Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VvgJ3yVqrzaMe7VncYcELQK6jcM.roa
File: VvgJ3yVqrzaMe7VncYcELQK6jcM.roa (raw, json)
Hash identifier: fO7oShhvWl8XVKWOpaIESAn/xcAZi/gud0nO+6VHk/k=
Subject key identifier: 56:F8:09:DF:25:6A:AF:36:8C:7B:B5:67:71:87:04:2D:02:BA:8D:C3
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 019421B233F66B946E12D3482015A704DAF7
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VvgJ3yVqrzaMe7VncYcELQK6jcM.roa
Signing time: Wed 01 Jan 2025 11:48:34 +0000
ROA not before: Wed 01 Jan 2025 11:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206093
IP address blocks: 82.177.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:33:f6:6b:94:6e:12:d3:48:20:15:a7:04:da:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 11:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=56f809df256aaf368c7bb5677187042d02ba8dc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:af:25:8d:69:8f:90:57:05:88:82:b4:17:2c:
9e:3e:30:17:10:70:8d:c0:76:d8:e3:52:2a:8b:0b:
b9:57:16:08:88:72:38:c6:33:32:96:56:48:86:71:
44:7e:35:db:9b:9b:c3:76:ec:36:2e:0a:f3:e9:5f:
58:02:88:3f:af:6b:aa:45:03:96:e9:35:83:2b:47:
3d:ce:06:42:f0:11:56:e2:98:03:24:f3:2d:6b:25:
ef:2a:39:ef:d0:93:90:01:87:11:ca:ed:5e:c3:20:
4a:d3:2c:50:c0:39:5b:ca:3a:dd:19:cf:42:62:f9:
37:4d:6c:a9:e0:6f:44:c7:74:36:d9:09:45:08:f8:
4b:41:92:79:f4:bc:9c:84:9e:41:7e:a2:d7:54:4c:
80:56:93:bd:5a:43:27:17:cd:9b:f6:95:c9:c5:ca:
c2:85:47:73:67:3f:60:d2:65:30:ea:94:4f:91:89:
b5:8f:2e:b4:51:e6:29:bd:26:3a:df:6c:29:50:1d:
73:4a:81:5a:7e:b9:26:84:a3:c6:c1:b9:92:0f:41:
1a:c9:42:b7:2a:e6:56:6f:2d:36:d2:1d:80:ff:77:
02:33:34:a5:f7:28:96:09:b0:cf:c5:e5:ab:4e:e7:
34:c4:07:bd:9c:ed:56:a3:af:4e:9e:56:07:83:5e:
37:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:F8:09:DF:25:6A:AF:36:8C:7B:B5:67:71:87:04:2D:02:BA:8D:C3
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VvgJ3yVqrzaMe7VncYcELQK6jcM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.177.128.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:6c:d4:5c:93:6b:22:c7:7a:a0:3d:92:be:ef:a3:0d:07:99:
54:43:99:b2:50:9f:c9:11:b8:15:3c:f2:0b:bb:fa:93:f3:6b:
57:ce:3a:b8:1c:da:ab:39:b1:0b:14:49:16:93:fe:9e:6c:87:
09:b0:aa:d0:fa:9c:90:47:85:30:8d:35:b0:13:14:7a:90:e4:
f3:61:a6:33:81:91:6e:05:01:54:00:44:a8:d8:71:a6:c3:4b:
e5:37:30:c9:15:f7:00:3f:63:5a:a5:df:17:a9:9b:35:b2:2b:
b5:27:13:54:56:d2:e0:f8:15:44:7a:f1:e7:d9:47:62:bf:cc:
48:51:39:04:f7:55:37:58:07:cc:87:0e:b7:95:3b:c4:43:04:
bf:0c:33:16:d3:a3:51:28:72:e8:ac:71:8b:40:ce:0b:17:c2:
f1:27:4f:39:e6:21:39:69:15:25:80:62:99:32:b1:a1:4a:85:
55:0d:86:f0:6b:29:86:9f:f0:20:20:ac:ae:2f:01:0f:86:09:
97:14:14:d1:20:11:36:7a:72:c8:4f:7a:d3:e0:0f:f9:23:47:
1e:7b:ae:ee:aa:91:b8:c8:6d:9d:fd:d2:b3:43:ff:35:bb:f5:
29:80:9b:c8:ec:ee:70:01:e5:69:74:19:bc:53:48:25:4c:82:
7d:b3:13:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:12 2025 by rpki-client