Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VxzvbbNUAObmMU0IpKcdnXZ1BxE.roa
File: VxzvbbNUAObmMU0IpKcdnXZ1BxE.roa (raw, json)
Hash identifier: O0rL/Xrm85XOk/qFl3MooUNeHPMNMB+5ehqcO2RLcWI=
Subject key identifier: 57:1C:EF:6D:B3:54:00:E6:E6:31:4D:08:A4:A7:1D:9D:76:75:07:11
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 019423D70BD905683617BBF1B2B550A08E66
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VxzvbbNUAObmMU0IpKcdnXZ1BxE.roa
Signing time: Wed 01 Jan 2025 21:48:03 +0000
ROA not before: Wed 01 Jan 2025 21:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202505
IP address blocks: 213.238.180.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:0b:d9:05:68:36:17:bb:f1:b2:b5:50:a0:8e:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: Jan 1 21:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=571cef6db35400e6e6314d08a4a71d9d76750711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f0:0a:ea:a6:30:70:56:1e:f3:da:00:0a:5e:
b2:f9:97:6b:55:63:d7:fb:8c:be:12:1d:d0:2a:e0:
04:42:8e:b2:77:91:fe:a7:f1:12:73:92:c8:79:1f:
76:4e:50:9e:49:96:3a:12:1a:8a:80:2c:3d:82:7a:
90:cb:8a:13:62:89:cf:9b:d3:ad:2f:12:a1:c3:bd:
96:98:f2:ae:10:24:19:73:8a:be:af:24:62:1e:8e:
51:8a:dd:98:13:bd:ea:72:b1:b4:4c:ec:8c:78:f6:
c9:34:17:74:08:51:c8:db:82:cb:b2:9a:07:31:86:
19:99:6d:e8:e0:ec:19:cb:78:ca:07:6f:53:1a:1d:
b2:6a:57:82:d7:69:e8:15:52:50:84:3f:80:13:d4:
75:97:1c:4f:7f:39:48:c7:43:9e:63:58:af:f6:54:
6f:73:c3:99:49:b2:3b:f3:44:3c:51:31:89:37:10:
96:19:ee:88:db:9c:0d:4e:35:6f:3b:dd:02:5e:dc:
d6:8f:58:af:92:ef:3a:17:1d:25:2a:93:a7:8f:f7:
f7:8f:a2:32:1e:0b:8a:95:70:ad:e4:4b:95:3e:71:
9f:24:e4:27:b5:a2:bf:38:eb:9a:b7:44:99:18:7e:
dc:de:9b:f3:0f:8f:80:62:a1:74:a6:8c:9b:f0:15:
4b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:1C:EF:6D:B3:54:00:E6:E6:31:4D:08:A4:A7:1D:9D:76:75:07:11
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VxzvbbNUAObmMU0IpKcdnXZ1BxE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.180.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:41:da:32:da:87:e4:0f:8f:fb:ba:6e:15:ea:0d:ce:08:8c:
0f:60:61:84:2d:fe:c3:f3:95:14:c1:b7:9b:95:e9:9c:d2:39:
08:93:30:1c:ea:01:ac:aa:72:9a:de:a2:71:15:2a:34:7c:d5:
85:b1:25:65:96:ec:ce:b5:0f:94:f9:a8:e8:72:47:b8:e9:81:
3a:8a:24:16:26:1c:76:a9:2f:e9:5d:a3:6c:6c:14:91:6c:d9:
1c:35:5c:c6:37:a7:69:e0:a1:4d:4c:df:87:4d:81:b0:77:96:
73:9b:64:4e:57:3a:34:f9:6a:e1:6e:87:3b:b4:9b:fc:3e:c9:
52:80:de:8b:4c:31:82:f8:55:d4:35:67:11:9c:81:86:02:2c:
51:5d:76:e7:ae:7b:80:88:0b:c3:c8:04:16:ea:e5:c9:11:75:
c7:71:65:2d:be:24:f2:f4:eb:cb:a3:a4:32:bb:fd:ff:42:ac:
13:6d:4d:e0:e0:74:e3:0c:a8:99:f4:ec:40:b6:b2:3f:b4:04:
6b:5d:5a:5e:00:3b:32:6c:6d:83:65:f6:94:30:84:4b:dd:52:
ed:b2:5d:7f:11:8a:3e:41:6b:17:24:cd:9b:91:ec:9d:42:28:
6a:c9:e9:ab:92:18:92:4c:2d:e6:96:92:dd:f8:a1:94:4c:91:
5e:c0:c4:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 13:32:38 2025 by rpki-client