Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/VVQWLUW0daB7T4jiaSXgxXCl4ZE.roa
File: VVQWLUW0daB7T4jiaSXgxXCl4ZE.roa (raw, json)
Hash identifier: RAYdTMRTLrvbEHCokIXafnM5optXUCpT7i2/x7+Zbyk=
Subject key identifier: 55:54:16:2D:45:B4:75:A0:7B:4F:88:E2:69:25:E0:C5:70:A5:E1:91
Certificate issuer: /CN=844f7e66995c994a30d08687110bfd6a9a056134
Certificate serial: 01942368DF6F13247ED261D637E965C1A820
Authority key identifier: 84:4F:7E:66:99:5C:99:4A:30:D0:86:87:11:0B:FD:6A:9A:05:61:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hE9-ZplcmUow0IaHEQv9apoFYTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/VVQWLUW0daB7T4jiaSXgxXCl4ZE.roa
Signing time: Wed 01 Jan 2025 19:47:42 +0000
ROA not before: Wed 01 Jan 2025 19:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203777
IP address blocks: 109.205.198.0/24 maxlen: 24
194.104.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:df:6f:13:24:7e:d2:61:d6:37:e9:65:c1:a8:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=844f7e66995c994a30d08687110bfd6a9a056134
Validity
Not Before: Jan 1 19:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5554162d45b475a07b4f88e26925e0c570a5e191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:dd:65:20:9b:d1:60:3e:71:67:14:a4:2e:b5:
a6:97:2d:38:d5:3a:9f:c6:71:6e:16:43:47:bb:7b:
74:42:53:f9:0a:8d:6d:85:f0:b5:c4:4a:ba:02:15:
25:f5:f3:8f:a9:e0:5e:ee:74:9e:50:02:c7:49:3d:
36:2e:53:fd:04:2d:ec:c1:72:67:c0:b5:40:61:cd:
57:af:a1:c3:48:d6:b5:df:50:62:a7:19:0b:5e:97:
f7:d2:72:ad:6d:7c:7a:ff:c7:dd:22:2f:d1:45:c0:
53:1e:e4:35:fa:d7:37:4c:e5:2e:2d:af:d1:6a:ee:
d9:ac:c3:4e:a3:c3:fb:51:2b:76:ae:4a:e3:9a:36:
12:96:d9:2b:15:b5:07:6b:91:d1:43:b5:c7:be:a0:
fb:70:fe:c7:b9:c6:7c:ba:6b:d1:6e:e5:e3:f0:00:
15:a7:75:26:ac:8d:ef:ae:9b:a6:f5:75:3a:82:79:
92:0d:fe:cc:f1:fb:97:f5:9a:49:e6:de:4c:6b:34:
de:28:df:bf:c7:90:ba:3b:eb:e3:60:e2:8f:5e:e0:
be:ef:60:68:95:98:35:21:47:85:4f:34:20:4a:b4:
d5:d0:56:e3:6a:cf:83:64:f9:d4:08:0a:8f:eb:91:
f9:31:c5:d9:7b:75:d3:64:01:a0:1f:96:b2:a0:19:
1f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:54:16:2D:45:B4:75:A0:7B:4F:88:E2:69:25:E0:C5:70:A5:E1:91
X509v3 Authority Key Identifier:
keyid:84:4F:7E:66:99:5C:99:4A:30:D0:86:87:11:0B:FD:6A:9A:05:61:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hE9-ZplcmUow0IaHEQv9apoFYTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/VVQWLUW0daB7T4jiaSXgxXCl4ZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.198.0/24
194.104.121.0/24
Signature Algorithm: sha256WithRSAEncryption
04:38:25:ee:26:3f:6b:5f:99:b9:64:2a:53:7d:25:eb:66:c1:
00:98:c4:07:c0:a7:ec:76:f0:55:22:00:30:a5:a9:7d:58:7a:
8a:a6:05:46:69:98:89:03:d9:4f:99:e3:f5:22:23:3e:b1:a7:
57:fc:58:b2:31:24:46:9c:63:bf:36:bf:b7:ae:d0:05:6d:b7:
b5:6e:39:c8:14:36:90:4b:d8:25:ff:3f:5e:ee:81:a6:b3:a8:
70:72:43:34:2c:90:be:9a:ad:46:04:94:4c:cd:0f:dd:40:02:
73:29:0e:3e:ed:a1:14:1e:7f:5d:85:89:6d:7c:aa:43:29:32:
6a:67:23:ca:80:09:82:c2:11:30:32:16:a7:1f:0a:de:1c:2d:
de:11:7b:ed:d5:e2:e2:aa:7c:f8:ea:4c:06:01:7e:67:ab:e4:
ce:37:c6:0c:18:3e:d4:34:c0:14:77:01:47:ba:05:74:f2:72:
fd:f8:ce:9e:87:e8:db:b9:91:65:3b:55:30:55:87:e0:05:36:
12:a6:19:68:4c:cc:1f:a1:62:7e:35:90:6f:d5:3e:39:f5:d3:
b9:36:b2:42:4b:37:16:32:0d:d0:e7:84:36:a6:a1:da:91:28:
ab:b4:db:2a:00:64:5e:8c:ed:5a:2b:19:4a:de:43:ea:32:ba:
15:bf:76:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:54:21 2025 by rpki-client