Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/VjS-seHmG-BAL7OamIGRL7xs-LU.roa
File: VjS-seHmG-BAL7OamIGRL7xs-LU.roa (raw, json)
Hash identifier: 4rvqFevMncWHr/Tl5dwZpfHmIaG2U0mKQzpib7kuzuw=
Subject key identifier: 56:34:BE:B1:E1:E6:1B:E0:40:2F:B3:9A:98:81:91:2F:BC:6C:F8:B5
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 0194274854AD822E8CCBF1CED6B4251DCDE0
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/VjS-seHmG-BAL7OamIGRL7xs-LU.roa
Signing time: Thu 02 Jan 2025 13:50:39 +0000
ROA not before: Thu 02 Jan 2025 13:50:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 272889
IP address blocks: 185.181.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:54:ad:82:2e:8c:cb:f1:ce:d6:b4:25:1d:cd:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 2 13:50:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5634beb1e1e61be0402fb39a9881912fbc6cf8b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:06:4a:9a:5e:b6:55:0c:68:87:12:f2:d0:56:
47:de:d9:66:6d:63:77:99:3a:7c:ac:0c:41:0b:99:
db:bc:81:bf:d5:3e:5e:7a:7d:54:70:86:5e:27:bb:
9f:43:01:34:bb:b7:a4:97:57:35:40:62:4a:f6:c3:
22:8f:10:f8:3c:7b:f4:9a:6b:d5:22:74:99:54:15:
26:b2:44:fb:9a:32:f4:62:25:10:94:06:a7:fc:10:
47:76:67:65:40:31:a7:05:64:c4:fb:08:f9:0d:63:
26:88:db:c2:d8:44:9f:f8:70:db:a3:3f:c4:d3:a2:
a9:6b:1b:6b:e4:60:7a:c9:2d:a5:cf:db:d5:0e:cc:
b0:36:3e:46:d4:ca:da:2f:4e:6e:e2:32:99:e7:30:
ca:7a:63:c3:c9:75:06:00:2c:8d:28:98:25:a1:d2:
21:87:91:b5:4b:88:d5:ad:de:f9:50:4c:20:8a:a3:
b4:bd:64:6f:ec:69:e9:cd:67:53:0a:4e:18:f4:eb:
fb:cc:c0:d9:0e:9a:80:f5:57:93:62:52:f5:84:cf:
f1:b5:13:33:c1:e0:b4:62:90:9e:40:ae:de:2a:ec:
98:c5:60:d8:15:2d:13:8c:9e:39:6c:ac:25:18:35:
b7:1d:b9:6d:f7:a3:be:29:cd:57:b1:ec:82:a7:46:
07:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:34:BE:B1:E1:E6:1B:E0:40:2F:B3:9A:98:81:91:2F:BC:6C:F8:B5
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/VjS-seHmG-BAL7OamIGRL7xs-LU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.181.35.0/24
Signature Algorithm: sha256WithRSAEncryption
59:f9:0b:05:b4:8e:3c:1b:96:1d:17:b2:14:26:b3:2a:bd:83:
df:e5:29:fc:81:25:b0:e1:39:dd:0c:28:24:93:7d:40:dd:77:
71:e8:92:a2:7f:de:9f:2d:22:21:26:47:a0:02:6e:67:29:ef:
ed:44:88:00:86:ce:3f:fa:f0:a4:85:2d:99:b0:c3:dc:90:2a:
82:ba:63:e6:4c:ef:21:d9:7a:70:71:9c:bb:7e:e2:12:ef:bf:
d4:12:3d:28:e5:92:50:49:43:ac:ae:be:34:5e:25:d0:a9:3a:
8f:18:0a:a1:e5:2f:44:e3:2d:a0:28:9b:3f:c7:0e:0e:fd:ed:
a0:05:43:0d:2b:7f:70:8f:ee:cc:75:c7:a4:e2:d4:a2:45:f5:
65:c4:84:6c:60:e4:a6:7e:ff:f8:4f:98:57:1e:50:7d:8a:28:
0c:8c:85:31:c6:89:be:1f:e6:23:83:2f:cc:c0:7e:c0:9a:19:
9c:7f:c1:8f:20:13:f7:71:e0:d0:56:2e:78:df:fb:ec:4e:1b:
8a:15:66:ad:da:67:0b:7a:c3:01:70:ab:50:f3:74:a1:68:aa:
15:67:fa:42:a4:4f:e6:69:6f:d5:ea:61:8d:76:e5:7a:b3:65:
e9:13:f4:dd:bc:cd:18:07:b7:5e:13:a1:3c:6d:d0:f5:ed:ec:
5c:4b:2f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:39:44 2025 by rpki-client