Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/29c524-c98e-4320-8274-521171b7d268/1/VQhErn7RGRyIB9bzOfqBB541HX4.roa
File: VQhErn7RGRyIB9bzOfqBB541HX4.roa (raw, json)
Hash identifier: oNpbo6ByjPywQ+J9PEc1zbwi0+az4/fTEZ8UwKaZ3ko=
Subject key identifier: 55:08:44:AE:7E:D1:19:1C:88:07:D6:F3:39:FA:81:07:9E:35:1D:7E
Certificate issuer: /CN=0c985eb8d94b9fa11422d782f314ff6e2ded07ad
Certificate serial: 01872DE4848376E3A1C5EAF0841D6FCCA09D
Authority key identifier: 0C:98:5E:B8:D9:4B:9F:A1:14:22:D7:82:F3:14:FF:6E:2D:ED:07:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJheuNlLn6EUIteC8xT_bi3tB60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/29c524-c98e-4320-8274-521171b7d268/1/VQhErn7RGRyIB9bzOfqBB541HX4.roa
Signing time: Wed 29 Mar 2023 15:02:43 +0000
ROA not before: Wed 29 Mar 2023 15:02:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206505
IP address blocks: 213.232.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:2d:e4:84:83:76:e3:a1:c5:ea:f0:84:1d:6f:cc:a0:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c985eb8d94b9fa11422d782f314ff6e2ded07ad
Validity
Not Before: Mar 29 15:02:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=550844ae7ed1191c8807d6f339fa81079e351d7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:21:9a:74:5a:83:95:69:77:02:b1:df:6d:74:
de:8f:eb:41:d3:3c:b0:82:f0:d3:da:2b:e1:d3:6e:
70:79:72:3d:3f:12:13:d9:fe:1b:99:73:31:27:7c:
1b:f2:10:57:4d:f9:38:de:98:55:a9:43:50:da:9e:
77:ce:1c:18:85:47:2b:b2:b9:0e:e4:9c:6a:7a:f9:
7a:ae:4b:9b:0c:eb:33:5c:63:8d:5e:b2:87:ee:de:
59:43:f2:d4:ef:be:6a:2c:bd:49:93:cb:03:6d:15:
80:74:fe:60:96:be:17:1f:ea:01:4b:ca:21:3c:b8:
e2:fa:0c:21:29:43:72:07:d0:72:f7:0d:c5:4e:54:
3a:c6:53:8b:63:d6:03:37:80:88:45:e3:0a:9f:4b:
69:50:2c:3a:84:fd:2f:ad:97:de:be:58:a7:88:d3:
73:b6:17:e2:5d:cb:38:ad:b8:53:17:88:6a:a6:22:
53:48:8c:4d:22:56:8d:63:ca:c4:57:c1:1c:96:61:
2a:c1:02:13:e3:2c:c3:9a:45:c8:fb:a8:cc:7f:5d:
82:cb:79:2b:7b:92:9a:e5:a2:e3:4b:5b:e5:6d:10:
31:47:78:48:d5:30:fe:fc:ed:80:67:8f:a4:79:b9:
9b:2d:77:24:3a:5b:7d:25:23:35:97:2d:46:34:e7:
20:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:08:44:AE:7E:D1:19:1C:88:07:D6:F3:39:FA:81:07:9E:35:1D:7E
X509v3 Authority Key Identifier:
keyid:0C:98:5E:B8:D9:4B:9F:A1:14:22:D7:82:F3:14:FF:6E:2D:ED:07:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJheuNlLn6EUIteC8xT_bi3tB60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/29c524-c98e-4320-8274-521171b7d268/1/VQhErn7RGRyIB9bzOfqBB541HX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/29c524-c98e-4320-8274-521171b7d268/1/DJheuNlLn6EUIteC8xT_bi3tB60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.232.239.0/24
Signature Algorithm: sha256WithRSAEncryption
76:d7:64:5f:88:5d:80:9f:2b:0d:35:90:68:33:a4:94:eb:b5:
64:d0:a1:75:07:fd:32:e8:b6:22:65:56:dd:a2:86:de:4d:ea:
ac:ea:91:d8:2c:32:a0:54:f8:56:d5:1b:af:d3:87:0a:cd:b4:
e4:21:0e:61:7f:65:6a:58:04:98:39:05:26:fa:cb:72:f9:d2:
75:24:bb:ae:51:41:1b:34:6d:58:8c:8e:e4:c1:e6:67:82:22:
03:06:b7:76:df:00:7a:b5:2c:53:14:2e:2c:c4:7c:bc:93:71:
7c:d4:ef:83:ac:81:8f:a0:cd:51:27:02:b7:6e:f6:a9:fc:96:
a0:7d:c0:65:b3:79:05:7b:23:d8:36:a9:d9:38:3b:fc:0d:8d:
b2:10:5d:b6:46:d7:23:f2:e1:48:87:66:de:dc:00:11:a8:70:
d0:5c:e5:1d:e1:61:9a:84:4f:e1:29:17:76:3d:ef:77:d5:bd:
15:97:62:ee:92:3c:bb:49:f9:3f:5d:cb:3a:82:3a:63:f1:bd:
93:0d:48:75:83:dc:39:a0:b7:b6:3a:d6:b5:27:78:0f:1c:11:
e9:5b:97:b3:5c:8c:1a:96:67:4e:74:58:95:35:cd:80:db:cb:
f0:fa:f3:3a:b3:fc:81:33:2a:90:54:e5:88:96:06:1b:21:b9:
f4:b7:69:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:42 2025 by rpki-client