Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/7a11b5-a405-41cb-81cb-f6bccf1e531f/1/RVfWb6AeQUrXaw0eh9r6r19sjZE.roa
File: RVfWb6AeQUrXaw0eh9r6r19sjZE.roa (raw, json)
Hash identifier: v4r/LVDf839QcMU4tAbsB+argaU/EH+WPkLUSna1SOM=
Subject key identifier: 45:57:D6:6F:A0:1E:41:4A:D7:6B:0D:1E:87:DA:FA:AF:5F:6C:8D:91
Certificate issuer: /CN=d914da56e1a934649da02964ac12eba34c5cb84f
Certificate serial: 0194258E39D4635BE32F8B4396D545ED595E
Authority key identifier: D9:14:DA:56:E1:A9:34:64:9D:A0:29:64:AC:12:EB:A3:4C:5C:B8:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2RTaVuGpNGSdoClkrBLro0xcuE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/7a11b5-a405-41cb-81cb-f6bccf1e531f/1/RVfWb6AeQUrXaw0eh9r6r19sjZE.roa
Signing time: Thu 02 Jan 2025 05:47:45 +0000
ROA not before: Thu 02 Jan 2025 05:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214019
IP address blocks: 79.174.3.0/24 maxlen: 24
2a13:e3c3::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:39:d4:63:5b:e3:2f:8b:43:96:d5:45:ed:59:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d914da56e1a934649da02964ac12eba34c5cb84f
Validity
Not Before: Jan 2 05:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4557d66fa01e414ad76b0d1e87dafaaf5f6c8d91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bd:23:4d:22:a4:95:37:0f:72:1f:cd:93:69:
73:43:1c:a3:fc:1b:ba:bf:2f:ea:b7:2b:47:98:6b:
4a:28:da:7d:9f:b5:eb:d6:95:35:cd:93:cd:14:13:
82:d5:8c:68:8f:d2:38:39:35:31:de:aa:08:f2:90:
49:8f:63:f8:2c:e7:44:52:aa:32:a7:e3:74:7d:8b:
c5:be:e9:1e:3b:a3:20:21:ea:bb:aa:cd:59:47:f5:
6a:96:92:b3:92:11:1f:e3:20:56:35:54:d4:f7:db:
6f:83:f1:e7:0f:59:d8:1b:d0:84:3d:63:2c:60:ec:
ee:19:11:d3:d9:94:be:a4:90:c5:f9:4d:2b:d3:02:
5c:86:44:05:7c:81:3a:b7:2c:13:f2:75:64:e9:cd:
9e:15:67:e7:56:70:ec:11:4f:19:a0:93:04:51:c6:
a7:12:74:23:63:b5:cb:80:1e:df:3f:24:e6:e5:9a:
f8:12:eb:9c:fc:bc:ff:c9:cc:16:55:13:4c:d7:47:
28:ca:8c:0d:67:01:b0:e4:7e:17:43:67:f8:d5:a6:
6d:3d:0f:8a:34:70:fb:a4:fb:1c:79:e1:8d:1c:af:
a9:6c:f8:cb:d3:50:4c:20:2d:e9:e9:89:61:50:c8:
d0:98:4f:ef:d0:e0:0e:9b:0b:40:2e:52:47:9b:45:
0f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:57:D6:6F:A0:1E:41:4A:D7:6B:0D:1E:87:DA:FA:AF:5F:6C:8D:91
X509v3 Authority Key Identifier:
keyid:D9:14:DA:56:E1:A9:34:64:9D:A0:29:64:AC:12:EB:A3:4C:5C:B8:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2RTaVuGpNGSdoClkrBLro0xcuE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7a11b5-a405-41cb-81cb-f6bccf1e531f/1/RVfWb6AeQUrXaw0eh9r6r19sjZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7a11b5-a405-41cb-81cb-f6bccf1e531f/1/2RTaVuGpNGSdoClkrBLro0xcuE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.174.3.0/24
IPv6:
2a13:e3c3::/32
Signature Algorithm: sha256WithRSAEncryption
d4:49:f9:af:a5:d5:3f:c0:40:d1:39:d9:8e:0c:e4:6e:c3:56:
67:bb:58:15:1b:0d:ed:59:bf:83:56:b0:25:92:e6:73:08:75:
05:85:e2:01:5b:c6:76:02:38:8b:3f:69:40:74:77:1e:8c:bf:
54:c9:0d:64:6c:b9:73:97:67:b5:48:1e:89:79:f1:f5:ec:63:
28:4a:1f:d6:0e:f8:7f:e5:e4:d8:28:bb:8e:7f:d4:0c:ca:fc:
ec:49:b3:18:40:30:6c:06:10:2f:49:cd:4a:a7:19:a9:f1:95:
8c:7f:cd:89:49:2f:30:a8:f4:7b:17:47:d4:65:c1:6f:66:97:
fd:5e:57:d9:ce:2d:02:1a:95:6e:63:73:eb:28:8d:e4:1a:ee:
18:ac:4d:1b:9f:37:76:64:0d:b1:b6:6f:01:7f:02:a1:4a:02:
f7:24:da:41:11:99:45:47:1f:9e:12:69:f1:94:6c:13:a1:47:
1d:b7:67:c6:35:7b:c3:27:a5:7e:99:12:44:07:20:e7:97:bc:
dc:03:61:73:23:ea:54:eb:b8:c9:82:0e:d1:c0:b4:a6:f2:3b:
db:c3:10:d3:6c:01:99:00:20:f3:13:64:8b:b9:5d:15:0a:80:
71:c2:f9:b7:5c:f4:e7:15:c7:1b:ee:8e:9d:e7:50:21:55:77:
b8:49:4d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:34:15 2025 by rpki-client