Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/VPlDieozdTqya8M23CIQabNEzhc.roa
File: VPlDieozdTqya8M23CIQabNEzhc.roa (raw, json)
Hash identifier: UcTjAwdbNdwFck7DgakfgJmKo0H8BWmzRFNiOsRZnWY=
Subject key identifier: 54:F9:43:89:EA:33:75:3A:B2:6B:C3:36:DC:22:10:69:B3:44:CE:17
Certificate issuer: /CN=f9df80f7c692e86d3cd6b755d06cf7ce9c137ff2
Certificate serial: 01856C1CB3280AB37899C0DCD9CE4AB0AD30
Authority key identifier: F9:DF:80:F7:C6:92:E8:6D:3C:D6:B7:55:D0:6C:F7:CE:9C:13:7F:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-d-A98aS6G081rdV0Gz3zpwTf_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/VPlDieozdTqya8M23CIQabNEzhc.roa
Signing time: Sun 01 Jan 2023 06:54:58 +0000
ROA not before: Sun 01 Jan 2023 06:54:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5505
IP address blocks: 185.123.204.0/24 maxlen: 24
185.123.205.0/24 maxlen: 24
185.123.204.0/22 maxlen: 22
185.123.206.0/24 maxlen: 24
185.123.207.0/24 maxlen: 24
2a03:9320::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:1c:b3:28:0a:b3:78:99:c0:dc:d9:ce:4a:b0:ad:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9df80f7c692e86d3cd6b755d06cf7ce9c137ff2
Validity
Not Before: Jan 1 06:54:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=54f94389ea33753ab26bc336dc221069b344ce17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:37:97:7b:61:d3:5d:34:f5:fd:82:c9:04:1f:
fc:c1:39:1b:8d:3e:4d:98:d3:ee:72:8d:94:f5:ca:
30:ca:7e:b6:77:6c:47:99:74:e0:23:0d:33:dc:33:
d2:05:a8:ec:b6:69:3b:af:a5:ff:ac:09:e4:9e:b9:
39:d2:aa:18:a9:b4:96:7f:e2:03:0b:98:6c:a5:2b:
9c:c9:13:03:c3:3e:6d:34:90:6d:ff:ee:94:34:1c:
7b:35:d3:9b:91:1d:a2:07:af:22:61:4a:fe:7e:df:
b4:b4:e9:34:34:79:b2:6c:2f:2d:71:cf:16:47:33:
37:b2:e2:56:da:4d:1e:a5:a2:cc:bf:ee:a9:b6:c6:
c0:21:63:68:93:34:76:21:7e:9a:43:e7:6f:68:27:
a0:1a:69:a8:ee:7f:c2:ab:f4:d5:f0:13:3c:42:05:
06:80:04:d4:68:1e:bb:63:52:1a:f7:4e:f9:c8:42:
29:d4:11:3b:89:f6:61:85:42:53:01:9f:ce:e8:36:
5d:f7:e0:85:eb:68:77:6b:83:1d:2e:c3:7b:2b:89:
2f:95:23:3d:c2:4e:f1:ec:87:8d:32:ac:63:c2:41:
48:2e:ef:2d:db:c9:61:f8:ec:fa:d2:72:81:66:3e:
65:c6:1b:fb:5e:98:72:ad:59:3a:76:2e:13:17:61:
f5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:F9:43:89:EA:33:75:3A:B2:6B:C3:36:DC:22:10:69:B3:44:CE:17
X509v3 Authority Key Identifier:
keyid:F9:DF:80:F7:C6:92:E8:6D:3C:D6:B7:55:D0:6C:F7:CE:9C:13:7F:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-d-A98aS6G081rdV0Gz3zpwTf_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/VPlDieozdTqya8M23CIQabNEzhc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.123.204.0/22
IPv6:
2a03:9320::/32
Signature Algorithm: sha256WithRSAEncryption
b1:06:b9:38:04:53:79:92:f4:d4:d5:4c:0d:05:90:93:d7:04:
fb:fa:80:91:a9:2b:8b:2f:43:a5:b9:16:ff:95:fa:06:01:81:
50:cd:32:e5:02:b0:ad:a9:23:ee:f4:a5:6b:da:5f:13:ba:34:
1d:b8:1a:1e:5b:39:e7:3f:27:87:8c:a5:5d:ce:86:06:27:83:
14:4a:70:8e:07:46:e8:f5:35:d9:e3:b0:b8:d9:74:fe:29:dc:
43:95:b9:fe:9d:a6:4e:00:20:74:62:ab:f1:8d:6e:0f:ad:cb:
b3:3f:bb:18:ba:51:30:43:8b:a3:c6:0d:e7:6e:c5:90:fa:90:
ea:b7:c1:e9:69:3e:0a:28:75:4b:11:ff:80:ee:2b:48:c7:0d:
1a:ee:2c:27:cb:51:4b:36:b8:af:59:cb:a5:32:93:70:a5:36:
23:61:ad:c8:ec:00:b6:57:6d:32:25:b4:66:38:ff:62:ab:20:
6e:75:d6:c1:1e:17:d9:4a:de:23:31:55:1a:8f:e0:6f:6b:e8:
1b:65:5a:ee:57:66:d5:e5:9e:a2:0f:3e:7a:b8:30:83:8d:dc:
4e:eb:9e:42:9e:63:ef:5c:b7:0d:f9:f2:de:33:0d:09:03:87:
a0:af:7d:dc:eb:86:8d:f7:a7:91:b7:b2:b6:e1:12:44:76:75:
5a:e6:aa:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:15:20 2025 by rpki-client