Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/da46ee-f8d9-44da-9982-03f5eb148688/1/VjHwGyrOx2nS8WCt4eFcgjiLSgg.roa
File: VjHwGyrOx2nS8WCt4eFcgjiLSgg.roa (raw, json)
Hash identifier: J5/WrnrqSdufkXrkecy77pyj0wOZ9gVpOdN2V2AOh7Q=
Subject key identifier: 56:31:F0:1B:2A:CE:C7:69:D2:F1:60:AD:E1:E1:5C:82:38:8B:4A:08
Certificate issuer: /CN=93a959c25dbbc367caa89825e8bff5b4b4f11c9b
Certificate serial: 01886E85D4E679E24E65ABCF4F05441549FC
Authority key identifier: 93:A9:59:C2:5D:BB:C3:67:CA:A8:98:25:E8:BF:F5:B4:B4:F1:1C:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k6lZwl27w2fKqJgl6L_1tLTxHJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/da46ee-f8d9-44da-9982-03f5eb148688/1/VjHwGyrOx2nS8WCt4eFcgjiLSgg.roa
Signing time: Tue 30 May 2023 21:17:24 +0000
ROA not before: Tue 30 May 2023 21:17:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200603
IP address blocks: 185.79.125.0/24 maxlen: 24
2a13:5740::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:6e:85:d4:e6:79:e2:4e:65:ab:cf:4f:05:44:15:49:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93a959c25dbbc367caa89825e8bff5b4b4f11c9b
Validity
Not Before: May 30 21:17:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5631f01b2acec769d2f160ade1e15c82388b4a08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bd:ea:87:c1:a9:57:4d:81:45:97:cf:2d:db:
e7:14:82:cd:7d:90:de:bd:69:03:bd:9c:91:fe:0a:
c6:2f:38:89:72:56:d1:f6:20:51:9c:c5:98:0c:35:
4d:e5:85:06:55:93:49:71:13:44:a4:05:0e:0c:8d:
25:c9:4e:ac:fa:88:7f:96:c2:cc:17:3f:9f:b8:b7:
35:62:fa:bf:db:df:db:96:20:f0:75:68:7e:52:50:
2c:24:62:cb:c4:ad:33:02:83:4d:3a:b3:fb:8d:39:
f1:06:1a:66:e8:ec:f9:ba:10:24:16:cd:bc:d3:6a:
cb:1c:8c:86:ab:05:b2:41:61:eb:81:8b:f4:35:a6:
2f:c0:71:e7:89:cc:f8:ca:c1:c6:2c:41:4b:d9:f9:
30:2d:6d:55:5f:af:f8:56:23:a6:3d:8d:82:99:5d:
d3:d6:d0:1d:af:32:f9:e0:21:c8:10:79:76:9e:1e:
94:6c:99:4c:1b:c5:6d:13:40:3e:15:e3:36:1a:dd:
25:72:60:0d:56:46:84:40:7a:0a:ee:9f:9f:f5:e2:
cf:24:d1:a1:5b:db:2e:8d:12:27:40:d3:6a:64:bf:
a3:98:a5:6a:2d:de:7b:ed:85:3f:b8:eb:6c:ca:12:
9b:91:db:6a:36:4b:fd:8d:d4:1f:7c:49:c9:4c:cd:
e0:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:31:F0:1B:2A:CE:C7:69:D2:F1:60:AD:E1:E1:5C:82:38:8B:4A:08
X509v3 Authority Key Identifier:
keyid:93:A9:59:C2:5D:BB:C3:67:CA:A8:98:25:E8:BF:F5:B4:B4:F1:1C:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6lZwl27w2fKqJgl6L_1tLTxHJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/da46ee-f8d9-44da-9982-03f5eb148688/1/VjHwGyrOx2nS8WCt4eFcgjiLSgg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/da46ee-f8d9-44da-9982-03f5eb148688/1/k6lZwl27w2fKqJgl6L_1tLTxHJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.79.125.0/24
IPv6:
2a13:5740::/29
Signature Algorithm: sha256WithRSAEncryption
78:55:b4:55:4e:08:5d:28:4c:1f:24:e0:32:25:26:9f:da:7c:
d2:b6:a0:df:a8:9b:27:cc:7b:68:50:1e:10:17:fb:3c:c8:73:
43:1f:2c:70:6d:a6:04:47:03:cb:c9:ab:b2:0b:90:79:a4:a6:
db:f8:04:06:ab:db:e4:7c:75:41:91:5c:b9:9a:dd:32:a6:cd:
9f:08:2a:17:b1:67:b5:f7:23:e9:6e:1f:da:58:fb:78:90:0e:
11:d0:fb:89:e6:a6:e3:95:56:56:57:13:b7:17:99:98:64:31:
1b:a1:54:dc:30:04:64:47:b3:78:e9:e8:1b:7f:5c:32:ea:63:
bc:62:0c:96:b8:39:e2:73:d5:cb:3f:d8:da:9f:f0:aa:a9:08:
aa:d8:3a:b2:69:6e:02:fe:0d:07:91:20:32:1d:76:e0:06:24:
89:32:42:14:0b:2a:45:90:25:92:1b:ba:8a:89:14:2a:81:82:
41:62:26:fe:22:f8:41:bc:8a:f4:d0:9e:91:6f:19:34:76:c9:
24:91:3f:23:9b:fb:d2:a8:5a:96:4d:c2:1b:b2:90:bb:37:e4:
2f:04:c5:d7:b2:fe:12:59:63:a6:40:c5:1b:bb:28:8a:f2:4d:
dc:3e:d8:47:c4:b3:48:37:64:9e:e7:00:c8:6f:9e:6d:f8:0c:
6b:c8:15:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:46:24 2025 by rpki-client