Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/veoAENLnah7aILZ3Y2zYW-yyzcE.roa
File: veoAENLnah7aILZ3Y2zYW-yyzcE.roa (raw, json)
Hash identifier: RNC66zByAZwyk3IXFMRjP4iyX1J6vYJzeNG/BevNNqE=
Subject key identifier: BD:EA:00:10:D2:E7:6A:1E:DA:20:B6:77:63:6C:D8:5B:EC:B2:CD:C1
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258F933342EBB72EEC628AE76231673E
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/veoAENLnah7aILZ3Y2zYW-yyzcE.roa
Signing time: Thu 02 Jan 2025 05:49:13 +0000
ROA not before: Thu 02 Jan 2025 05:49:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39906
IP address blocks: 93.170.84.0/22 maxlen: 24
95.46.32.0/23 maxlen: 24
95.46.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:93:33:42:eb:b7:2e:ec:62:8a:e7:62:31:67:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bdea0010d2e76a1eda20b677636cd85becb2cdc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:55:dc:60:29:13:fe:d7:78:b6:3e:53:03:16:
a2:fa:36:b6:a9:aa:9d:e2:e4:c2:68:7c:d0:5f:ce:
a5:ed:7e:42:35:96:06:58:c9:53:a1:e0:d5:69:e7:
db:5f:f8:bf:e3:c9:23:f2:b3:7f:ca:1e:5f:af:1c:
96:a0:5c:6d:1f:e2:5d:56:0e:60:f9:bf:d3:79:d4:
21:04:c3:bb:b9:e8:b0:35:9b:0f:9d:d2:41:aa:28:
c9:aa:ae:78:c3:74:b4:a6:a8:d6:a2:3d:f6:b6:02:
47:aa:21:e4:9b:50:b5:01:45:35:a8:d3:aa:df:12:
03:2e:30:fb:ac:48:37:ec:ed:87:e9:49:60:d0:e4:
85:20:1e:9b:1e:cf:5e:1e:b8:1e:36:97:95:37:56:
dc:2f:4e:30:8c:6b:c6:02:5f:2b:33:96:66:6f:56:
ef:3a:d5:5e:09:39:cf:a9:f1:a9:98:4a:ae:e4:9b:
23:83:c4:97:90:a9:a4:ea:b8:29:47:0b:a4:9d:51:
c5:2e:ba:c0:c2:1a:03:2c:bd:33:64:05:f4:d9:d0:
5f:c9:d7:d5:d9:20:39:a1:2a:19:32:1b:f1:be:2f:
85:58:c4:f4:af:c2:76:93:1c:5f:a5:72:c9:ce:29:
8b:62:e8:05:c4:d0:17:0d:62:56:c0:03:ad:15:98:
4d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:EA:00:10:D2:E7:6A:1E:DA:20:B6:77:63:6C:D8:5B:EC:B2:CD:C1
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/veoAENLnah7aILZ3Y2zYW-yyzcE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.84.0/22
95.46.32.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:5b:a0:7f:6f:9c:e4:24:93:df:81:2f:51:b0:25:05:b4:ae:
0d:cd:a4:83:8a:fa:81:47:56:43:45:4b:2b:13:34:7b:d6:64:
6d:48:43:2f:e2:7b:5b:3f:c1:90:83:0c:74:d0:b6:f3:bc:0d:
a9:d1:9c:3e:2b:e9:74:05:65:f5:76:85:a2:71:62:7c:51:d8:
cf:87:37:b4:2a:97:16:e4:2b:6c:7d:f2:38:27:23:0c:4c:d5:
4a:91:8d:ab:c0:87:2b:bf:4a:f4:38:b5:ae:25:91:f0:00:c0:
ae:c8:06:8c:98:f9:15:db:74:bb:eb:d2:78:93:bf:23:d0:ce:
e8:c0:b2:5a:aa:0d:57:2c:84:28:ab:82:95:4f:78:d5:cb:b1:
4c:8e:08:28:c6:3d:47:c4:d2:9b:0c:0d:54:7c:d4:01:04:00:
41:a4:d7:4a:25:bf:e7:0f:2f:db:d6:d4:42:a1:88:c1:5f:6f:
0a:2d:df:60:53:21:dd:dd:ce:1e:60:55:58:e6:42:f1:2b:34:
9a:79:0a:a0:0a:a5:cb:a4:1d:f5:e7:c0:e6:ec:f9:ef:97:f4:
23:6d:ef:d5:3d:0d:46:cf:94:5e:09:65:52:1e:49:7e:f7:3a:
c0:9c:36:b9:e9:cc:c1:af:e6:7b:4e:11:0e:b1:26:4f:12:bf:
fc:90:71:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:36:50 2025 by rpki-client