Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/VMfAtn1XpM7P5k4OD2I4Yl2O77U.roa
File: VMfAtn1XpM7P5k4OD2I4Yl2O77U.roa (raw, json)
Hash identifier: wzsvzWPy0l8C01IVXeWLYhbuSSa3zn1abtRVVx7xrTk=
Subject key identifier: 54:C7:C0:B6:7D:57:A4:CE:CF:E6:4E:0E:0F:62:38:62:5D:8E:EF:B5
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01942748361575A3F200945C8459E0C028BF
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/VMfAtn1XpM7P5k4OD2I4Yl2O77U.roa
Signing time: Thu 02 Jan 2025 13:50:31 +0000
ROA not before: Thu 02 Jan 2025 13:50:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29119
IP address blocks: 185.227.102.0/24 maxlen: 24
185.244.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:36:15:75:a3:f2:00:94:5c:84:59:e0:c0:28:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 2 13:50:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=54c7c0b67d57a4cecfe64e0e0f6238625d8eefb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2b:23:c3:aa:16:40:94:12:bf:23:1c:d6:ad:
3a:0d:6e:ae:ba:5a:0a:86:92:80:db:d7:7c:53:20:
c1:02:c9:75:25:e7:43:bc:39:d6:48:23:a0:b6:b8:
4a:e9:79:21:9e:b0:36:52:93:5d:df:32:63:47:96:
e1:ba:57:71:7c:a6:fe:66:81:70:40:b1:84:48:4d:
e0:28:f2:a0:33:07:1d:75:26:7d:8a:57:6b:2b:e8:
f1:f9:bd:e1:77:99:cd:ef:57:fc:57:29:72:e9:9b:
4a:44:6c:8a:a9:b4:c3:33:60:17:85:62:18:40:93:
3c:f4:bb:df:a7:ae:71:64:cc:d7:b3:22:f4:ec:ee:
5a:6f:f0:0e:63:9b:9a:41:ac:12:a1:5d:cc:be:61:
72:b8:ed:0d:5d:bf:94:10:cc:13:c4:59:fa:5b:be:
a5:93:ad:c7:af:10:84:7a:d1:68:7d:5f:9f:d0:60:
2f:7e:66:b7:31:68:66:cf:f2:e3:05:17:94:ef:0e:
1a:54:7e:f5:85:fd:fa:99:6b:22:54:9e:eb:43:0e:
e1:a4:0b:d9:42:f2:d2:d1:08:77:10:97:aa:bd:5e:
78:51:7b:31:be:5f:30:36:6e:97:f6:38:5c:fb:2d:
2d:e6:6b:9a:9e:b5:1d:0b:b6:56:d4:12:bb:9e:fc:
b8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:C7:C0:B6:7D:57:A4:CE:CF:E6:4E:0E:0F:62:38:62:5D:8E:EF:B5
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/VMfAtn1XpM7P5k4OD2I4Yl2O77U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.227.102.0/24
185.244.235.0/24
Signature Algorithm: sha256WithRSAEncryption
34:8f:db:1c:c2:bf:a5:0e:ce:44:52:9b:cc:74:32:52:aa:08:
01:ac:3b:22:54:27:ed:1e:62:62:b3:d3:ff:98:0c:13:7e:40:
bb:53:f9:99:0b:5c:19:5e:cc:11:05:8b:1f:05:aa:04:da:2c:
af:01:3c:b6:88:a3:e6:69:d5:88:f9:c1:77:22:2e:b4:80:7f:
6a:8f:c2:95:15:7a:6e:95:94:96:35:d5:10:20:4a:20:6f:8e:
0d:6f:96:f8:b1:f4:0d:de:0d:fc:c7:72:32:8f:af:be:fe:6f:
f3:31:35:06:e5:f5:a8:fd:1e:5c:aa:41:61:4c:46:b2:17:f1:
6e:48:c6:2c:17:40:7c:26:75:67:23:01:49:10:42:63:52:0b:
f5:ed:92:3e:09:22:b5:82:8b:f8:a5:09:44:b8:da:23:86:09:
4c:92:7d:64:97:9d:9c:0e:ae:5b:ff:1a:5e:83:92:18:3d:88:
a3:2d:b9:5f:36:03:49:e4:c1:5e:b7:a4:0f:21:e0:ca:20:2d:
e9:af:87:0c:8e:38:bb:ca:b4:bb:64:c3:62:ab:55:79:06:3d:
c2:8f:c5:63:bf:e8:ab:ff:0b:44:51:19:c7:0d:94:02:64:e9:
3e:b6:83:07:da:b6:57:c0:fa:90:de:ba:7c:0f:43:bd:35:3b:
5b:f8:f4:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:28:16 2025 by rpki-client