Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/VU0FkvZgVaRI8EGkm-qXkP1h2_c.roa
File: VU0FkvZgVaRI8EGkm-qXkP1h2_c.roa (raw, json)
Hash identifier: FXgImtBv7FeA5blXsKdg5pD7MuiscFVJi0Lfx25h6e4=
Subject key identifier: 55:4D:05:92:F6:60:55:A4:48:F0:41:A4:9B:EA:97:90:FD:61:DB:F7
Certificate issuer: /CN=dc05df6e404ef920e6a5928d8963e6a5f8d61120
Certificate serial: 0194236A314D615CAE2410534607A111669A
Authority key identifier: DC:05:DF:6E:40:4E:F9:20:E6:A5:92:8D:89:63:E6:A5:F8:D6:11:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AXfbkBO-SDmpZKNiWPmpfjWESA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/VU0FkvZgVaRI8EGkm-qXkP1h2_c.roa
Signing time: Wed 01 Jan 2025 19:49:09 +0000
ROA not before: Wed 01 Jan 2025 19:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6507
IP address blocks: 185.40.64.0/22 maxlen: 22
185.40.64.0/24 maxlen: 24
2a04:82c0::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:31:4d:61:5c:ae:24:10:53:46:07:a1:11:66:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc05df6e404ef920e6a5928d8963e6a5f8d61120
Validity
Not Before: Jan 1 19:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=554d0592f66055a448f041a49bea9790fd61dbf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6b:cb:cf:7e:df:9b:e5:4e:67:32:e2:17:43:
35:c4:61:f6:fc:67:f6:15:05:c0:70:62:08:a3:fa:
f8:c7:5f:eb:ac:cb:42:b4:2f:e1:37:5e:bb:aa:1f:
a6:3f:c9:77:af:c3:0b:56:c8:93:ea:21:df:fa:49:
d6:e3:af:a2:47:b4:8b:5c:b4:23:b4:9a:13:06:4d:
00:4b:0b:09:4c:e0:12:2e:2d:1b:65:1b:d7:08:f7:
d8:d4:ce:f8:cc:09:17:94:25:b1:fa:52:11:3d:aa:
5f:92:72:24:fd:05:01:27:07:ff:35:d6:6c:22:76:
ac:5a:b0:3d:c0:b3:63:83:40:5e:59:2f:05:93:33:
7e:1a:4b:5d:40:4d:cf:ed:b4:27:68:71:cc:27:56:
85:81:da:ce:34:7e:e8:38:42:44:cf:7c:05:6f:26:
6d:f9:36:e3:fb:7b:01:7a:f8:94:7d:29:e2:8c:f0:
0e:52:ce:bf:3a:71:de:71:f0:28:6d:6a:17:00:23:
1d:95:fb:5f:e0:10:9f:ed:6c:f1:7e:22:ea:23:be:
7f:ce:e9:34:cc:8d:cd:d0:1e:3f:8a:57:73:e7:2f:
ad:75:77:df:71:fb:ad:50:e3:c4:f0:1b:9e:94:5e:
df:8b:b9:93:e9:8a:f0:a2:90:2b:cd:be:51:d7:48:
42:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:4D:05:92:F6:60:55:A4:48:F0:41:A4:9B:EA:97:90:FD:61:DB:F7
X509v3 Authority Key Identifier:
keyid:DC:05:DF:6E:40:4E:F9:20:E6:A5:92:8D:89:63:E6:A5:F8:D6:11:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AXfbkBO-SDmpZKNiWPmpfjWESA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/VU0FkvZgVaRI8EGkm-qXkP1h2_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.40.64.0/22
IPv6:
2a04:82c0::/29
Signature Algorithm: sha256WithRSAEncryption
6b:a1:c2:9a:79:eb:87:3a:67:9c:03:74:a1:58:d3:e3:42:4a:
c6:5f:4a:59:2d:2f:15:69:41:3c:17:61:cc:ff:b0:a6:6d:77:
36:98:c2:7c:bf:14:1d:60:65:a5:9d:d1:99:f5:0d:9e:00:f8:
f8:c3:db:f9:3a:ec:f3:93:1a:d0:b0:03:05:46:8e:20:d5:11:
6e:62:b3:30:5f:70:31:02:49:83:24:8b:bc:14:ca:b6:e6:42:
12:78:ec:c5:a3:c2:fa:68:76:17:fd:0c:67:b5:9e:f2:61:34:
85:ad:23:85:b5:57:bb:3f:46:d3:20:d8:f0:ef:ef:9c:63:58:
a9:fa:eb:c9:e6:28:0a:e2:6b:61:1c:d3:0f:b0:cb:37:2c:74:
c0:aa:91:ef:ea:86:06:b0:83:e5:e4:96:6b:27:2c:fd:90:da:
4e:60:54:30:8b:5d:c7:63:02:8a:92:27:c8:52:b9:21:97:6b:
63:6c:57:e9:f6:23:40:b8:74:33:e0:34:b8:64:f6:1a:dc:a1:
cf:73:d4:80:dc:01:d2:96:c5:a0:0b:1f:69:3b:6e:95:f5:97:
f9:90:d9:f9:4d:70:05:c8:e6:e8:27:e5:9f:8c:5b:2c:c3:8b:
87:1a:f0:5d:28:4b:16:1c:24:a7:36:86:e9:ab:67:4b:a7:87:
6b:61:67:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:44:15 2025 by rpki-client