Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/Vj3eyVYuiy0PLarITtM_e9ae-VM.roa
File: Vj3eyVYuiy0PLarITtM_e9ae-VM.roa (raw, json)
Hash identifier: BbvxPT+tOHdLHNqT4giqo6GtD92mi+RnKJiPhEm0FIg=
Subject key identifier: 56:3D:DE:C9:56:2E:8B:2D:0F:2D:AA:C8:4E:D3:3F:7B:D6:9E:F9:53
Certificate issuer: /CN=1120a0ce013e2d52a6ff354a270894bb998e4547
Certificate serial: 0194214415CF3E33B4BB816511AAE6E0E5F3
Authority key identifier: 11:20:A0:CE:01:3E:2D:52:A6:FF:35:4A:27:08:94:BB:99:8E:45:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ESCgzgE-LVKm_zVKJwiUu5mORUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/Vj3eyVYuiy0PLarITtM_e9ae-VM.roa
Signing time: Wed 01 Jan 2025 09:48:17 +0000
ROA not before: Wed 01 Jan 2025 09:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 193.17.96.0/21 maxlen: 24
193.17.104.0/23 maxlen: 24
193.17.108.0/23 maxlen: 24
193.17.112.0/23 maxlen: 24
193.17.116.0/23 maxlen: 24
193.17.120.0/23 maxlen: 24
193.17.124.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:15:cf:3e:33:b4:bb:81:65:11:aa:e6:e0:e5:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1120a0ce013e2d52a6ff354a270894bb998e4547
Validity
Not Before: Jan 1 09:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=563ddec9562e8b2d0f2daac84ed33f7bd69ef953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:54:2b:bd:c1:28:96:d5:74:84:f2:ff:c7:d1:
8c:9e:c5:8f:e5:c9:66:69:d0:d4:a9:5d:f4:da:87:
99:ea:ff:c4:1a:a7:7e:c7:d8:07:b1:80:8b:88:46:
cf:5a:b5:65:17:39:95:a1:2f:74:ed:c7:e5:94:7a:
1a:2a:03:0c:28:f1:d1:26:d7:b6:1c:c0:29:c0:94:
98:a9:e3:cc:bb:a1:81:7a:68:aa:5e:2d:02:7f:15:
00:9a:76:bc:ec:0e:9e:c4:82:a4:6a:ab:0f:02:79:
b4:a6:c8:db:84:dd:5d:28:79:53:7a:09:de:27:8c:
97:94:66:ee:ec:cc:15:cb:f1:3c:5e:71:7d:f8:6c:
c6:36:5a:d7:b7:3c:69:75:2c:3e:b8:3d:98:c1:1b:
fc:c7:34:d1:34:ab:82:84:22:0a:03:4f:5d:8c:09:
5c:43:d0:1f:2e:03:55:67:bb:df:93:fb:60:d8:49:
ba:73:78:70:bc:a7:75:99:f4:e8:2f:ac:13:f7:61:
b1:7c:fc:0a:71:32:a5:cb:28:dc:7c:82:63:8e:90:
71:83:09:66:69:2a:25:5d:d5:2d:6a:17:69:15:9d:
29:95:28:29:c5:c4:91:93:6e:dc:af:17:74:95:22:
1c:2f:30:65:fb:28:6c:37:37:96:cb:c1:d1:cc:fd:
f1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:3D:DE:C9:56:2E:8B:2D:0F:2D:AA:C8:4E:D3:3F:7B:D6:9E:F9:53
X509v3 Authority Key Identifier:
keyid:11:20:A0:CE:01:3E:2D:52:A6:FF:35:4A:27:08:94:BB:99:8E:45:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESCgzgE-LVKm_zVKJwiUu5mORUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/Vj3eyVYuiy0PLarITtM_e9ae-VM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/ESCgzgE-LVKm_zVKJwiUu5mORUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.96.0-193.17.105.255
193.17.108.0/23
193.17.112.0/23
193.17.116.0/23
193.17.120.0/23
193.17.124.0/23
Signature Algorithm: sha256WithRSAEncryption
59:c1:42:70:5a:82:0f:f9:b9:80:85:e2:19:3e:8d:c2:47:e0:
2d:09:4b:67:69:bf:5f:83:bc:cd:72:c6:c2:32:5b:96:ec:df:
57:67:df:4c:2d:cc:ce:c8:05:a8:1c:ab:fb:de:c6:84:c1:0e:
9c:33:e1:f9:17:8e:d0:28:18:c8:76:1c:95:ca:c1:c5:1f:35:
56:cc:85:b9:61:9c:a1:3c:2f:81:d1:ee:1f:18:a0:f4:d3:3c:
ad:dc:20:82:7c:aa:95:cb:20:9b:2f:83:bc:e3:32:a1:75:85:
67:9b:61:72:de:3e:63:6f:6a:b1:7e:5b:66:59:f5:ff:19:36:
33:de:22:2d:78:fc:ca:fb:05:1e:d9:0a:43:7a:66:bd:c0:c6:
05:bb:8a:a2:c6:81:1f:12:14:92:2c:ee:14:af:02:62:55:dd:
20:90:5e:e8:7c:d1:91:f8:8b:5c:27:4a:2a:9c:85:b8:4f:11:
c1:9c:42:4b:87:62:fd:6f:27:ac:bf:4e:9e:a0:cc:36:ed:17:
7c:c3:2b:ff:63:ac:15:3c:52:cc:49:51:8b:82:02:b7:ee:6d:
01:d9:45:fd:06:b2:95:44:4a:94:cf:5e:69:94:5a:46:f3:2d:
ab:f4:a5:1f:95:42:48:8c:e9:83:c8:af:5d:7d:73:e8:d2:ce:
c5:b7:22:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:21:30 2025 by rpki-client