Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/Vxz_brs8mMP8pyfBjMG6SqLCoLA.roa
File: Vxz_brs8mMP8pyfBjMG6SqLCoLA.roa (raw, json)
Hash identifier: InPdcQtGkZTGLva52kv6ADnfkbCulTXgK4jOcLs8G7M=
Subject key identifier: 57:1C:FF:6E:BB:3C:98:C3:FC:A7:27:C1:8C:C1:BA:4A:A2:C2:A0:B0
Certificate issuer: /CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
Certificate serial: 0194258EB64121B876B403D9C5C45D43085D
Authority key identifier: 8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/Vxz_brs8mMP8pyfBjMG6SqLCoLA.roa
Signing time: Thu 02 Jan 2025 05:48:17 +0000
ROA not before: Thu 02 Jan 2025 05:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 397423
IP address blocks: 158.46.176.0/22 maxlen: 22
178.171.48.0/23 maxlen: 23
178.171.50.0/23 maxlen: 23
178.171.60.0/23 maxlen: 23
178.171.62.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:b6:41:21:b8:76:b4:03:d9:c5:c4:5d:43:08:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
Validity
Not Before: Jan 2 05:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=571cff6ebb3c98c3fca727c18cc1ba4aa2c2a0b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a3:ae:58:43:d1:1c:e0:94:82:29:b1:f9:1e:
99:24:09:6a:52:78:2e:d8:6b:52:dd:26:00:4a:46:
1a:7a:a3:36:ba:16:e4:35:b2:ee:8e:4a:05:a7:f4:
85:45:95:7e:82:49:59:9e:89:d5:69:17:e1:d5:60:
bf:78:ea:04:77:19:f0:f5:96:47:32:45:c6:26:18:
12:d0:1f:4b:dc:c4:e1:f9:f1:df:94:6a:2d:b8:ba:
5b:38:e7:30:54:f0:0f:13:8c:45:0e:66:df:a7:01:
cd:3c:d9:5b:a4:9c:fb:c0:81:f3:f6:3d:77:39:fb:
80:5b:8d:78:76:79:26:69:72:b8:e9:c8:09:b6:79:
32:61:4e:ca:4b:2a:4c:68:76:74:cb:85:63:bc:a7:
18:f1:63:6f:cf:e1:39:f3:80:75:80:24:fa:0f:16:
f0:2a:d3:bb:54:cd:a8:6f:c5:41:08:93:65:9e:38:
1b:e9:2d:40:7a:6c:eb:0a:83:9f:e1:b6:03:e4:da:
fe:42:46:5a:aa:82:57:a9:4d:f4:87:4d:af:05:d4:
31:75:b8:e8:36:11:9c:00:f8:92:c6:1f:5a:36:ac:
7d:68:89:6f:09:28:fa:79:a7:ab:45:c7:fd:24:8f:
64:59:ef:24:5b:c6:6a:94:1d:32:c4:5c:7a:15:e8:
fc:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:1C:FF:6E:BB:3C:98:C3:FC:A7:27:C1:8C:C1:BA:4A:A2:C2:A0:B0
X509v3 Authority Key Identifier:
keyid:8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/Vxz_brs8mMP8pyfBjMG6SqLCoLA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.46.176.0/22
178.171.48.0/22
178.171.60.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:8e:ab:0c:2c:00:d1:64:a9:ef:59:c5:4f:35:33:a8:b6:3b:
b0:e9:6f:a1:0b:43:f1:3e:c9:6b:4e:61:41:77:72:13:ad:23:
06:e1:44:8d:24:45:7e:32:62:b2:4a:35:ec:98:3f:ea:ce:17:
bc:29:e1:b3:76:54:f7:58:1b:8c:f3:bf:07:ea:2e:9d:09:c1:
b8:da:e0:47:8d:b0:da:01:55:a4:45:f1:22:dd:e3:67:97:56:
50:95:02:2c:92:3e:41:63:bb:6b:58:28:bc:ef:0e:34:8c:69:
28:79:cf:ba:25:78:50:0d:09:12:37:cd:4c:0a:0d:62:44:90:
c2:93:7e:d7:f8:fd:d6:9b:97:bc:ee:55:9a:d3:7c:c6:56:8a:
52:74:c0:b9:cc:74:32:1f:86:b1:19:97:cc:df:0a:80:43:6c:
c7:d0:3d:d8:52:7e:06:a2:2c:34:5c:24:b5:c8:20:7b:30:39:
3d:48:92:51:d0:60:f9:43:84:96:7f:fa:b8:1b:06:28:93:96:
46:0c:17:db:39:fe:a7:d8:7f:a4:3e:da:0d:d1:12:bd:b0:b8:
cc:31:2e:17:52:22:82:69:32:f3:46:5f:df:15:16:e0:e0:49:
55:41:8e:e4:19:0d:f2:4f:51:c3:8d:a6:0b:6a:1f:0f:b3:7d:
e6:5a:5b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:25:29 2025 by rpki-client