Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/VpzX9bdy8ob5dDoOod7pVhEwmVQ.roa
File: VpzX9bdy8ob5dDoOod7pVhEwmVQ.roa (raw, json)
Hash identifier: /7arnJrrnyxLu+MwfDayEN8brl+t/5NBNfwMAYfi39Y=
Subject key identifier: 56:9C:D7:F5:B7:72:F2:86:F9:74:3A:0E:A1:DE:E9:56:11:30:99:54
Certificate issuer: /CN=8e747481f2c98fbb70dca8d65c23de4fca37583d
Certificate serial: 02ED6400
Authority key identifier: 8E:74:74:81:F2:C9:8F:BB:70:DC:A8:D6:5C:23:DE:4F:CA:37:58:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnR0gfLJj7tw3KjWXCPeT8o3WD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/VpzX9bdy8ob5dDoOod7pVhEwmVQ.roa
Signing time: Tue 01 Mar 2022 19:02:31 +0000
ROA not before: Tue 01 Mar 2022 19:02:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 174
IP address blocks: 193.31.127.0/24 maxlen: 25
193.56.20.0/24 maxlen: 25
194.99.25.0/24 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49112064 (0x2ed6400)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e747481f2c98fbb70dca8d65c23de4fca37583d
Validity
Not Before: Mar 1 19:02:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=569cd7f5b772f286f9743a0ea1dee95611309954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a7:58:1e:92:51:a6:2c:75:dc:aa:20:2a:15:
35:0c:25:22:11:94:f5:43:63:4c:10:b3:7c:eb:9b:
66:2d:98:66:dd:3b:c5:9f:d8:b5:ea:91:44:4f:bf:
cd:0b:0c:cd:ab:f9:dd:d1:da:74:6a:22:3b:30:44:
52:aa:6f:71:cd:47:2b:8e:ed:ae:b3:10:9d:40:65:
c2:57:21:a4:3a:cd:30:4b:aa:4a:ec:db:4d:6a:f9:
c8:2c:e1:f7:40:35:3e:b1:fb:6f:d8:6a:ac:d8:ef:
a0:4f:e5:05:84:e2:00:66:9c:f8:d8:ee:5c:f0:f4:
79:ed:5d:97:7e:05:e6:ed:b6:e7:87:2d:e4:9c:ac:
48:33:54:00:38:a7:d6:86:0f:1f:d9:30:5a:ac:90:
b4:ac:ac:86:62:54:db:a9:1d:91:c4:74:7f:fc:99:
c9:47:c8:1f:ba:98:e2:87:b7:ee:a2:8f:29:af:f5:
91:78:f9:9e:57:8c:05:f1:03:b5:f6:7a:9e:e5:0d:
d1:21:89:40:26:d4:99:5c:7c:6f:ef:62:3d:90:81:
76:c1:d7:91:a4:f1:be:14:1d:85:d2:95:cf:32:d8:
d3:c1:36:0b:26:5e:4c:a3:48:70:a2:f1:16:c4:b4:
9a:71:e5:31:dc:3a:a6:29:a6:58:57:80:4e:b9:1d:
58:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:9C:D7:F5:B7:72:F2:86:F9:74:3A:0E:A1:DE:E9:56:11:30:99:54
X509v3 Authority Key Identifier:
keyid:8E:74:74:81:F2:C9:8F:BB:70:DC:A8:D6:5C:23:DE:4F:CA:37:58:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnR0gfLJj7tw3KjWXCPeT8o3WD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/VpzX9bdy8ob5dDoOod7pVhEwmVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/jnR0gfLJj7tw3KjWXCPeT8o3WD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.31.127.0/24
193.56.20.0/24
194.99.25.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:08:69:34:49:40:7a:32:c3:6c:c5:44:ce:05:36:84:9f:26:
7d:4b:f6:e8:81:23:a7:a1:b8:54:a8:28:b7:46:e3:e5:15:27:
ab:bd:f9:3f:e3:db:44:44:b9:73:6f:59:77:bb:ed:3e:8d:3a:
28:fc:fb:9c:51:45:0c:bf:27:ff:1a:a1:ea:31:fe:89:1f:8d:
e6:b1:33:71:cf:0f:ed:df:76:6e:e5:10:59:6d:dd:b0:94:29:
26:36:50:de:76:99:46:ac:27:91:57:c6:ae:ed:96:79:e8:f1:
6e:7a:66:91:e7:41:09:6c:ea:75:b1:7b:eb:a0:12:70:de:70:
ba:dd:54:52:28:c7:d7:2c:4a:43:02:c9:f0:f2:71:4f:d0:04:
0d:e3:24:fd:e2:53:7d:60:6e:b1:49:79:dc:fa:00:26:fb:34:
53:de:cf:54:33:10:e9:46:7c:8a:14:49:80:ba:1c:d9:4e:c6:
84:fd:2a:29:7b:53:6f:fa:c1:21:11:db:98:56:32:58:f7:83:
b3:05:09:ed:b7:5a:7a:d6:1f:34:6d:0e:71:65:61:57:db:55:
9d:4d:d8:a2:70:43:a9:d4:90:5d:fa:3c:93:19:f7:45:57:9a:
ff:3c:08:02:58:06:c9:84:5e:8e:6f:53:68:a6:da:4c:2c:f4:
08:fc:57:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:48:18 2025 by rpki-client