Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/VBefpoqrDUHQSpoj27BSrozRznM.roa
File: VBefpoqrDUHQSpoj27BSrozRznM.roa (raw, json)
Hash identifier: agBfgG2iYmaXn7ObPl+WmZUGarHOkDC9u5AsUTrfJ94=
Subject key identifier: 54:17:9F:A6:8A:AB:0D:41:D0:4A:9A:23:DB:B0:52:AE:8C:D1:CE:73
Certificate issuer: /CN=0caa8840e53bb965be5192c85b740345e7a0652c
Certificate serial: 01942369AAB479F81EA6EA064C05431028C6
Authority key identifier: 0C:AA:88:40:E5:3B:B9:65:BE:51:92:C8:5B:74:03:45:E7:A0:65:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/VBefpoqrDUHQSpoj27BSrozRznM.roa
Signing time: Wed 01 Jan 2025 19:48:34 +0000
ROA not before: Wed 01 Jan 2025 19:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 193.107.46.0/24 maxlen: 24
2a13:7f00::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:aa:b4:79:f8:1e:a6:ea:06:4c:05:43:10:28:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0caa8840e53bb965be5192c85b740345e7a0652c
Validity
Not Before: Jan 1 19:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=54179fa68aab0d41d04a9a23dbb052ae8cd1ce73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:2b:89:41:48:29:14:b4:95:17:41:6f:87:f2:
a2:9a:ce:5e:e9:40:c7:3d:bb:84:c7:31:31:30:11:
dd:cd:ea:33:d6:2c:83:3b:98:4e:86:4b:e7:03:d5:
29:f6:cc:28:20:12:0b:eb:3e:53:5d:a8:43:36:d5:
29:be:db:7f:a4:32:ec:30:aa:26:47:a6:31:fa:12:
c8:ca:07:2c:35:e6:3f:8c:1f:f9:1a:1b:34:49:b7:
ee:06:e2:93:61:d2:59:3e:c2:c5:e8:82:76:3c:a3:
09:90:c4:6f:3b:d7:44:90:61:97:03:e8:7d:7c:1f:
d8:c7:3a:fd:a2:c3:c1:b6:f1:7d:ff:40:7a:82:50:
94:7d:17:98:4e:d3:c3:ea:c6:1e:47:f0:a0:76:19:
74:80:d4:c9:38:b7:5e:93:c7:dd:97:cc:0d:bb:64:
62:5d:f0:0e:97:21:bf:38:b2:70:43:07:7e:9e:40:
27:c5:c6:f2:dd:51:4c:fb:c3:b6:aa:9f:46:dd:3f:
f8:e2:00:ee:bc:75:ae:5a:e1:8d:01:09:63:1a:b3:
30:d0:d2:7e:67:7f:de:c4:2f:58:20:0d:6f:2a:56:
8a:49:76:0b:e3:99:f5:8e:fb:ff:a6:7d:70:89:7f:
e4:76:8e:bd:9d:a8:74:c5:f5:89:37:21:c5:e8:bc:
9d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:17:9F:A6:8A:AB:0D:41:D0:4A:9A:23:DB:B0:52:AE:8C:D1:CE:73
X509v3 Authority Key Identifier:
keyid:0C:AA:88:40:E5:3B:B9:65:BE:51:92:C8:5B:74:03:45:E7:A0:65:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/VBefpoqrDUHQSpoj27BSrozRznM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.107.46.0/24
IPv6:
2a13:7f00::/32
Signature Algorithm: sha256WithRSAEncryption
32:36:ae:77:c7:da:6e:10:8a:f6:02:08:d6:81:72:dc:1f:70:
e7:7f:9e:27:b9:2a:3b:5d:94:23:d6:8a:34:f9:b5:37:e3:11:
6b:2e:83:5c:e1:68:80:48:cb:ae:eb:51:ac:fd:26:f8:cf:b5:
8d:4b:7e:15:70:ce:04:3b:1c:16:e7:3c:e4:46:85:04:57:5c:
83:95:0e:2a:19:84:b0:bf:99:50:50:a6:40:ce:86:11:1d:64:
a3:c7:9f:e8:44:71:15:3f:38:eb:3a:ab:43:27:99:8c:6e:6e:
b8:df:a9:a5:cc:87:cc:50:0c:d0:28:65:cd:10:32:59:47:aa:
33:97:47:dc:d0:80:d6:56:0b:fc:d0:22:95:77:fb:4f:ff:c4:
be:de:e4:41:f8:3e:25:70:27:fc:48:00:a6:f5:b2:6d:8a:20:
92:d4:11:66:9e:ac:b7:67:fc:fb:52:a9:ae:73:e4:28:f7:65:
0d:15:9e:b7:bb:91:d7:c1:a2:e3:ae:bc:0d:e5:3e:13:34:52:
33:91:65:29:c7:46:5b:67:b5:9b:ae:2d:ae:74:48:ff:99:ba:
f1:4d:97:92:c7:bd:ee:d6:26:24:d1:77:39:16:02:70:ee:30:
48:9a:3d:7d:72:c7:fb:17:87:11:c9:86:70:2b:bb:36:34:9c:
01:62:45:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:30:17 2025 by rpki-client