Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/VaCnyWX6jU1U7x4phZq4UQ3hGtE.roa
File: VaCnyWX6jU1U7x4phZq4UQ3hGtE.roa (raw, json)
Hash identifier: HSskmvZRBur17htQDGL9L7zkIxXiCpAQFXJXh8sPXXw=
Subject key identifier: 55:A0:A7:C9:65:FA:8D:4D:54:EF:1E:29:85:9A:B8:51:0D:E1:1A:D1
Certificate issuer: /CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Certificate serial: 0194CB6562BE95ADBEFF641B262877E96EE9
Authority key identifier: AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/VaCnyWX6jU1U7x4phZq4UQ3hGtE.roa
Signing time: Mon 03 Feb 2025 10:40:06 +0000
ROA not before: Mon 03 Feb 2025 10:40:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48612
IP address blocks: 62.118.96.0/23 maxlen: 23
85.140.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:cb:65:62:be:95:ad:be:ff:64:1b:26:28:77:e9:6e:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Validity
Not Before: Feb 3 10:40:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=55a0a7c965fa8d4d54ef1e29859ab8510de11ad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d5:a8:11:24:86:9e:d0:62:1d:21:88:42:01:
c5:5b:57:5e:c5:80:4c:e3:1e:ac:ab:47:1f:51:9e:
51:78:ee:aa:66:98:73:02:b5:2e:15:46:f4:f2:b9:
8a:f3:61:70:37:a8:2e:c8:1b:bc:78:0c:6a:b9:20:
10:b9:94:23:e3:db:97:11:2f:06:ff:b8:30:b7:d1:
31:6f:81:cb:b7:8e:4b:e7:a2:ae:33:07:b0:a5:a0:
60:a4:64:23:bd:01:81:d8:e0:a1:f1:86:31:c7:4a:
8f:fe:3e:1d:54:36:c3:1e:1d:8a:8b:ce:e4:4e:78:
db:17:ab:f9:54:d3:73:34:ea:16:43:d7:db:23:04:
fe:c8:e1:58:9b:78:03:96:dc:f1:f3:03:ac:b5:7d:
62:b9:ca:8a:d3:52:62:91:21:87:97:75:f6:88:b3:
03:fb:93:bc:47:f2:02:c8:fe:fc:cb:2f:11:9b:b3:
13:24:a8:6f:4a:f9:36:95:ce:6a:e5:ab:93:ad:6b:
fd:2d:4c:ce:ac:d3:13:72:df:1e:42:80:ad:d5:15:
a1:4e:f8:95:9f:2a:58:4b:26:80:0a:5c:02:bf:6a:
d6:13:7e:8a:26:50:dc:c5:b1:86:0b:e3:31:e5:29:
4f:0f:ab:c0:c7:a4:fd:d1:08:28:3b:8b:b3:90:df:
da:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:A0:A7:C9:65:FA:8D:4D:54:EF:1E:29:85:9A:B8:51:0D:E1:1A:D1
X509v3 Authority Key Identifier:
keyid:AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/VaCnyWX6jU1U7x4phZq4UQ3hGtE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.118.96.0/23
85.140.126.0/24
Signature Algorithm: sha256WithRSAEncryption
40:ad:b5:1e:48:3c:d1:65:f6:b6:0c:36:68:56:ef:68:70:70:
4a:f5:20:47:a5:ee:41:68:0b:58:fd:28:14:78:3f:da:92:e4:
bb:16:a0:d4:d5:6f:4d:11:8c:e2:e6:0b:54:38:9f:5b:29:16:
c1:52:24:8e:47:5c:c5:08:30:85:50:8e:31:82:c8:0a:33:8d:
17:81:92:4f:3e:8c:68:64:cb:9f:24:75:68:77:93:ce:72:7b:
8d:f7:2d:04:33:d5:ea:d9:5b:6c:cd:83:0c:01:76:03:27:f1:
43:5b:eb:d2:63:e3:cb:53:24:36:7b:e5:0f:fa:04:85:2b:67:
36:ce:cc:7c:e6:04:00:48:22:38:12:a9:3f:22:02:59:ac:3d:
d2:10:ac:62:0c:4d:9d:03:42:ff:2e:84:f5:dd:dc:a6:b3:28:
5c:5e:e9:fe:3b:cf:00:ea:03:2a:30:a2:fe:a2:8e:c2:27:12:
bf:79:a8:53:04:20:c0:c4:2e:ca:c3:66:58:2e:b0:82:b5:8d:
f6:bc:20:e2:f5:26:20:0d:a4:95:96:7f:a7:74:22:4f:a2:7f:
9c:61:6b:e1:39:b2:cd:d6:2b:54:23:1a:f7:bc:dc:cf:43:ca:
14:50:41:f1:61:8d:78:ff:e4:b6:ea:81:eb:68:9a:33:0e:bc:
a4:04:db:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:38:24 2025 by rpki-client