Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/VKOiW6cHS5Jhqvst_GdkHf95Qwo.roa
File: VKOiW6cHS5Jhqvst_GdkHf95Qwo.roa (raw, json)
Hash identifier: 6nIBpekc3/1NMWYIRb/Wmxex3o7OwlMvqLxqqoLwDq0=
Subject key identifier: 54:A3:A2:5B:A7:07:4B:92:61:AA:FB:2D:FC:67:64:1D:FF:79:43:0A
Certificate issuer: /CN=5f1fa06d5dbada43de44f4e4b1dc9492bb287c9d
Certificate serial: 018AE13FF5C8B501C6F9571662B704A05174
Authority key identifier: 5F:1F:A0:6D:5D:BA:DA:43:DE:44:F4:E4:B1:DC:94:92:BB:28:7C:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xx-gbV262kPeRPTksdyUkrsofJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/VKOiW6cHS5Jhqvst_GdkHf95Qwo.roa
Signing time: Fri 29 Sep 2023 14:02:59 +0000
ROA not before: Fri 29 Sep 2023 14:02:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50986
IP address blocks: 193.34.202.0/24 maxlen: 24
31.170.24.0/24 maxlen: 24
31.170.24.0/21 maxlen: 21
185.27.96.0/22 maxlen: 22
178.236.64.0/22 maxlen: 22
178.236.64.0/20 maxlen: 20
178.236.64.0/24 maxlen: 24
178.236.70.0/23 maxlen: 23
178.236.76.0/22 maxlen: 22
2a02:1610::/32 maxlen: 32
2a02:1610::/56 maxlen: 56
2a02:1610:1:1000::/56 maxlen: 56
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:e1:3f:f5:c8:b5:01:c6:f9:57:16:62:b7:04:a0:51:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1fa06d5dbada43de44f4e4b1dc9492bb287c9d
Validity
Not Before: Sep 29 14:02:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=54a3a25ba7074b9261aafb2dfc67641dff79430a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8e:15:23:88:25:85:78:a3:b7:d6:ae:fd:a7:
3e:64:bb:b3:26:5f:d1:5b:2a:08:88:fb:c0:12:90:
05:2e:95:25:44:5c:0a:e0:20:cd:02:73:d5:7f:1f:
97:58:2d:c4:ce:79:e4:5c:72:77:1f:48:17:7c:c5:
ca:9c:27:b8:5d:12:13:c5:43:36:d2:f9:80:5a:57:
2e:30:24:f3:91:58:d1:fd:f7:28:16:07:9c:6a:8e:
b6:a1:00:34:34:bd:0f:c8:9c:42:c0:61:29:01:ec:
6b:02:d7:1c:9c:c5:ef:c5:bd:1f:4b:62:8e:59:f3:
50:6d:c9:74:d8:da:2e:b4:73:1e:80:a9:a5:8e:cc:
6b:90:f9:d1:9f:56:aa:49:96:ce:bd:c9:7c:54:c3:
40:f5:a9:56:13:47:09:56:da:46:20:44:f2:dd:91:
44:43:fb:97:a4:2b:cf:c3:27:32:21:99:5a:3a:eb:
79:d5:fa:e2:cd:82:44:75:e6:96:e7:55:e5:63:5e:
0a:90:e5:3a:51:d1:0e:2d:f1:a9:d1:a4:54:4a:23:
ed:db:ef:a2:1a:73:a1:b7:52:43:2d:28:c2:3b:65:
00:9d:92:e8:79:a6:15:d2:a4:b1:b2:5c:f1:d7:ce:
fd:ad:db:02:35:7f:13:85:8a:f0:d0:75:ac:7c:65:
31:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:A3:A2:5B:A7:07:4B:92:61:AA:FB:2D:FC:67:64:1D:FF:79:43:0A
X509v3 Authority Key Identifier:
keyid:5F:1F:A0:6D:5D:BA:DA:43:DE:44:F4:E4:B1:DC:94:92:BB:28:7C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xx-gbV262kPeRPTksdyUkrsofJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/VKOiW6cHS5Jhqvst_GdkHf95Qwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.24.0/21
178.236.64.0/20
185.27.96.0/22
193.34.202.0/24
IPv6:
2a02:1610::/32
Signature Algorithm: sha256WithRSAEncryption
28:bf:6e:18:36:06:98:aa:1a:95:e2:bd:e8:20:68:eb:5e:aa:
95:ac:2b:8c:75:e1:a0:fd:26:43:af:31:9b:a6:db:43:b5:90:
ca:6b:79:b7:67:c9:31:1b:04:0e:7c:59:6d:78:55:26:c3:ef:
5b:1c:8b:49:e8:42:8b:f8:b7:62:53:65:1e:4a:ad:ff:cb:e3:
59:a3:97:f1:db:b4:36:08:d1:ce:4a:e7:04:d2:ef:d3:a2:44:
62:7d:e8:da:0f:bc:41:4a:08:c5:db:a8:9a:74:2f:4b:05:50:
59:69:69:a1:c0:79:85:27:59:85:7f:da:bf:da:1b:0b:96:e4:
61:2c:74:f6:26:75:8b:67:e3:4a:ac:7b:cd:c2:36:c4:a7:64:
68:94:aa:8f:a2:41:4a:f2:c1:7c:76:dc:18:43:01:c3:1a:be:
2f:39:0f:26:1a:c0:6d:94:58:18:ea:5e:3c:cd:0f:b8:ee:4e:
8f:11:fc:a6:82:72:6e:77:63:86:5c:2a:71:ca:1e:ce:7f:63:
18:ab:46:92:f5:5a:a4:bb:08:de:1e:4a:f7:0e:08:71:a4:ae:
a8:1d:c6:aa:ec:9c:aa:47:53:af:96:c6:e5:15:7a:d5:c9:ec:
a0:6d:74:43:79:7e:15:1d:9a:fc:1a:e3:a3:96:27:cd:ac:aa:
19:19:2f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:09:55 2025 by rpki-client