Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/vEqlR-wK6vhE-A5WSnSAQYZ0NTQ.roa
File: vEqlR-wK6vhE-A5WSnSAQYZ0NTQ.roa (raw, json)
Hash identifier: t2gxjw1PQBTSNQUXYZvmmNex4Z4HZCQbhqaTKTSth94=
Subject key identifier: BC:4A:A5:47:EC:0A:EA:F8:44:F8:0E:56:4A:74:80:41:86:74:35:34
Certificate issuer: /CN=61a5d217759e861696fc77ed9aa63b94edb3be7d
Certificate serial: 05A623F4
Authority key identifier: 61:A5:D2:17:75:9E:86:16:96:FC:77:ED:9A:A6:3B:94:ED:B3:BE:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YaXSF3WehhaW_HftmqY7lO2zvn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/vEqlR-wK6vhE-A5WSnSAQYZ0NTQ.roa
Signing time: Sat 01 Jan 2022 07:57:48 +0000
ROA not before: Sat 01 Jan 2022 07:57:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39151
IP address blocks: 185.27.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94774260 (0x5a623f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61a5d217759e861696fc77ed9aa63b94edb3be7d
Validity
Not Before: Jan 1 07:57:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bc4aa547ec0aeaf844f80e564a74804186743534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1e:6b:38:e5:1c:d3:c7:c8:ef:af:7e:e3:2d:
e0:99:df:ab:86:25:a9:17:dc:4e:72:31:c4:77:a7:
a6:1b:15:4b:2c:da:f3:3d:12:eb:c0:bc:1c:d9:e7:
8c:21:fe:b9:f7:0e:ec:76:2c:ad:24:3f:f8:52:25:
1e:63:1c:b4:43:da:23:ba:9d:b5:31:f5:bd:17:fb:
ba:25:f4:67:ae:88:23:40:5e:6e:6e:e8:29:65:c3:
8d:ec:f5:7a:87:90:45:5d:cf:ba:53:bc:70:e3:a4:
42:3d:81:70:27:8e:09:db:6a:dc:7e:2f:36:83:c3:
e7:dc:a3:a5:8e:6a:e4:2f:15:ee:95:a3:d0:49:5b:
f3:c9:6b:96:bf:81:f2:ef:33:c0:99:4a:87:fa:b8:
5e:bf:f4:13:9c:60:62:da:7c:c3:9e:f8:e5:ba:23:
55:4d:38:8b:9f:9c:ed:90:85:2b:f5:59:b9:1a:70:
d9:7a:84:ed:bf:56:cd:6a:05:0b:30:45:4e:77:d8:
51:a3:f0:29:13:ff:fb:d4:8d:ae:49:3f:ff:43:bf:
29:f3:1b:32:3f:10:fa:df:9d:09:e3:f8:65:4f:7b:
76:cb:b0:f5:33:a1:0f:dd:1f:61:15:a9:d6:a8:ef:
66:85:76:ef:ce:61:32:d9:50:61:d9:43:fb:0f:2b:
59:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:4A:A5:47:EC:0A:EA:F8:44:F8:0E:56:4A:74:80:41:86:74:35:34
X509v3 Authority Key Identifier:
keyid:61:A5:D2:17:75:9E:86:16:96:FC:77:ED:9A:A6:3B:94:ED:B3:BE:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YaXSF3WehhaW_HftmqY7lO2zvn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/vEqlR-wK6vhE-A5WSnSAQYZ0NTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.27.249.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:7f:68:33:e6:46:90:9e:b8:70:45:a2:86:26:16:13:92:85:
87:92:48:6d:b8:c0:fe:54:e7:06:59:7d:3b:ed:91:79:8a:00:
d0:34:4a:e6:f7:4a:9b:cf:77:b5:90:f5:8b:98:5f:68:0c:f3:
8e:59:ef:cf:81:fe:1a:f2:49:3b:f9:d8:d4:bf:0c:97:d0:eb:
91:3c:84:05:52:26:18:09:26:12:e0:93:e8:f8:f1:20:0e:cf:
82:c0:d6:35:70:7c:62:5c:50:0d:12:16:68:03:0e:44:2e:cd:
8f:0e:c6:b3:97:07:df:b0:48:15:a5:a3:42:ca:a4:48:13:85:
ab:68:99:56:29:7a:26:e0:0a:26:4e:af:af:19:62:5e:b9:df:
9f:5b:74:93:8c:16:42:de:1e:3a:e7:02:66:a1:fe:cc:ae:19:
a8:82:2e:9f:e7:5e:7d:27:e3:21:db:f5:42:fa:2d:43:10:db:
b8:20:0e:ef:31:8c:23:0a:e7:34:6b:8f:02:16:06:20:76:42:
06:3c:45:f7:57:9a:51:1c:ff:3f:fe:d6:34:b5:e5:2e:5d:80:
82:13:49:43:d1:c0:09:39:ab:ed:4a:22:78:05:5e:da:59:34:
d1:a5:77:2a:be:7a:73:78:02:e9:b7:fd:3f:9e:f4:4a:f2:50:
96:80:fe:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:12:07 2025 by rpki-client