Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/7588b6-c470-428d-b39e-62f4d27a99d1/1/Vu7Y1ShS2Bjz-EZfthKph5hg-K4.roa
File: Vu7Y1ShS2Bjz-EZfthKph5hg-K4.roa (raw, json)
Hash identifier: 38Tdg1apuUNzFFh13pYHALeLPggNGDb+bNziS3rA9Fo=
Subject key identifier: 56:EE:D8:D5:28:52:D8:18:F3:F8:46:5F:B6:12:A9:87:98:60:F8:AE
Certificate issuer: /CN=7affbbb1e445dc2b8f11421420eb3c16f564ee61
Certificate serial: 019425FC2BE9F6D5AD37DF93D1BC92C5D719
Authority key identifier: 7A:FF:BB:B1:E4:45:DC:2B:8F:11:42:14:20:EB:3C:16:F5:64:EE:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ev-7seRF3CuPEUIUIOs8FvVk7mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/7588b6-c470-428d-b39e-62f4d27a99d1/1/Vu7Y1ShS2Bjz-EZfthKph5hg-K4.roa
Signing time: Thu 02 Jan 2025 07:47:50 +0000
ROA not before: Thu 02 Jan 2025 07:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 185.1.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:2b:e9:f6:d5:ad:37:df:93:d1:bc:92:c5:d7:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7affbbb1e445dc2b8f11421420eb3c16f564ee61
Validity
Not Before: Jan 2 07:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=56eed8d52852d818f3f8465fb612a9879860f8ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:51:da:85:b5:aa:ef:17:40:2f:84:d3:31:1f:
13:02:75:df:18:ed:4d:8a:2f:fc:ad:c3:8d:e2:8b:
61:b6:d9:ea:e8:ac:9f:82:ed:79:b9:61:aa:bd:1f:
80:48:de:02:a4:ff:6f:da:90:d7:55:f1:5b:b9:15:
69:cf:41:7a:ad:a3:e7:13:60:99:fd:90:e9:0e:59:
2b:d5:00:59:8c:e9:63:4b:d2:e6:2e:06:ed:03:14:
86:24:a7:f1:96:10:6d:87:41:d0:0e:12:a8:5b:16:
5b:c0:87:fe:55:db:85:06:4d:d9:2f:50:19:0a:f9:
2b:2b:7d:18:6e:90:e5:b5:be:20:6e:08:7b:1a:c2:
ed:3d:90:df:2c:b6:72:ad:1a:ea:18:e6:53:8b:9e:
63:3e:0c:1f:c1:7e:18:0a:0a:3d:d4:7b:93:0b:55:
80:ea:1d:ca:1a:73:f0:84:5c:f5:5a:f9:a5:43:a5:
ff:c4:aa:10:82:e3:f0:b6:ce:6a:51:a9:3e:73:cf:
45:2a:3b:07:49:6b:87:03:3b:bf:c0:d6:11:f2:97:
5c:e7:43:5a:a3:18:e8:7c:31:67:92:29:26:95:ec:
78:e8:05:46:6e:82:87:23:17:79:b3:3f:0f:96:67:
11:b3:23:c4:7e:06:20:3f:82:b9:cb:28:d0:63:96:
bd:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:EE:D8:D5:28:52:D8:18:F3:F8:46:5F:B6:12:A9:87:98:60:F8:AE
X509v3 Authority Key Identifier:
keyid:7A:FF:BB:B1:E4:45:DC:2B:8F:11:42:14:20:EB:3C:16:F5:64:EE:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ev-7seRF3CuPEUIUIOs8FvVk7mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/7588b6-c470-428d-b39e-62f4d27a99d1/1/Vu7Y1ShS2Bjz-EZfthKph5hg-K4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/7588b6-c470-428d-b39e-62f4d27a99d1/1/ev-7seRF3CuPEUIUIOs8FvVk7mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.179.0/24
Signature Algorithm: sha256WithRSAEncryption
29:20:4e:5c:95:eb:5a:d0:ee:41:71:55:1c:3d:fe:00:cf:de:
2b:2c:53:0d:ba:db:4b:0c:ab:b6:e0:73:f9:27:64:b4:f8:cb:
f5:c6:82:4a:b6:c9:ec:1a:3d:3a:bd:72:85:68:69:cc:26:2d:
f6:49:65:f4:1a:71:08:7e:01:3d:0a:f6:9d:a9:7b:02:d7:c9:
8c:58:88:6d:1a:d2:68:96:ec:d7:1e:87:31:30:6a:84:17:09:
c7:0e:69:c6:a8:4f:01:0f:b3:a6:fa:7e:ea:69:84:73:2d:05:
96:cd:ce:c6:b5:a7:15:81:78:fd:99:3c:9b:ae:d9:99:03:0b:
b4:4d:ac:ff:1d:8a:9d:19:f3:93:bf:2e:15:5a:75:43:30:0b:
bb:53:57:78:af:2d:f9:6a:4a:08:92:39:e7:70:51:7d:1d:9e:
b8:69:c5:69:3f:d4:57:15:ed:88:3a:b1:d3:93:30:8b:eb:d3:
38:fb:e1:7d:10:c6:2b:9f:5e:54:4a:6b:b2:01:f0:ac:82:6e:
c5:ab:b1:af:3b:f3:ed:76:2c:36:59:55:49:d0:f5:1d:ed:a3:
ba:4c:1e:cc:20:e7:e5:f5:76:ea:7d:96:dd:e6:3d:de:b4:f7:
b1:ce:72:72:14:1b:4a:6f:0d:d6:74:d1:f1:9c:f7:9f:bf:c2:
75:f0:fa:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:26:41 2025 by rpki-client