Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/VLB7zCgm9pvaqKu6mzLINMfkozA.roa
File: VLB7zCgm9pvaqKu6mzLINMfkozA.roa (raw, json)
Hash identifier: 47IXsdsMymeSm5xy4aWnRGiTVKD1XHMeiXkhj2C3NVs=
Subject key identifier: 54:B0:7B:CC:28:26:F6:9B:DA:A8:AB:BA:9B:32:C8:34:C7:E4:A3:30
Certificate issuer: /CN=f8857ecf441e5ea1d7181fec7e97e6dbc1220fc2
Certificate serial: 0194266C1FF2ACB378C62193F174B080231D
Authority key identifier: F8:85:7E:CF:44:1E:5E:A1:D7:18:1F:EC:7E:97:E6:DB:C1:22:0F:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/VLB7zCgm9pvaqKu6mzLINMfkozA.roa
Signing time: Thu 02 Jan 2025 09:50:07 +0000
ROA not before: Thu 02 Jan 2025 09:50:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51167
IP address blocks: 94.250.201.0/24 maxlen: 32
94.250.202.0/24 maxlen: 32
94.250.203.0/24 maxlen: 32
176.57.150.0/24 maxlen: 32
176.57.184.0/24 maxlen: 32
176.57.188.0/24 maxlen: 32
176.57.189.0/24 maxlen: 32
185.137.122.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:1f:f2:ac:b3:78:c6:21:93:f1:74:b0:80:23:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8857ecf441e5ea1d7181fec7e97e6dbc1220fc2
Validity
Not Before: Jan 2 09:50:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=54b07bcc2826f69bdaa8abba9b32c834c7e4a330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:75:d8:fe:6d:42:a1:bc:d7:5e:43:c9:3c:f7:
1b:0d:78:56:88:eb:1f:7b:3f:f8:1a:87:71:ec:71:
0c:f3:ae:47:5a:0b:20:40:b5:71:bd:d8:19:b9:25:
f1:da:d5:a8:ad:68:67:bc:7e:f6:9d:7e:54:03:22:
30:fd:a8:58:2f:29:c3:8e:f6:9c:c2:92:8c:30:8e:
dc:42:51:62:ed:5a:54:44:a0:bc:62:67:cd:ca:0e:
d2:de:d1:01:fd:4b:c0:33:83:fa:54:ed:96:d8:01:
ad:e6:99:0e:bf:41:9f:67:7c:46:af:0a:a5:40:21:
d6:77:69:fd:00:30:60:8c:78:27:8b:23:ca:9e:eb:
26:be:8e:9c:0b:74:aa:d9:0b:e9:f0:e6:fb:6f:34:
8c:54:5a:41:d6:64:45:9a:60:22:95:c7:f6:2b:dc:
3f:c8:c3:86:dc:4a:45:7d:bf:27:29:b2:32:0f:a4:
4c:e8:6c:1c:5f:ae:91:47:b8:0e:a3:d1:f2:42:e2:
32:c3:33:0e:c5:fc:da:8e:6e:6c:5b:df:30:c9:a7:
5c:22:8e:ac:22:42:5c:a1:a7:6b:b9:4f:a1:6b:e7:
3f:12:74:7b:07:a3:f8:b7:ad:35:1b:d6:5d:65:1e:
c1:81:0c:bd:8d:be:80:69:f3:76:bb:a8:62:f0:13:
58:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:B0:7B:CC:28:26:F6:9B:DA:A8:AB:BA:9B:32:C8:34:C7:E4:A3:30
X509v3 Authority Key Identifier:
keyid:F8:85:7E:CF:44:1E:5E:A1:D7:18:1F:EC:7E:97:E6:DB:C1:22:0F:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/VLB7zCgm9pvaqKu6mzLINMfkozA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.250.201.0-94.250.203.255
176.57.150.0/24
176.57.184.0/24
176.57.188.0/23
185.137.122.0/24
Signature Algorithm: sha256WithRSAEncryption
75:a3:49:c9:45:cb:78:90:67:a4:cd:3c:7c:49:ef:17:ee:ed:
3e:95:b7:9a:08:16:8f:46:27:85:7a:5d:9b:9b:da:db:55:1a:
ef:d3:16:f4:b4:72:8f:60:2b:98:b5:fd:49:a2:0c:fb:c4:fd:
b8:c8:12:13:7b:ff:f2:b2:64:11:32:5a:e5:66:62:ad:f5:ae:
e1:84:19:3f:50:e4:67:20:f6:4b:ac:f3:91:ff:bc:64:4e:0e:
35:9b:75:2f:ab:39:fb:3e:73:8f:a0:3e:1c:aa:40:d5:32:3b:
94:94:9c:12:fe:44:0c:1b:24:f9:55:97:82:3c:eb:a5:dd:90:
2a:e7:ea:d8:ac:07:4e:6c:04:15:71:a9:77:6b:e6:9d:a0:73:
19:c9:c2:3b:00:49:e9:4d:6c:04:93:fa:90:ba:46:1c:b6:d0:
a2:d1:0e:bd:b7:32:51:78:10:1c:46:d1:d7:4c:66:2c:c4:bf:
35:cf:db:a5:ef:4b:95:f0:a5:9c:a9:f9:b9:e5:51:fc:fd:21:
08:af:4a:6c:9b:95:8f:90:49:3b:66:51:24:e1:5e:b5:6f:3e:
f0:f3:1b:2e:13:0a:75:e6:5f:58:57:7c:c3:05:5f:64:ee:20:
81:50:82:b5:8e:50:7c:81:fd:d1:3b:f5:cf:77:6a:12:5d:99:
de:5e:69:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 05:00:55 2025 by rpki-client