2025 19:48:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205734
IP address blocks: 88.205.16.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:0b:97:62:be:bc:9a:4b:ab:fd:61:b7:0b:63:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a68d699d1a9457c78acfbec004f98677aa4cc16
Validity
Not Before: Jan 1 19:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=549012acc3b22e0f3901b951f58895496c47c59b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:30:7a:55:21:ba:64:e3:f2:88:be:f6:3b:2e:
5e:ee:7f:26:cb:6c:18:ec:e7:47:0d:19:a3:0b:b1:
27:98:5f:32:f1:72:9f:d9:4d:93:73:95:51:42:7e:
63:c6:51:ad:bc:6e:0b:ee:98:c5:f6:8d:e3:33:21:
e4:e9:80:49:ab:3a:ad:5c:2b:90:61:0b:39:08:a6:
b1:bb:cd:1d:37:bf:61:b5:f8:2b:44:bb:9e:5f:68:
c0:aa:a8:bb:39:04:4f:48:7c:a0:66:2d:fd:7e:cc:
c8:3a:50:72:f9:0a:88:98:05:a9:e5:a2:d3:0b:86:
40:4e:8a:27:6b:4a:33:e4:c2:72:fa:1d:0e:40:76:
ce:7a:22:56:c9:8d:e0:68:02:ac:ee:9e:c1:4c:34:
e2:0f:d2:8a:41:b9:c5:a9:5a:db:51:fe:ed:2a:06:
a9:23:af:27:21:fb:38:fe:e7:02:90:6f:99:37:36:
38:46:d3:14:19:a7:3c:e0:7c:1b:8a:68:9b:08:a0:
81:5b:a7:9d:7d:85:2e:46:b9:1c:4e:81:5d:c3:99:
db:b2:6a:cb:68:c8:18:4f:83:0a:7e:0f:3f:e0:94:
3c:77:60:2e:50:97:46:07:cd:d0:2a:75:e6:82:43:
30:6a:da:50:7e:63:ca:bf:72:57:4d:a2:05:8e:66:
3e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:90:12:AC:C3:B2:2E:0F:39:01:B9:51:F5:88:95:49:6C:47:C5:9B
X509v3 Authority Key Identifier:
keyid:5A:68:D6:99:D1:A9:45:7C:78:AC:FB:EC:00:4F:98:67:7A:A4:CC:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/VJASrMOyLg85AblR9YiVSWxHxZs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.205.16.0/23
Signature Algorithm: sha256WithRSAEncryption
45:bc:8b:98:42:5d:3c:fb:4c:79:71:7c:95:9c:e5:23:df:a0:
83:e7:d1:84:d5:a8:09:22:98:b6:a9:b4:41:bb:d5:be:ca:21:
66:30:3f:f4:2a:3c:26:fd:9a:66:18:34:36:07:41:ac:30:cc:
d2:d3:83:6d:96:91:f7:cb:c9:4a:e7:98:84:1f:5b:fc:dc:80:
ae:25:0d:4c:26:7d:5c:88:a3:c8:ba:20:ed:b8:ac:77:87:87:
e0:57:e1:a3:80:6d:8c:63:9a:ef:a2:4c:9f:09:61:9a:3c:14:
54:08:d6:a3:7f:75:e4:b6:c9:f9:aa:46:63:df:b1:b1:eb:48:
d8:1a:5c:18:60:b8:52:1f:08:be:25:2f:2f:5f:d3:1e:0e:70:
3b:6b:52:0e:e6:93:e8:ec:2f:32:f7:ae:c9:48:6f:49:53:75:
d5:08:b2:50:d8:86:9f:2c:c4:97:18:c6:64:75:37:16:45:0b:
52:03:ca:5f:0e:f3:ca:8a:4e:96:65:60:f7:7f:7d:4d:92:1b:
eb:8c:7d:42:16:1f:90:f2:77:66:7a:6e:f7:cb:41:36:2c:ed:
2d:cd:47:cb:57:5f:71:5b:4a:8d:5d:78:bf:3c:99:90:dd:48:
56:36:f1:00:34:cf:dc:62:6e:0d:4f:ab:2f:da:e2:91:70:29:
61:38:ce:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:56:20 2025 by rpki-client