Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/vcl1p6ptmFRb-F4yTfpIsvctLc4.roa
File: vcl1p6ptmFRb-F4yTfpIsvctLc4.roa (raw, json)
Hash identifier: SMIEIwggcjVgdMkQCnp6J0Lo2kApnYhvBTOF0WKyJ58=
Subject key identifier: BD:C9:75:A7:AA:6D:98:54:5B:F8:5E:32:4D:FA:48:B2:F7:2D:2D:CE
Certificate issuer: /CN=07b80d5f4a9c92dd92a4605719e0ae8d1a62c043
Certificate serial: 019421B1B7AB22641F7648B4E80887DC5D1B
Authority key identifier: 07:B8:0D:5F:4A:9C:92:DD:92:A4:60:57:19:E0:AE:8D:1A:62:C0:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B7gNX0qckt2SpGBXGeCujRpiwEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/vcl1p6ptmFRb-F4yTfpIsvctLc4.roa
Signing time: Wed 01 Jan 2025 11:48:02 +0000
ROA not before: Wed 01 Jan 2025 11:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42731
IP address blocks: 194.176.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:b7:ab:22:64:1f:76:48:b4:e8:08:87:dc:5d:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07b80d5f4a9c92dd92a4605719e0ae8d1a62c043
Validity
Not Before: Jan 1 11:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bdc975a7aa6d98545bf85e324dfa48b2f72d2dce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2c:c9:12:32:f3:a2:01:3e:1b:21:b7:32:4b:
83:cd:7d:63:e5:82:20:0e:49:80:da:32:8d:1c:8c:
1c:91:eb:a9:0d:fc:1c:2c:42:47:33:18:e0:96:c1:
a5:96:fd:bc:79:cf:79:e3:2e:22:9e:51:45:90:27:
a6:8c:41:6f:0d:bf:f0:dc:b1:99:1b:fe:a9:a7:c4:
e4:35:c9:a1:53:5b:6a:55:75:bb:26:a2:52:4b:cd:
86:f7:46:0d:a6:ba:d2:8e:af:73:3a:bc:dc:7c:c6:
51:0b:85:c5:aa:ff:d5:66:62:e1:06:67:e3:90:fc:
e9:e2:7f:5f:b2:c3:2b:17:f3:f8:ab:41:27:8b:40:
5a:74:5d:2b:68:ea:e6:7e:70:93:70:e1:03:87:b5:
57:2d:b6:3f:3b:63:00:f0:d6:f1:06:11:a5:50:aa:
d7:d6:7d:04:90:84:77:ea:a1:a2:c9:59:a4:e1:ad:
3a:04:a9:60:31:cd:c6:b1:af:41:d7:9d:92:8e:ac:
3a:ff:d1:6b:da:17:61:67:0b:f6:68:d2:df:25:3e:
96:5e:2e:81:25:36:8c:96:b3:72:6b:df:19:33:2e:
cb:7a:2d:af:da:b6:45:2c:fb:ba:01:5a:7f:ca:0c:
f6:3f:a2:18:45:da:23:38:3d:ba:5c:d6:53:81:cb:
20:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C9:75:A7:AA:6D:98:54:5B:F8:5E:32:4D:FA:48:B2:F7:2D:2D:CE
X509v3 Authority Key Identifier:
keyid:07:B8:0D:5F:4A:9C:92:DD:92:A4:60:57:19:E0:AE:8D:1A:62:C0:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B7gNX0qckt2SpGBXGeCujRpiwEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/vcl1p6ptmFRb-F4yTfpIsvctLc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.176.190.0/24
Signature Algorithm: sha256WithRSAEncryption
30:83:32:6f:4e:03:51:3c:57:c9:06:d2:d4:65:dd:d4:55:22:
f3:df:e7:18:5a:f8:b1:82:81:df:73:7a:b1:86:54:21:e0:89:
eb:29:f3:72:ca:7d:9a:e7:6e:00:43:28:40:18:c2:cf:f9:dd:
4f:3a:5f:ab:f1:7a:2c:cd:8f:de:46:e3:d3:ae:95:dd:73:f0:
86:1a:20:7e:4d:72:5e:d8:ab:d4:1b:a8:cc:f7:c7:ae:a1:35:
9d:b7:63:e6:eb:7c:ee:da:74:c3:dc:33:8f:9f:a9:9c:44:c6:
58:12:0b:0d:29:c9:f6:0d:f6:64:21:5d:c1:88:c5:2d:7b:7d:
62:81:f8:0e:a4:e5:0a:0c:d9:91:cd:74:bc:64:05:41:bc:ed:
1a:8b:85:5a:1d:d4:ef:e0:1d:4c:31:f6:0d:ba:e3:53:55:5f:
c3:ec:8a:7a:3b:83:35:dc:4e:b5:b1:06:c7:37:0c:4a:a9:bd:
29:dd:81:39:ad:fc:c5:91:24:8b:34:dc:e5:1a:3f:7f:3d:7f:
ad:11:b3:9b:37:47:2e:31:ee:40:98:7c:c1:b0:0a:9e:f3:cb:
58:bf:68:a3:2d:fc:65:8f:15:5c:71:5f:94:69:02:73:91:82:
70:68:2a:e7:9f:65:aa:83:a9:37:ed:d9:ba:33:b3:54:56:ec:
a6:50:5b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:25:32 2025 by rpki-client