Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/VpI16XSGKavee5vUbGzT8Xy7mAw.roa
File: VpI16XSGKavee5vUbGzT8Xy7mAw.roa (raw, json)
Hash identifier: CQH97eUQPTSwNxUP8MfdAzMIUDr21b7JhFF+6+/MEOc=
Subject key identifier: 56:92:35:E9:74:86:29:AB:DE:7B:9B:D4:6C:6C:D3:F1:7C:BB:98:0C
Certificate issuer: /CN=8e747481f2c98fbb70dca8d65c23de4fca37583d
Certificate serial: 03381874
Authority key identifier: 8E:74:74:81:F2:C9:8F:BB:70:DC:A8:D6:5C:23:DE:4F:CA:37:58:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnR0gfLJj7tw3KjWXCPeT8o3WD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/VpI16XSGKavee5vUbGzT8Xy7mAw.roa
Signing time: Mon 28 Mar 2022 22:37:30 +0000
ROA not before: Mon 28 Mar 2022 22:37:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 399587
IP address blocks: 193.160.68.0/23 maxlen: 24
176.118.191.0/24 maxlen: 24
185.177.78.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54007924 (0x3381874)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e747481f2c98fbb70dca8d65c23de4fca37583d
Validity
Not Before: Mar 28 22:37:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=569235e9748629abde7b9bd46c6cd3f17cbb980c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a9:05:b3:aa:c9:b4:e6:22:a4:7a:b0:5e:88:
e0:35:f1:eb:ce:67:e4:87:fd:18:c5:30:c7:6b:4a:
a5:7f:d0:c6:cc:4c:64:a6:12:a4:d1:5f:f5:c1:4e:
1a:fe:6a:25:4e:ee:b7:9f:2e:46:fd:7c:d6:12:80:
38:56:a4:e9:cf:67:03:54:9c:ce:e9:5d:c5:a8:23:
19:e3:14:ca:ef:61:d2:bb:d7:3a:11:c4:68:ae:98:
cb:87:17:cb:31:f1:c1:78:82:b9:51:d1:e0:bd:e7:
6b:f4:d6:66:92:ac:87:95:b8:db:a6:42:b8:55:b2:
70:f6:a6:14:60:ed:85:d0:ad:79:8e:ac:ad:00:24:
8e:d1:13:0f:c4:ce:4a:49:be:17:5c:47:fa:4a:23:
36:62:5e:c9:cc:2b:3c:88:d3:ad:8a:d5:e3:0f:b6:
60:1e:bc:8c:43:5d:71:55:44:56:4c:df:5f:4c:3b:
76:3c:a4:fe:59:68:10:35:d4:af:38:29:09:85:aa:
49:48:db:00:df:b2:13:47:05:cd:a8:fb:0c:41:d6:
89:71:bf:2a:97:0b:22:cf:31:bc:d0:b3:fd:64:fb:
0c:95:c0:c4:f2:ae:cb:24:bf:d2:8f:63:ff:df:48:
aa:f7:dd:fa:05:cf:8f:d7:fe:c6:3c:df:06:0f:00:
03:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:92:35:E9:74:86:29:AB:DE:7B:9B:D4:6C:6C:D3:F1:7C:BB:98:0C
X509v3 Authority Key Identifier:
keyid:8E:74:74:81:F2:C9:8F:BB:70:DC:A8:D6:5C:23:DE:4F:CA:37:58:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnR0gfLJj7tw3KjWXCPeT8o3WD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/VpI16XSGKavee5vUbGzT8Xy7mAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/jnR0gfLJj7tw3KjWXCPeT8o3WD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.118.191.0/24
185.177.78.0/23
193.160.68.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:5e:ed:0b:57:0f:88:fe:91:bc:10:c3:91:d8:5e:47:23:44:
d5:7d:25:50:f8:01:5f:0c:4f:f9:55:06:c5:c8:66:9d:23:62:
7e:78:26:95:ba:b7:b8:af:16:13:4e:74:44:2b:57:37:32:79:
72:3b:81:86:20:42:cb:95:bc:8e:94:9e:ab:80:fe:20:c4:70:
a3:da:69:e7:6d:64:91:e9:d3:11:48:60:22:3c:cc:53:34:f5:
12:3e:a2:40:62:91:2b:ed:0a:6a:c8:e2:07:4c:1b:45:71:37:
3b:d6:fb:d1:ae:e0:6c:aa:f6:50:d0:71:4b:5b:80:6c:74:92:
e1:32:ef:78:aa:10:4d:e3:16:c1:79:8b:a8:39:27:87:bc:e9:
23:26:82:b0:da:cd:c3:70:5a:d2:28:60:58:4c:14:48:9c:de:
04:ca:12:81:7b:86:84:02:1e:02:94:ae:f9:21:01:7f:ca:c9:
cc:6d:61:36:5b:8a:32:22:3d:11:05:fc:4a:8f:db:62:ad:22:
71:c5:98:30:3b:32:9c:b7:e3:f5:3b:b8:50:ae:4a:67:2b:3c:
07:ba:b5:1d:dc:f6:20:70:d7:77:62:c5:0b:79:77:b9:01:b8:
16:a4:ca:d8:77:13:97:e0:fe:45:21:87:5b:0a:7c:44:74:ab:
82:36:9e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:52:57 2025 by rpki-client