Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/Vjvl0kJK8pc3y7MNEkqibN60PR4.roa
File: Vjvl0kJK8pc3y7MNEkqibN60PR4.roa (raw, json)
Hash identifier: MjVdYx/a48lC6pY/MGaNdjlHAGdJlBgE3IEjA9xGAp0=
Subject key identifier: 56:3B:E5:D2:42:4A:F2:97:37:CB:B3:0D:12:4A:A2:6C:DE:B4:3D:1E
Certificate issuer: /CN=f8203a0c04b81fe1766fa41bd31b73b588188ac7
Certificate serial: 018A29D4B1778A00805484854811AD945360
Authority key identifier: F8:20:3A:0C:04:B8:1F:E1:76:6F:A4:1B:D3:1B:73:B5:88:18:8A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-CA6DAS4H-F2b6Qb0xtztYgYisc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/Vjvl0kJK8pc3y7MNEkqibN60PR4.roa
Signing time: Thu 24 Aug 2023 23:15:19 +0000
ROA not before: Thu 24 Aug 2023 23:15:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198855
IP address blocks: 185.247.137.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:29:d4:b1:77:8a:00:80:54:84:85:48:11:ad:94:53:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8203a0c04b81fe1766fa41bd31b73b588188ac7
Validity
Not Before: Aug 24 23:15:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=563be5d2424af29737cbb30d124aa26cdeb43d1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:05:42:ca:4b:7e:f5:21:e9:12:99:8a:64:ac:
f5:02:a6:3c:67:f2:c1:66:51:76:d7:44:18:a9:36:
56:03:e0:8f:d7:b2:09:7f:9b:72:7b:91:89:7b:27:
b5:76:3d:7b:0a:1a:aa:9c:b5:d3:d7:98:5c:68:1d:
08:22:6f:ab:5f:df:0e:7f:5a:1f:0e:78:8e:fd:6b:
6a:f2:2c:3d:cf:be:b4:9c:e2:d8:5e:25:81:4c:6e:
19:15:9b:81:e8:b9:23:ee:d6:71:fd:40:43:43:35:
fa:8c:e6:ac:79:8a:e2:4d:37:7e:b9:09:8b:7b:0f:
e2:f2:53:b3:a6:cb:3a:36:9a:63:da:02:d0:85:69:
f7:c3:86:5d:86:ec:7e:5c:43:08:98:76:7d:60:3b:
6e:20:42:97:8b:05:6b:dd:d9:ef:b0:4d:99:f3:4b:
a5:fc:d0:1f:cd:e5:1c:cb:dc:c8:4e:2f:31:67:8a:
b9:45:88:ca:80:93:bf:17:e4:ea:08:66:3c:77:51:
6c:7c:4f:58:1c:e8:3c:57:16:1e:3d:79:ff:f8:2b:
7d:5b:e8:c5:0b:11:24:58:ff:b7:cd:7e:a2:2e:21:
8a:0f:58:7b:b1:da:02:c6:a1:e4:35:5c:78:06:f2:
da:44:6d:04:21:72:fc:ab:91:1d:d2:4a:ea:dc:b3:
22:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:3B:E5:D2:42:4A:F2:97:37:CB:B3:0D:12:4A:A2:6C:DE:B4:3D:1E
X509v3 Authority Key Identifier:
keyid:F8:20:3A:0C:04:B8:1F:E1:76:6F:A4:1B:D3:1B:73:B5:88:18:8A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-CA6DAS4H-F2b6Qb0xtztYgYisc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/Vjvl0kJK8pc3y7MNEkqibN60PR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/1-CA6DAS4H-F2b6Qb0xtztYgYisc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.247.137.0/24
Signature Algorithm: sha256WithRSAEncryption
60:8b:e7:29:ee:e1:63:26:b3:08:3f:8e:fb:de:ca:ca:18:f4:
f3:80:f3:53:e7:7b:20:2f:b0:2e:70:b7:f7:ad:7c:39:74:3b:
8d:e6:88:22:f3:c7:55:6c:04:16:6f:37:1c:f2:46:e2:f2:86:
01:6d:a8:2a:8c:21:c3:b8:d4:50:fc:ac:bb:6b:36:04:a6:e3:
02:b2:2b:c0:2a:f2:43:a3:e6:17:bb:e9:a4:15:30:e8:a4:0e:
64:33:92:a4:cc:26:79:cd:a7:a7:24:25:7c:68:42:0a:8a:fb:
c0:5a:4f:d7:a6:f9:23:92:98:ef:70:fe:85:68:72:51:9d:6b:
b7:24:19:9a:59:2d:1b:ac:3b:28:c9:b4:af:8f:12:e2:90:6d:
dd:0a:d1:2f:70:1b:78:05:68:22:1a:c6:45:9e:ba:40:cc:68:
1d:5d:1d:43:49:9e:91:0f:13:c5:e7:09:22:94:8a:78:a6:f7:
31:11:eb:7e:d3:74:24:24:fc:16:15:b3:9b:6e:0e:5a:db:0f:
e1:d8:75:4b:a1:e7:21:e3:39:c0:9b:65:1f:fd:f6:c5:12:bc:
a2:f0:fc:0c:0a:03:37:6c:d8:10:f3:38:6a:e2:e8:19:67:ff:
86:3e:4b:0a:6d:e0:77:a9:67:29:64:a6:f5:7e:82:54:f9:12:
73:51:00:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:43:08 2025 by rpki-client