Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/57dd9b-d715-47fc-8c14-0ef4236d1193/1/vbMmrpHge2wl0gaLHwnxCtBnZWo.roa
File: vbMmrpHge2wl0gaLHwnxCtBnZWo.roa (raw, json)
Hash identifier: S7La59Fhk5/uKwcHJaywBWi++pKC/IyfOJxx8kGO4Tg=
Subject key identifier: BD:B3:26:AE:91:E0:7B:6C:25:D2:06:8B:1F:09:F1:0A:D0:67:65:6A
Certificate issuer: /CN=98bf80eef0c592d5bfb7862623c3bc670af65909
Certificate serial: 0185626A73F37113E7F5ABE1400EBEB1757D
Authority key identifier: 98:BF:80:EE:F0:C5:92:D5:BF:B7:86:26:23:C3:BC:67:0A:F6:59:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mL-A7vDFktW_t4YmI8O8Zwr2WQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/57dd9b-d715-47fc-8c14-0ef4236d1193/1/vbMmrpHge2wl0gaLHwnxCtBnZWo.roa
Signing time: Fri 30 Dec 2022 09:43:41 +0000
ROA not before: Fri 30 Dec 2022 09:43:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41167
IP address blocks: 84.38.192.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:62:6a:73:f3:71:13:e7:f5:ab:e1:40:0e:be:b1:75:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98bf80eef0c592d5bfb7862623c3bc670af65909
Validity
Not Before: Dec 30 09:43:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bdb326ae91e07b6c25d2068b1f09f10ad067656a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e8:84:96:0d:63:4d:f8:73:2b:17:a7:aa:b3:
c4:74:ca:ae:99:b8:0f:43:dd:7a:d7:3f:61:ff:23:
0c:c8:8a:41:76:39:a4:9e:45:f9:a9:4f:4c:11:94:
b0:d3:23:07:35:15:c7:0a:75:55:5e:68:ab:bf:88:
4f:4e:48:f9:c5:4a:d2:1b:8c:e8:63:67:5b:c5:08:
3c:bf:32:36:41:33:02:92:0b:92:91:4c:ab:6d:68:
83:c4:db:f5:5c:cf:e4:87:c3:78:00:fa:fc:86:93:
a3:71:97:ba:33:d6:c0:7b:54:b7:ff:25:61:43:6f:
f2:0c:59:b0:47:59:4c:08:ec:06:bf:eb:66:f6:be:
fe:8c:93:2a:b2:0f:60:e6:eb:58:d3:16:2e:58:93:
61:4d:07:4c:b7:a6:d5:87:f8:37:d7:87:e5:dc:1c:
b9:0d:08:77:50:0b:53:44:99:f0:13:c8:1e:ff:f9:
f0:60:b4:93:dc:4d:8a:68:d8:5b:6b:82:b4:d5:5a:
1b:d2:1f:30:0f:37:70:24:ab:aa:1e:bd:a7:83:37:
d2:fe:71:67:fb:1f:85:eb:df:b2:b6:84:c1:94:ab:
63:dc:e4:84:13:0f:f2:b3:c1:1a:2b:2d:f6:77:31:
76:c4:2c:5e:b3:d7:2a:2d:ff:01:cf:ca:23:2d:7a:
71:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:B3:26:AE:91:E0:7B:6C:25:D2:06:8B:1F:09:F1:0A:D0:67:65:6A
X509v3 Authority Key Identifier:
keyid:98:BF:80:EE:F0:C5:92:D5:BF:B7:86:26:23:C3:BC:67:0A:F6:59:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mL-A7vDFktW_t4YmI8O8Zwr2WQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/57dd9b-d715-47fc-8c14-0ef4236d1193/1/vbMmrpHge2wl0gaLHwnxCtBnZWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/57dd9b-d715-47fc-8c14-0ef4236d1193/1/mL-A7vDFktW_t4YmI8O8Zwr2WQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.38.192.0/20
Signature Algorithm: sha256WithRSAEncryption
8e:7f:dc:94:35:55:23:65:75:7f:c9:9f:43:90:13:2f:f5:d8:
ea:8f:10:7f:f8:b8:a5:65:59:cc:1f:36:4a:52:66:f9:81:d8:
a3:f3:00:ac:88:cd:23:41:8f:60:88:5e:8e:dc:2c:f5:53:fc:
df:57:46:c8:51:53:0b:ef:90:4b:d8:8c:62:d9:5b:ab:c6:aa:
29:4e:58:f2:5d:47:64:52:33:32:cc:4c:d2:3d:4f:e3:f4:ee:
c3:31:88:7e:20:35:e5:8a:66:6c:73:c3:a1:96:1f:67:b6:a0:
8a:0b:d7:d5:09:f1:30:e8:a2:1f:17:3a:e8:23:67:e6:9f:72:
dd:a5:ec:91:c6:42:1d:bc:61:8d:05:e4:03:c4:50:02:08:56:
4f:ab:4d:cd:65:e6:70:c0:29:f3:e6:33:42:2a:55:9c:be:fd:
d6:ed:01:81:e4:af:76:65:15:f3:53:53:33:0d:5b:5d:98:61:
83:c5:c3:ef:db:6d:50:8f:b1:3a:ad:6c:c6:ba:0a:d6:65:14:
e7:1c:15:50:49:d8:e3:9d:07:79:b7:e0:b8:44:92:c7:37:f8:
40:03:e1:86:f3:0b:ff:85:35:55:5b:89:f4:e9:9a:69:27:54:
e7:46:08:cc:ea:5d:12:9f:76:92:a3:eb:03:07:7b:b7:98:b8:
43:b4:58:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:09:46 2025 by rpki-client