Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/vicagLkRza11pT-oz5gYbaKeL48.roa
File: vicagLkRza11pT-oz5gYbaKeL48.roa (raw, json)
Hash identifier: 3y6OxCuz9CJnMqbC/P5A8sp9g+JR0yBjNbPKMRpgY5U=
Subject key identifier: BE:27:1A:80:B9:11:CD:AD:75:A5:3F:A8:CF:98:18:6D:A2:9E:2F:8F
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 018B6142981D21FDD29A3CC59EF52D916FE2
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/vicagLkRza11pT-oz5gYbaKeL48.roa
Signing time: Tue 24 Oct 2023 10:37:16 +0000
ROA not before: Tue 24 Oct 2023 10:37:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210542
IP address blocks: 176.221.16.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:61:42:98:1d:21:fd:d2:9a:3c:c5:9e:f5:2d:91:6f:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Oct 24 10:37:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=be271a80b911cdad75a53fa8cf98186da29e2f8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7d:78:73:a6:21:74:3f:b1:da:d4:b7:69:fb:
78:86:79:28:f2:d4:17:39:41:0f:10:12:a4:f1:5f:
99:b2:b5:e1:af:ba:8d:cc:02:6e:b3:d6:3d:e9:b3:
a4:98:29:7c:f2:8f:af:2c:7b:d8:8d:39:0d:88:72:
1f:fa:7c:45:06:2c:4b:0f:b3:8f:97:75:e7:e5:57:
87:87:3d:d6:b5:59:bf:b5:87:c3:29:74:96:88:47:
ba:f9:14:f6:2b:72:bf:ca:81:be:0d:2c:a4:52:88:
04:b2:0a:01:4c:a2:66:eb:e7:a5:e0:06:a1:22:6f:
f5:ba:d8:01:30:99:80:de:c4:ab:1f:93:c5:e0:d8:
f8:fe:26:41:22:04:cf:6d:ed:5d:a4:54:2a:97:9f:
e1:0c:4d:4f:e9:b5:67:16:eb:53:18:fc:7a:c0:8a:
f7:6d:9d:14:6d:b9:ab:10:87:bc:b3:15:03:6c:ea:
41:8a:59:09:d5:2e:16:14:20:dd:8a:9f:35:2e:c7:
a4:f0:92:05:39:73:71:3d:f2:b3:ef:5b:63:b1:e7:
2e:00:73:50:d4:75:5f:cd:e0:7f:5d:8a:7a:56:ab:
26:99:e2:cb:06:eb:2e:53:fb:ea:88:1f:1e:0a:83:
19:9e:ab:5e:32:e5:5b:62:bc:3a:71:d3:e9:e0:45:
df:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:27:1A:80:B9:11:CD:AD:75:A5:3F:A8:CF:98:18:6D:A2:9E:2F:8F
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/vicagLkRza11pT-oz5gYbaKeL48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.221.16.0/22
Signature Algorithm: sha256WithRSAEncryption
ac:fd:ff:5b:cd:97:6d:a8:78:e0:93:f8:c2:97:97:ff:da:59:
11:6c:4d:ce:a4:02:e9:3b:dc:ca:7d:2d:58:0f:57:5d:01:08:
aa:f1:ef:f1:36:2a:22:a8:77:de:89:e0:b8:b7:8e:ed:5a:49:
58:35:47:be:0b:b1:d0:0a:88:5e:59:be:a7:3b:bb:a1:e8:2a:
dc:f6:32:ca:74:af:c8:bd:ce:46:b8:6a:2f:64:81:00:0e:ac:
d7:69:c2:90:ee:2c:ce:6c:49:ce:2a:02:be:7c:a9:12:77:28:
87:e0:fc:0e:ea:fa:50:a1:47:8c:38:d2:82:f1:a3:4f:fa:31:
44:9d:14:ee:69:52:ea:09:74:89:60:92:d3:ef:24:30:3a:6d:
b7:a5:eb:45:bb:75:df:7f:58:b2:cd:52:8a:d7:4d:26:7e:f3:
8a:c4:db:5e:8f:9b:99:d8:9d:b2:8d:71:02:9a:f3:14:3f:c9:
b5:cf:36:d3:c0:34:89:d7:55:48:e3:bd:14:d0:ef:fe:6e:a1:
bc:fc:5c:7f:75:e5:d8:86:8f:f5:38:41:fc:2a:bf:6a:f2:12:
6e:b7:2e:c8:34:af:e0:67:e3:43:79:9d:9c:17:43:18:6e:43:
70:ed:ca:74:fb:24:63:b3:d8:a6:e2:a6:4e:92:f6:ed:45:0a:
e5:48:84:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:28:10 2025 by rpki-client