Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/VJUoXBS9iPEfhSdXRvzqWIAuTX8.roa
File: VJUoXBS9iPEfhSdXRvzqWIAuTX8.roa (raw, json)
Hash identifier: Nan6DQGHyzFA7VJDUyPb17ZowHybZxaUB4pA1mJmnaY=
Subject key identifier: 54:95:28:5C:14:BD:88:F1:1F:85:27:57:46:FC:EA:58:80:2E:4D:7F
Certificate issuer: /CN=cda843e812b16dec60bb7098ca4133117db8474d
Certificate serial: 0194228DE0A30F8B8D91AF3B194E2BFF4101
Authority key identifier: CD:A8:43:E8:12:B1:6D:EC:60:BB:70:98:CA:41:33:11:7D:B8:47:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zahD6BKxbexgu3CYykEzEX24R00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/VJUoXBS9iPEfhSdXRvzqWIAuTX8.roa
Signing time: Wed 01 Jan 2025 15:48:30 +0000
ROA not before: Wed 01 Jan 2025 15:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60781
IP address blocks: 185.96.140.0/24 maxlen: 24
2a00:5020::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:e0:a3:0f:8b:8d:91:af:3b:19:4e:2b:ff:41:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cda843e812b16dec60bb7098ca4133117db8474d
Validity
Not Before: Jan 1 15:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5495285c14bd88f11f85275746fcea58802e4d7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:89:96:2a:b5:cd:b5:dc:88:8a:99:68:08:e9:
58:77:ce:9f:b1:1e:37:65:66:40:2c:c4:dc:01:3a:
17:c1:78:e7:3e:af:1f:44:5a:da:dd:05:54:da:1b:
80:66:d6:c3:73:43:37:d6:02:c1:1b:38:6a:0c:c7:
94:24:8f:91:6a:91:5f:0e:f7:22:05:49:29:7e:41:
4d:bf:82:36:39:6a:12:85:9f:44:7d:b4:2c:d2:11:
44:90:a8:b8:68:ea:1d:fa:63:5a:9c:e8:86:2a:9a:
3d:46:17:14:ac:79:b7:ef:c9:e3:d2:55:42:f5:75:
17:fc:d9:33:29:4b:91:97:e5:ed:81:a6:35:2d:9c:
cb:89:7c:db:ce:09:42:d8:5a:c9:48:d1:e4:40:60:
0e:5a:0e:2a:31:1d:6a:ea:a0:07:2a:b7:f6:db:c1:
2d:2d:8a:f5:e7:00:46:9f:e8:0d:7a:eb:de:7a:94:
cd:ff:a6:4e:f9:7a:7a:cb:63:ef:f4:ce:06:c7:91:
fe:09:0d:04:ba:78:e6:79:69:66:5a:e5:96:8a:c1:
74:5a:02:4c:02:8b:e2:52:9a:b9:21:21:c8:f6:32:
b2:e7:b9:6c:bf:17:82:6f:3c:18:b0:45:a3:d2:f2:
da:50:fb:8e:2a:4e:b8:f3:2c:b1:42:b4:a6:81:e0:
ce:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:95:28:5C:14:BD:88:F1:1F:85:27:57:46:FC:EA:58:80:2E:4D:7F
X509v3 Authority Key Identifier:
keyid:CD:A8:43:E8:12:B1:6D:EC:60:BB:70:98:CA:41:33:11:7D:B8:47:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zahD6BKxbexgu3CYykEzEX24R00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/VJUoXBS9iPEfhSdXRvzqWIAuTX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.96.140.0/24
IPv6:
2a00:5020::/48
Signature Algorithm: sha256WithRSAEncryption
33:d0:f4:2d:0e:97:f7:58:d9:ab:56:3f:1a:6b:bf:32:c9:62:
59:78:da:fe:a1:ae:9a:58:0c:0e:dd:01:01:d5:8f:94:82:3a:
89:e1:bd:3d:c0:31:16:58:38:52:24:84:bd:94:d5:89:a3:a7:
9a:22:d3:ad:7c:f8:c7:a2:d3:fd:55:b8:3d:08:c6:24:de:b7:
16:12:71:74:43:74:47:a3:04:08:b1:c4:28:53:7c:0b:38:66:
1f:e5:48:42:ab:fb:dc:67:c8:86:18:98:fb:db:15:f0:b4:e9:
af:ec:b9:a3:9b:6a:9a:76:92:0a:78:13:3d:17:b3:43:97:9e:
a5:aa:91:85:0a:be:17:ae:1f:fa:08:38:ef:e5:5c:c9:29:c9:
02:fd:9b:c6:55:aa:c7:90:6c:6a:15:04:99:c7:18:38:66:0f:
f7:1d:39:01:14:79:70:1f:a3:dd:2f:b0:3f:a1:ee:b8:4e:69:
cb:18:79:7e:31:b8:9b:99:bd:a6:c8:5b:b2:74:47:13:f4:dc:
92:c5:60:84:6c:d6:54:62:b1:c6:52:08:6b:d5:e6:41:32:03:
b6:43:1e:43:82:6c:3a:6e:db:2b:c9:31:97:38:5b:ab:23:b9:
5c:83:5e:c4:36:56:04:ae:7d:6f:c0:86:75:fe:24:9a:5d:f1:
a3:34:fc:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 14:58:13 2025 by rpki-client