Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/9ba66c-bee7-44c9-82e5-d95a5155dd02/1/VipxKZ7b1dh4kFO3DpRFjRhKFrs.roa
File: VipxKZ7b1dh4kFO3DpRFjRhKFrs.roa (raw, json)
Hash identifier: 2U6Mlp4w2R/RiSH3WBnEz6zd6Fzg1ACe0N7iq/AMz2Q=
Subject key identifier: 56:2A:71:29:9E:DB:D5:D8:78:90:53:B7:0E:94:45:8D:18:4A:16:BB
Certificate issuer: /CN=11466326406436e31478b7bca2dda16c96d5a964
Certificate serial: 01872D7B03A593BB5B50D56C4C836FF3D986
Authority key identifier: 11:46:63:26:40:64:36:E3:14:78:B7:BC:A2:DD:A1:6C:96:D5:A9:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EUZjJkBkNuMUeLe8ot2hbJbVqWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/9ba66c-bee7-44c9-82e5-d95a5155dd02/1/VipxKZ7b1dh4kFO3DpRFjRhKFrs.roa
Signing time: Wed 29 Mar 2023 13:07:29 +0000
ROA not before: Wed 29 Mar 2023 13:07:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34534
IP address blocks: 185.142.53.0/24 maxlen: 24
193.177.182.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:2d:7b:03:a5:93:bb:5b:50:d5:6c:4c:83:6f:f3:d9:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11466326406436e31478b7bca2dda16c96d5a964
Validity
Not Before: Mar 29 13:07:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=562a71299edbd5d8789053b70e94458d184a16bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:5f:6c:ed:e3:bd:ef:52:18:46:c9:ac:fa:2f:
e1:c7:2a:07:ba:d6:51:15:02:9a:23:b9:80:f2:36:
e6:6a:3a:04:3a:33:bb:ba:fd:b9:db:93:3a:5f:f3:
32:50:e3:f7:9b:55:e1:52:db:e7:0a:40:68:5e:ac:
27:b6:6b:da:a4:51:d0:93:f9:d3:65:5b:6e:16:ab:
e7:e8:e3:32:9e:46:58:ef:65:e9:a6:18:2d:13:a6:
1e:79:0c:4d:82:9d:4e:95:7f:6c:8f:be:e2:46:b9:
94:3c:a3:f7:ef:85:5e:0b:bf:ce:ee:ec:8e:00:fb:
2c:b8:ed:a7:7e:a9:cf:39:e7:48:d5:98:a4:a2:5e:
20:45:26:73:de:89:82:c7:48:9d:82:e4:76:2f:2e:
a2:df:01:48:71:65:98:70:8f:2b:61:ab:96:82:cd:
9c:b3:20:7e:49:32:7f:46:c2:c1:50:2c:61:13:91:
1f:da:58:d2:e1:e9:a7:c5:e4:bb:ba:0c:70:64:85:
82:d9:32:23:0b:2f:ab:70:e2:65:51:db:a3:bd:be:
a7:7a:3e:a1:e7:59:c1:fa:b9:15:b1:65:a2:6c:44:
aa:52:24:18:66:03:6a:a2:41:da:3c:c2:ed:f8:e6:
cd:4b:d0:2c:16:6c:8c:88:be:87:d2:32:cf:50:3c:
11:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:2A:71:29:9E:DB:D5:D8:78:90:53:B7:0E:94:45:8D:18:4A:16:BB
X509v3 Authority Key Identifier:
keyid:11:46:63:26:40:64:36:E3:14:78:B7:BC:A2:DD:A1:6C:96:D5:A9:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EUZjJkBkNuMUeLe8ot2hbJbVqWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/9ba66c-bee7-44c9-82e5-d95a5155dd02/1/VipxKZ7b1dh4kFO3DpRFjRhKFrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/9ba66c-bee7-44c9-82e5-d95a5155dd02/1/EUZjJkBkNuMUeLe8ot2hbJbVqWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.142.53.0/24
193.177.182.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:0e:ab:74:33:e1:88:d2:b8:dc:5a:91:2d:17:31:e7:68:9e:
60:03:1a:4d:83:4f:3a:7b:00:3b:d2:6a:e3:d1:70:e8:93:8e:
48:fa:17:ba:3a:ae:a7:0c:44:cc:65:47:19:3b:d7:05:b7:a5:
59:72:95:8c:bc:b1:c2:c0:9c:98:84:13:b7:02:a8:7c:ff:ac:
61:e9:3b:71:6d:d2:f5:5a:88:a4:b6:7b:ad:a1:6b:42:e2:84:
c6:d5:e7:24:36:49:33:4d:b5:2a:c1:0c:dc:54:37:e4:de:93:
e6:48:45:09:7e:e1:d1:ce:e4:4e:3f:a4:35:c5:58:b1:7f:3a:
a5:20:38:b0:f6:da:75:74:7c:87:4a:29:ac:34:9f:f2:6d:a4:
45:dd:66:c6:29:e0:41:ab:7a:26:2d:80:9e:fd:8d:c2:98:45:
77:18:4e:62:7d:c1:18:d7:09:03:8c:11:0d:a8:33:10:0f:9b:
40:c6:1a:a6:55:76:ab:83:eb:de:24:78:62:71:8f:a2:01:72:
9e:7b:91:6a:f4:ac:70:9a:e3:39:4f:7b:23:a6:c9:82:a4:db:
51:8e:cf:6d:84:9e:88:0e:2a:cb:de:7d:59:ce:56:62:cc:1b:
4a:f0:e4:48:59:48:15:0c:b2:4d:a7:b8:a1:d6:6a:0a:34:e9:
d5:bf:3c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:07:11 2025 by rpki-client