Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/VN36Ytp63JBaXDq4EaXSFkMbRH4.roa
File: VN36Ytp63JBaXDq4EaXSFkMbRH4.roa (raw, json)
Hash identifier: JAiIqOeDFCP0g6rEa6w6jg6tDNXyYeGXRePfsaE7rpE=
Subject key identifier: 54:DD:FA:62:DA:7A:DC:90:5A:5C:3A:B8:11:A5:D2:16:43:1B:44:7E
Certificate issuer: /CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Certificate serial: 0194236A262311EE5DF60F37800AE3F19059
Authority key identifier: E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/VN36Ytp63JBaXDq4EaXSFkMbRH4.roa
Signing time: Wed 01 Jan 2025 19:49:06 +0000
ROA not before: Wed 01 Jan 2025 19:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16142
IP address blocks: 213.215.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:26:23:11:ee:5d:f6:0f:37:80:0a:e3:f1:90:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Validity
Not Before: Jan 1 19:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=54ddfa62da7adc905a5c3ab811a5d216431b447e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a0:1d:e8:75:7e:be:f5:93:ae:ea:03:e5:ec:
d3:99:fd:c7:83:41:49:03:b8:dd:13:c0:74:1d:1b:
cd:86:7a:15:7c:aa:47:e8:66:80:fc:e8:16:3a:98:
a4:98:5a:fc:37:4e:9d:61:b6:25:44:e5:d0:9d:7e:
2d:00:8a:72:56:1a:ae:5d:68:58:4e:79:ee:a4:99:
27:ba:b7:a4:39:cd:a5:1e:fc:12:0b:c8:0a:f0:5e:
72:28:fb:83:e4:7b:7e:9e:c8:f5:3d:ae:34:a8:d2:
0a:64:f9:7b:01:ad:2a:06:b5:f6:9e:a3:4b:2c:81:
64:0e:1a:03:3f:ff:2b:be:95:91:3b:26:86:4b:03:
d4:10:a2:e0:bc:1c:41:22:46:50:97:a7:a0:61:f1:
5f:0c:91:fc:71:aa:d6:8e:65:58:db:4c:02:38:b6:
85:91:b2:16:12:13:59:da:a1:b9:55:3f:35:41:27:
27:eb:c6:90:fc:4a:9c:92:00:79:9b:53:aa:4f:0b:
0f:11:dd:a2:91:cf:9a:67:0f:c5:fe:2d:f6:50:a6:
de:13:ec:e8:bb:6c:23:1e:8b:11:13:71:08:57:f6:
84:99:db:80:a9:f7:4e:eb:66:7c:27:68:b6:86:1a:
b7:a9:d3:2b:ca:b0:41:95:ae:d8:c3:e5:e9:c2:59:
13:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:DD:FA:62:DA:7A:DC:90:5A:5C:3A:B8:11:A5:D2:16:43:1B:44:7E
X509v3 Authority Key Identifier:
keyid:E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/VN36Ytp63JBaXDq4EaXSFkMbRH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.215.65.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:0a:8e:8d:4a:e8:4d:a1:17:cf:60:3f:c0:9a:a9:12:b2:92:
15:b6:4f:47:93:f2:44:54:9e:76:a0:f9:ad:84:84:dd:1d:1f:
95:a3:0c:29:04:1c:cc:ad:97:e3:7e:d9:88:d0:ab:2b:2b:2e:
90:a5:07:34:9f:61:50:0a:9f:0f:b1:d9:81:f7:fa:96:a5:1e:
db:54:d1:e4:5a:3a:8b:02:64:96:42:56:c1:8c:d5:d4:7d:d0:
69:ca:bd:e3:03:cc:14:3b:06:21:7f:7e:47:60:8b:21:06:25:
36:78:1e:e2:ee:8c:77:93:25:8e:19:2b:7d:84:75:ea:cf:b0:
7a:7e:b2:75:b5:18:e0:0d:17:a2:40:9f:0d:a6:06:a5:eb:4c:
58:1c:15:7d:67:62:75:41:3a:9e:73:94:61:90:94:56:bf:08:
64:3e:58:8d:aa:58:e7:a1:ac:82:d4:94:07:e7:2b:00:e0:85:
5c:7b:76:25:ff:3f:19:0a:42:26:41:68:5a:32:ff:4f:f0:d7:
0d:49:bc:4b:6f:f3:d1:62:15:95:06:1d:86:19:a4:85:99:39:
04:1a:25:77:a5:93:8b:40:e6:c5:11:8f:78:06:ae:ea:27:cf:
66:20:f3:f9:48:c7:8b:47:9f:26:d7:bc:e7:d4:86:32:fc:79:
0d:15:7c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:44:48 2025 by rpki-client