Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/VUMA1w_cWfBfkplU1WhBDdmnD9o.roa
File: VUMA1w_cWfBfkplU1WhBDdmnD9o.roa (raw, json)
Hash identifier: rD4utDh7xiQYF3Mhd366hiIbKkVcQBZdqh6/duIbK7U=
Subject key identifier: 55:43:00:D7:0F:DC:59:F0:5F:92:99:54:D5:68:41:0D:D9:A7:0F:DA
Certificate issuer: /CN=75b5abb35fca3070d48122a339ec5cbeff0be97a
Certificate serial: 019427482C76446FC0B4782B8BD97F07E473
Authority key identifier: 75:B5:AB:B3:5F:CA:30:70:D4:81:22:A3:39:EC:5C:BE:FF:0B:E9:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/VUMA1w_cWfBfkplU1WhBDdmnD9o.roa
Signing time: Thu 02 Jan 2025 13:50:28 +0000
ROA not before: Thu 02 Jan 2025 13:50:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41872
IP address blocks: 185.244.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:2c:76:44:6f:c0:b4:78:2b:8b:d9:7f:07:e4:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75b5abb35fca3070d48122a339ec5cbeff0be97a
Validity
Not Before: Jan 2 13:50:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=554300d70fdc59f05f929954d568410dd9a70fda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:41:70:8d:56:2b:5b:81:02:5c:f2:87:66:cb:
dc:c5:d6:78:28:c3:bf:e4:15:e0:52:94:21:38:4a:
d3:45:d5:a4:95:d8:71:72:0c:15:1e:3e:a2:c2:95:
c0:ff:bb:b7:f1:30:c6:8e:7f:ed:7e:aa:78:76:75:
47:1f:b5:0f:78:8a:0e:a4:ae:69:da:9d:97:69:b8:
07:1f:cb:68:19:82:09:28:8e:f3:c8:4e:46:1b:7b:
43:00:57:01:bc:35:46:81:52:31:eb:b4:f4:f6:50:
e1:23:12:cd:c9:58:21:5e:2c:4f:0a:06:a3:e6:76:
14:e6:00:a2:14:d1:ab:9a:55:c0:1a:10:eb:a0:15:
4a:83:4e:1a:9e:a3:68:a4:a9:a7:79:c4:3a:a8:35:
da:d5:3e:a2:3a:d8:ca:db:a1:80:fe:66:7d:c8:7d:
dd:c8:1a:f3:e0:74:d8:24:ea:39:2b:06:c8:60:02:
1a:97:00:47:8d:f2:dd:93:71:3c:55:88:45:4f:e3:
65:eb:41:58:57:1f:9c:c3:2d:c0:63:b1:d6:0b:57:
85:fe:f0:ff:f9:23:58:1b:46:19:ec:1c:5c:0e:2a:
0a:ea:a7:33:36:3f:91:42:b0:7e:cf:69:e4:d9:62:
f4:20:14:c2:40:43:00:54:86:58:69:28:9f:f5:1f:
02:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:43:00:D7:0F:DC:59:F0:5F:92:99:54:D5:68:41:0D:D9:A7:0F:DA
X509v3 Authority Key Identifier:
keyid:75:B5:AB:B3:5F:CA:30:70:D4:81:22:A3:39:EC:5C:BE:FF:0B:E9:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/VUMA1w_cWfBfkplU1WhBDdmnD9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.255.0/24
Signature Algorithm: sha256WithRSAEncryption
31:e8:0d:6b:a2:7a:92:94:1b:39:5e:d0:24:f5:18:b8:1b:86:
8f:93:2b:64:12:98:95:bb:2b:fb:86:59:8e:28:f1:1b:f0:ef:
e7:c8:20:8a:dd:9d:e3:43:68:26:ce:42:12:b1:b8:77:4d:75:
87:9d:33:22:42:7a:2e:63:e9:e2:51:04:84:16:66:78:2f:60:
f6:86:ce:90:b9:bd:02:34:cd:ed:ed:b8:be:07:31:a7:85:b1:
9c:70:9f:9e:42:e3:66:7e:b6:4b:32:e0:a8:c9:08:7f:a9:28:
63:de:ae:58:86:bf:d2:d4:52:62:49:3d:86:8d:2d:0d:33:44:
a4:23:69:f4:2c:50:06:00:3a:fe:ad:bd:6a:b2:ba:ab:75:43:
0e:48:63:a7:9d:9b:c2:5b:76:b8:d8:6b:a3:53:6e:d5:5e:7e:
23:58:fb:53:58:db:8e:9f:be:06:11:f3:6c:c1:93:3d:68:2d:
07:0c:c8:fb:6a:49:0b:29:e7:88:e2:18:4c:b1:55:3c:50:69:
a4:10:a5:0b:51:7b:08:0b:9b:97:c4:59:7a:85:d8:8d:bf:42:
50:80:1e:f4:6b:58:e6:c8:5d:08:4f:d7:f1:fb:91:a1:3b:2c:
30:ec:6f:65:c6:8b:e6:5f:12:2f:6b:98:7b:0b:e0:c3:e7:73:
04:00:9d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:42:33 2025 by rpki-client