Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/VrGGCYFwhGi4BPeG9vQveoaFfLM.roa
File: VrGGCYFwhGi4BPeG9vQveoaFfLM.roa (raw, json)
Hash identifier: edTPl3MGZDPIQA5qIWNLHzc/W7A7u7n891N+syJZyK8=
Subject key identifier: 56:B1:86:09:81:70:84:68:B8:04:F7:86:F6:F4:2F:7A:86:85:7C:B3
Certificate issuer: /CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Certificate serial: 0194228E0C2C3C6756D2E779286B5A81D784
Authority key identifier: BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/VrGGCYFwhGi4BPeG9vQveoaFfLM.roa
Signing time: Wed 01 Jan 2025 15:48:42 +0000
ROA not before: Wed 01 Jan 2025 15:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57886
IP address blocks: 195.214.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:0c:2c:3c:67:56:d2:e7:79:28:6b:5a:81:d7:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Validity
Not Before: Jan 1 15:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=56b1860981708468b804f786f6f42f7a86857cb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1f:cf:a3:df:48:5c:35:e1:ac:2c:63:aa:82:
4d:0e:0c:e0:01:83:aa:1f:bd:54:52:2c:94:90:67:
3a:5b:6e:bf:44:07:bd:b0:e4:10:40:9b:2a:3e:76:
64:f4:18:4f:8a:df:87:e3:12:4f:fa:57:3f:58:72:
24:c3:bc:f1:f6:a3:b7:42:bb:f3:e1:0b:35:35:13:
dc:3f:84:8b:99:66:55:0d:97:1f:76:dc:cf:01:98:
3c:4b:f4:f5:8b:3f:4b:a6:33:10:53:b3:e9:e2:6d:
e8:e5:c9:33:f8:29:22:62:b3:83:04:d6:d7:f9:b2:
f8:b2:61:b4:68:cb:d7:3c:73:d0:51:a9:72:bd:5d:
21:86:9f:e3:4b:ea:d4:10:92:c2:7c:d3:26:94:4d:
24:3b:86:26:9a:97:39:3e:9c:ea:07:9d:62:f6:0f:
19:37:26:da:35:5c:c6:19:96:3a:3b:c4:0d:db:f9:
35:c0:71:e3:56:11:03:f5:c3:b4:51:46:f4:1e:31:
6a:81:8d:e5:6b:e8:7a:4c:13:93:df:8d:5d:12:f0:
e3:a4:15:30:3e:68:75:2a:94:2f:3e:f5:0f:42:f7:
2a:a4:d6:ab:8b:80:7a:53:10:04:40:9e:b0:48:f2:
d9:f4:f8:94:ed:48:ad:b4:d1:2f:1c:18:77:cb:38:
d3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:B1:86:09:81:70:84:68:B8:04:F7:86:F6:F4:2F:7A:86:85:7C:B3
X509v3 Authority Key Identifier:
keyid:BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/VrGGCYFwhGi4BPeG9vQveoaFfLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.214.160.0/24
Signature Algorithm: sha256WithRSAEncryption
81:10:8b:0f:fa:61:76:ca:63:c7:08:70:53:5b:2b:bb:60:a0:
88:1f:8f:f3:c8:35:2b:be:ca:ac:a6:6a:1b:af:cc:2d:37:f0:
ed:e9:0b:64:e8:fa:a0:b4:6b:48:f9:02:66:59:3c:f8:f5:99:
6c:7f:b6:6e:c0:ff:a0:07:ed:f4:c7:74:37:39:1d:04:99:46:
77:01:be:95:73:4f:eb:d0:fb:14:3d:3e:32:7f:9b:90:ed:a3:
89:45:5d:08:50:d7:14:33:b8:59:e1:13:e8:be:27:3e:5c:8a:
ab:9d:8f:35:ba:eb:b0:9e:92:c4:73:b9:9e:fe:ce:8f:f3:49:
59:52:46:c9:97:5b:cf:4a:e8:b0:e4:c0:ed:e1:3e:bc:d8:3e:
1d:05:1d:47:63:00:61:2b:77:e8:c7:ad:1f:10:8e:ab:9f:d2:
6c:e3:fe:3d:bd:30:de:ad:74:5d:6b:14:8a:46:69:39:2b:7d:
bc:c7:17:1f:0a:cc:b9:3b:0a:73:fc:5f:74:5c:c4:80:24:46:
86:ef:06:92:b9:43:7d:37:8e:eb:6c:af:ce:3c:a7:ef:f2:0e:
ef:51:0d:b9:00:90:27:23:92:be:19:b1:d0:53:f6:a9:43:4f:
74:62:be:52:e2:3a:1c:40:26:04:42:10:54:1e:e6:38:0a:a8:
36:62:07:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:41:20 2025 by rpki-client