Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/c8092e-9f8c-4718-b770-c29b44de53a8/1/Vqapsho7MLXfnRUXDqb_FPd1KQc.roa
File: Vqapsho7MLXfnRUXDqb_FPd1KQc.roa (raw, json)
Hash identifier: ilo76FuusPGdgKGdK9yyBKrf9f5csXUXdcMmyz557m4=
Subject key identifier: 56:A6:A9:B2:1A:3B:30:B5:DF:9D:15:17:0E:A6:FF:14:F7:75:29:07
Certificate issuer: /CN=5d39d15bd2fcc84771ba6aa29aa54428b21cef60
Certificate serial: 01939DFEAAFBD251450F239042A36116990C
Authority key identifier: 5D:39:D1:5B:D2:FC:C8:47:71:BA:6A:A2:9A:A5:44:28:B2:1C:EF:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTnRW9L8yEdxumqimqVEKLIc72A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/c8092e-9f8c-4718-b770-c29b44de53a8/1/Vqapsho7MLXfnRUXDqb_FPd1KQc.roa
Signing time: Fri 06 Dec 2024 22:02:13 +0000
ROA not before: Fri 06 Dec 2024 22:02:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 196978
IP address blocks: 193.107.252.0/22 maxlen: 22
2001:67c:13c4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:9d:fe:aa:fb:d2:51:45:0f:23:90:42:a3:61:16:99:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d39d15bd2fcc84771ba6aa29aa54428b21cef60
Validity
Not Before: Dec 6 22:02:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=56a6a9b21a3b30b5df9d15170ea6ff14f7752907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5e:6b:eb:96:75:7d:46:5f:56:c0:41:be:03:
0b:cf:05:51:cc:41:eb:6e:e9:a6:5c:f0:13:67:5c:
b1:22:ee:51:71:39:bc:14:41:8e:7c:da:c5:2e:6c:
80:6f:b6:a4:f2:93:52:f0:fa:08:2b:ed:96:09:25:
da:74:81:f1:cb:5a:dd:f8:a5:62:ce:3f:be:09:ce:
f4:af:e4:93:5c:db:ae:ff:82:48:49:be:4f:2c:f5:
6d:3d:86:2c:8e:89:94:e5:87:6a:9b:98:75:03:e7:
2b:b5:b2:41:6b:22:78:03:f2:90:62:b6:87:44:3e:
f7:95:52:2e:4f:b7:aa:db:f7:89:fe:c8:a5:aa:77:
c9:58:66:eb:98:68:f1:0a:0d:36:1c:b8:f9:ba:04:
d4:bc:4b:73:17:e5:88:2b:29:22:47:25:61:0c:e7:
f4:e3:c5:7c:1f:d7:6b:d4:3e:a5:91:51:c3:06:41:
f5:49:22:63:0e:d1:da:98:ea:cc:28:f5:f9:d5:80:
7c:33:56:fa:1e:8d:76:1e:d1:ba:38:97:68:a0:f1:
4f:02:66:81:af:04:15:eb:ee:e7:3c:c3:c4:bd:50:
cb:c1:56:fe:6c:2f:22:bd:22:e8:c0:d9:4f:32:55:
1f:a8:75:2e:9c:93:89:03:4c:eb:9e:10:44:1f:7b:
f7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:A6:A9:B2:1A:3B:30:B5:DF:9D:15:17:0E:A6:FF:14:F7:75:29:07
X509v3 Authority Key Identifier:
keyid:5D:39:D1:5B:D2:FC:C8:47:71:BA:6A:A2:9A:A5:44:28:B2:1C:EF:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTnRW9L8yEdxumqimqVEKLIc72A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c8092e-9f8c-4718-b770-c29b44de53a8/1/Vqapsho7MLXfnRUXDqb_FPd1KQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c8092e-9f8c-4718-b770-c29b44de53a8/1/XTnRW9L8yEdxumqimqVEKLIc72A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.107.252.0/22
IPv6:
2001:67c:13c4::/48
Signature Algorithm: sha256WithRSAEncryption
a5:d5:18:9a:18:5d:36:54:7c:27:31:3f:bf:c1:1b:3b:5a:ee:
b1:ae:97:b2:c4:ab:ad:6f:f2:8e:af:bb:ae:a6:12:4d:81:bf:
e7:6f:cc:25:a8:2f:f8:28:48:20:69:e5:95:a9:ca:e5:4e:86:
b0:0e:68:7d:d5:40:e2:d7:5f:cb:fd:18:14:ad:d9:67:85:51:
c9:fe:2b:80:ed:4f:d1:88:d0:17:9e:fb:15:38:15:7d:76:88:
af:1c:66:58:eb:c6:64:51:0e:35:4d:7e:d7:37:c2:bc:bf:96:
f5:0f:2f:b4:98:69:77:74:5b:a4:6e:4b:f9:c6:d2:45:41:be:
98:7f:81:29:ef:38:89:39:e8:90:06:74:35:bd:92:6a:16:44:
6d:24:a6:1b:3d:ac:e3:ea:bb:0d:10:c4:82:77:0e:9b:d5:9c:
ab:c2:37:9d:2c:6a:c8:f4:57:58:81:c9:d7:2e:03:1f:56:9b:
23:0d:12:97:c3:c1:07:1d:1b:f5:32:f1:cc:37:fc:6c:3e:a5:
c7:75:42:f9:b3:ff:a9:0c:af:28:0d:7f:a8:72:db:e8:17:9a:
ad:4b:71:0f:cc:b4:bd:ce:1d:5b:38:58:cb:a9:54:60:99:4c:
81:24:ca:b2:41:8d:07:e2:0f:91:39:33:50:87:ac:8b:f0:ca:
d5:51:58:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 08:53:40 2025 by rpki-client