Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/0658f4-ae21-40ca-a3dc-c230519482e3/1/Vj-lvTGg8De1bwqYRPmQfCNExMQ.roa
File: Vj-lvTGg8De1bwqYRPmQfCNExMQ.roa (raw, json)
Hash identifier: 3it8/HFV/fpnYusx4vtTNw4On00xS6jQZONP3RiSdOs=
Subject key identifier: 56:3F:A5:BD:31:A0:F0:37:B5:6F:0A:98:44:F9:90:7C:23:44:C4:C4
Certificate issuer: /CN=b2c1d428cdee1eb3ffbf6df2318f9954dd885ff0
Certificate serial: 018723A9FFE2C111CBEB5AC44D4DE7B7D7A1
Authority key identifier: B2:C1:D4:28:CD:EE:1E:B3:FF:BF:6D:F2:31:8F:99:54:DD:88:5F:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ssHUKM3uHrP_v23yMY-ZVN2IX_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/0658f4-ae21-40ca-a3dc-c230519482e3/1/Vj-lvTGg8De1bwqYRPmQfCNExMQ.roa
Signing time: Mon 27 Mar 2023 15:22:36 +0000
ROA not before: Mon 27 Mar 2023 15:22:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207279
IP address blocks: 194.150.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:23:a9:ff:e2:c1:11:cb:eb:5a:c4:4d:4d:e7:b7:d7:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2c1d428cdee1eb3ffbf6df2318f9954dd885ff0
Validity
Not Before: Mar 27 15:22:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=563fa5bd31a0f037b56f0a9844f9907c2344c4c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f3:0e:2a:c2:82:68:48:89:4b:3c:53:e1:3b:
ec:b8:d1:3b:61:90:23:c3:51:26:9c:e4:79:17:cf:
76:0b:9c:28:10:d3:7d:a4:5f:94:a8:1f:8e:65:e0:
e4:2e:f9:4c:af:ac:99:e0:9d:da:67:87:c6:1f:05:
9a:72:7a:f0:7d:95:b8:ad:10:0b:1f:9a:fe:d3:fb:
dc:33:32:c8:c1:fc:f3:a3:09:ef:7c:e5:af:ea:06:
04:6f:02:db:04:cd:79:d8:5c:fc:c8:9a:3f:db:1b:
06:ed:11:26:aa:5e:21:5d:3b:4e:ba:d0:41:18:8b:
fc:d3:4a:e9:bd:38:3a:52:fa:ad:0a:85:89:c8:b7:
76:b7:8b:0d:95:fc:92:b4:5e:04:02:a0:cc:73:38:
ff:2b:a9:ce:e8:fd:57:0d:e9:5f:47:e0:0a:bf:f2:
f8:0f:74:af:2f:32:16:8f:8e:dd:1e:16:2b:da:d2:
da:8f:fb:63:23:25:94:ff:e2:dd:6d:43:ff:05:9b:
fb:e7:c5:93:fc:e2:20:47:f1:13:81:22:fb:bf:65:
0d:3b:10:cc:71:1a:30:c1:6e:67:28:1b:76:99:61:
89:68:04:46:8f:ab:0f:36:a7:09:71:d6:52:52:f9:
d1:8d:4a:6f:93:62:f9:13:57:73:10:30:7d:d9:8e:
b0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:3F:A5:BD:31:A0:F0:37:B5:6F:0A:98:44:F9:90:7C:23:44:C4:C4
X509v3 Authority Key Identifier:
keyid:B2:C1:D4:28:CD:EE:1E:B3:FF:BF:6D:F2:31:8F:99:54:DD:88:5F:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssHUKM3uHrP_v23yMY-ZVN2IX_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0658f4-ae21-40ca-a3dc-c230519482e3/1/Vj-lvTGg8De1bwqYRPmQfCNExMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0658f4-ae21-40ca-a3dc-c230519482e3/1/ssHUKM3uHrP_v23yMY-ZVN2IX_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.79.0/24
Signature Algorithm: sha256WithRSAEncryption
84:c2:b5:66:01:a9:a8:ee:f3:f1:48:ab:32:93:b1:62:ce:67:
f9:ab:1a:f3:1f:b9:84:f5:cc:f9:f2:e4:17:35:fa:fd:b3:05:
a2:ae:c9:9e:38:4b:3e:31:e1:da:f8:26:ec:df:8a:1f:92:d3:
a9:c7:c8:74:4f:d2:67:d3:7d:5c:2f:70:f6:ef:22:80:e7:51:
70:e9:fe:e3:62:5e:82:b9:1e:fb:f5:30:1a:af:89:23:0c:14:
d9:c6:e9:5c:69:6f:88:f9:0d:da:71:c1:11:e2:da:36:00:41:
13:5f:06:be:41:a1:19:0c:42:64:9c:40:fe:eb:3b:99:e8:e2:
80:32:08:14:03:b0:f6:36:90:78:a0:f9:50:2d:98:93:82:20:
0b:35:3b:fd:30:ae:ca:9b:c0:a2:d8:ab:4a:1f:27:e6:57:5f:
55:38:06:14:73:4f:43:7f:49:1d:8d:ad:a8:90:fe:9c:fc:ab:
08:b4:4b:4c:32:b1:48:62:ad:99:34:31:45:41:c2:28:18:12:
9c:e9:45:6d:09:08:6e:47:e6:bd:4b:55:67:06:f0:be:ec:21:
01:cf:9e:fa:61:b4:c6:80:ca:58:a4:71:21:18:b9:19:61:87:
75:15:8a:db:90:62:bc:5f:42:ae:a8:b3:21:b9:99:7c:10:ce:
8c:6b:6a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:10:10 2025 by rpki-client