Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/2f558b-4a6b-4827-8f01-d84b2b1e9133/1/VFGMzpMj8ZJeti9Ll27ab4FJTVY.roa
File: VFGMzpMj8ZJeti9Ll27ab4FJTVY.roa (raw, json)
Hash identifier: WhbI727KX3OCfH4pg3jssZ4731JjR3VKbBebVtWZXgo=
Subject key identifier: 54:51:8C:CE:93:23:F1:92:5E:B6:2F:4B:97:6E:DA:6F:81:49:4D:56
Certificate issuer: /CN=030581eaa969036c33f92ebc4844dc22c55e7513
Certificate serial: 019427B5A66E19404153439DEC474EB26BF5
Authority key identifier: 03:05:81:EA:A9:69:03:6C:33:F9:2E:BC:48:44:DC:22:C5:5E:75:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AwWB6qlpA2wz-S68SETcIsVedRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/2f558b-4a6b-4827-8f01-d84b2b1e9133/1/VFGMzpMj8ZJeti9Ll27ab4FJTVY.roa
Signing time: Thu 02 Jan 2025 15:50:03 +0000
ROA not before: Thu 02 Jan 2025 15:50:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57873
IP address blocks: 37.143.64.0/21 maxlen: 21
185.14.216.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:a6:6e:19:40:41:53:43:9d:ec:47:4e:b2:6b:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=030581eaa969036c33f92ebc4844dc22c55e7513
Validity
Not Before: Jan 2 15:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=54518cce9323f1925eb62f4b976eda6f81494d56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:0e:b8:40:c9:9e:c0:53:3b:77:45:c0:c5:b3:
e9:0f:33:10:ef:b3:2b:a8:c8:da:4b:aa:44:3d:d5:
f4:25:84:0f:8f:cc:7c:69:42:f3:ac:49:f7:97:bf:
79:b0:a4:a0:37:ff:97:3e:c2:57:12:6d:52:52:00:
03:99:ee:98:75:33:a2:57:e3:8c:f2:f5:b2:2f:6c:
0d:d5:63:a4:09:28:f7:a7:9f:00:a4:64:f3:bb:cc:
11:86:69:24:fa:4f:7a:bc:1d:1c:fa:47:69:9c:61:
04:f2:d3:d2:a4:ed:38:21:35:b2:d4:e4:46:48:95:
24:64:83:86:63:3c:77:be:5d:0e:6d:c9:3d:1a:a7:
d3:31:15:0d:36:3e:34:e0:54:7e:a3:23:f4:c4:56:
12:bf:dc:f7:57:af:47:2d:7c:28:54:ea:b2:d0:9c:
f7:e3:33:e3:ae:26:27:05:65:32:10:76:92:85:ff:
5a:75:80:af:25:d0:d4:dc:05:2b:a6:a3:91:ab:bd:
86:32:9b:84:59:0a:1c:c2:45:f6:18:03:9b:2e:15:
73:4e:cc:6f:d2:23:dc:8d:00:bf:96:08:b4:f3:e3:
1b:9b:c4:7d:cd:39:92:65:7e:d8:2c:15:29:64:3c:
39:10:8b:5c:44:71:13:af:5b:95:6c:7b:13:c1:2e:
16:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:51:8C:CE:93:23:F1:92:5E:B6:2F:4B:97:6E:DA:6F:81:49:4D:56
X509v3 Authority Key Identifier:
keyid:03:05:81:EA:A9:69:03:6C:33:F9:2E:BC:48:44:DC:22:C5:5E:75:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AwWB6qlpA2wz-S68SETcIsVedRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2f558b-4a6b-4827-8f01-d84b2b1e9133/1/VFGMzpMj8ZJeti9Ll27ab4FJTVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2f558b-4a6b-4827-8f01-d84b2b1e9133/1/AwWB6qlpA2wz-S68SETcIsVedRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.143.64.0/21
185.14.216.0/22
Signature Algorithm: sha256WithRSAEncryption
61:f7:56:bd:0b:9f:a8:89:45:23:b0:84:ba:0b:4a:03:52:3c:
6f:33:37:35:3a:c7:91:2c:b1:0e:56:4d:11:79:26:a5:5a:9c:
31:fe:af:90:fa:c8:28:6d:13:80:4b:b4:f3:9f:14:6c:4c:5c:
82:a9:bd:7a:1f:89:66:a2:2d:79:4e:ad:a5:45:38:ca:46:b0:
7b:80:e1:29:96:85:0a:af:77:25:3b:50:aa:25:ea:42:36:89:
c2:4e:c8:f2:b1:0a:4b:db:9d:ce:a4:6e:fa:b2:4d:5f:bd:7d:
36:b7:48:a6:e5:60:82:ed:72:58:44:2b:31:72:06:e4:f4:52:
77:1b:68:74:d2:61:43:65:15:c2:c6:0d:9f:71:94:62:a4:62:
3e:df:43:74:82:ec:71:31:42:9e:8b:47:61:7f:13:fc:bf:f8:
90:13:c4:fd:39:5f:f2:f0:e0:2d:4f:b1:32:f7:b9:ea:6b:9d:
7b:41:0a:18:1f:e7:6d:3c:d8:e5:7b:fd:6d:d9:e3:83:3d:27:
3e:ab:8d:2c:30:9b:28:16:fa:8f:0d:b0:04:45:6e:59:4b:87:
3f:b6:79:63:23:23:60:f1:5b:14:ef:c4:6f:12:cf:d4:88:d2:
e2:6b:e2:13:32:15:f3:95:f0:ed:f7:08:2c:41:7b:57:52:71:
ba:2c:f9:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:45:11 2025 by rpki-client