Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/cf2d83-6f29-432f-82e4-00d4c3b3fbf9/1/VLL51nShICnZgoDU06S2FcwyfPY.roa
File: VLL51nShICnZgoDU06S2FcwyfPY.roa (raw, json)
Hash identifier: +8HLN4klK3sccvQB89cslqi33FAMnsdCQAsfzlC4nMQ=
Subject key identifier: 54:B2:F9:D6:74:A1:20:29:D9:82:80:D4:D3:A4:B6:15:CC:32:7C:F6
Certificate issuer: /CN=a114ffd8531b239e6f0f73e6f6de63845145facd
Certificate serial: 09669AC6
Authority key identifier: A1:14:FF:D8:53:1B:23:9E:6F:0F:73:E6:F6:DE:63:84:51:45:FA:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oRT_2FMbI55vD3Pm9t5jhFFF-s0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/cf2d83-6f29-432f-82e4-00d4c3b3fbf9/1/VLL51nShICnZgoDU06S2FcwyfPY.roa
Signing time: Sat 01 Jan 2022 09:02:53 +0000
ROA not before: Sat 01 Jan 2022 09:02:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50941
IP address blocks: 185.88.132.0/24 maxlen: 24
185.88.135.0/24 maxlen: 24
37.1.145.0/24 maxlen: 24
37.1.151.0/24 maxlen: 24
37.1.147.0/24 maxlen: 24
37.1.146.0/24 maxlen: 24
178.18.192.0/24 maxlen: 24
178.18.195.0/24 maxlen: 24
178.18.194.0/24 maxlen: 24
178.18.193.0/24 maxlen: 24
178.18.199.0/24 maxlen: 24
178.18.198.0/24 maxlen: 24
178.18.197.0/24 maxlen: 24
178.18.196.0/24 maxlen: 24
178.18.202.0/24 maxlen: 24
178.18.201.0/24 maxlen: 24
178.18.200.0/24 maxlen: 24
178.18.206.0/24 maxlen: 24
178.18.205.0/24 maxlen: 24
178.18.204.0/24 maxlen: 24
178.18.203.0/24 maxlen: 24
178.18.207.0/24 maxlen: 24
185.21.4.0/24 maxlen: 24
185.21.5.0/24 maxlen: 24
185.21.7.0/24 maxlen: 24
185.21.6.0/24 maxlen: 24
2a00:54a0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157719238 (0x9669ac6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a114ffd8531b239e6f0f73e6f6de63845145facd
Validity
Not Before: Jan 1 09:02:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=54b2f9d674a12029d98280d4d3a4b615cc327cf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:74:cf:fc:a9:dc:7a:00:e5:8b:e3:10:90:18:
45:28:5e:64:fb:c7:8b:cb:94:8b:62:3b:03:d5:8a:
6b:5f:a5:1e:e6:ac:88:e7:22:90:60:d7:f0:8e:51:
a1:eb:b7:7e:5b:9e:99:23:a6:e9:69:23:26:c4:b1:
04:3b:73:8e:70:ae:79:78:49:33:49:b2:fa:4a:01:
6e:07:52:9e:93:71:a3:84:66:02:11:b7:19:78:c9:
92:e8:d6:5c:f0:2b:6f:9b:2d:c8:73:0a:b8:2d:3d:
22:cb:8a:e1:c9:a1:2c:e8:1a:4d:82:10:dc:5f:4a:
05:5d:03:23:4d:65:e2:01:e1:74:2d:33:bc:d4:c4:
d4:f3:ed:42:b7:bc:96:06:69:6d:3e:17:6a:ab:ee:
cf:e3:de:18:92:46:8a:a4:aa:25:77:13:e9:6b:7f:
5f:6e:75:a7:d0:e3:f6:48:82:0b:06:15:a5:55:ce:
50:c9:2c:5e:62:07:ea:05:98:0b:b5:2b:b4:88:63:
eb:71:95:38:b9:41:e9:20:29:95:90:d2:b4:2b:90:
65:30:f6:89:dc:64:47:22:61:c5:04:05:34:07:df:
d2:29:62:b3:96:36:6c:3a:5b:89:95:ec:a1:e2:dd:
7f:0f:58:38:d2:22:80:0f:ab:70:8c:9b:4e:27:01:
df:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:B2:F9:D6:74:A1:20:29:D9:82:80:D4:D3:A4:B6:15:CC:32:7C:F6
X509v3 Authority Key Identifier:
keyid:A1:14:FF:D8:53:1B:23:9E:6F:0F:73:E6:F6:DE:63:84:51:45:FA:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oRT_2FMbI55vD3Pm9t5jhFFF-s0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cf2d83-6f29-432f-82e4-00d4c3b3fbf9/1/VLL51nShICnZgoDU06S2FcwyfPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cf2d83-6f29-432f-82e4-00d4c3b3fbf9/1/oRT_2FMbI55vD3Pm9t5jhFFF-s0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.1.145.0-37.1.147.255
37.1.151.0/24
178.18.192.0/20
185.21.4.0/22
185.88.132.0/24
185.88.135.0/24
IPv6:
2a00:54a0::/32
Signature Algorithm: sha256WithRSAEncryption
77:52:54:b3:7e:ea:2b:fb:3e:54:85:2c:4b:06:e5:c3:75:b5:
bb:87:be:a5:e8:fe:49:d6:7f:69:e5:92:90:c1:f7:d8:dd:26:
0a:43:4b:d0:97:a6:cd:4c:d5:e3:79:b1:cd:51:29:07:a8:8f:
75:8e:e7:4a:3e:29:39:da:b0:4a:de:35:9a:c7:e6:e0:ee:70:
87:53:1b:4b:a0:38:d3:13:c7:83:d9:b0:a9:aa:2a:97:cb:15:
f7:0a:a4:eb:25:7f:d1:1f:14:29:f4:d6:91:65:90:63:fc:66:
58:41:6f:ff:bf:46:91:51:e4:21:d5:af:af:53:77:63:18:55:
48:33:ba:c4:04:3b:df:03:cf:d5:6f:05:b7:ee:76:bb:a8:d1:
dc:2f:70:c3:51:e6:e6:ff:ba:93:8d:2d:37:85:51:bf:93:70:
67:be:bd:2c:ee:68:bd:51:b7:74:26:81:bb:39:2f:6d:64:81:
d8:e7:fc:42:ed:e3:04:8c:00:14:78:af:18:f4:84:78:cb:31:
36:9c:ff:26:df:3f:88:8b:12:de:97:3d:7d:57:fe:d7:e7:55:
00:1e:aa:0b:d2:f1:7c:5f:e3:4a:90:b4:4e:34:9c:96:dd:44:
3c:e1:5f:b5:a5:dc:62:ce:3e:cd:36:55:c3:5a:dd:7b:81:68:
b7:2d:ba:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:08 2024 by rpki-client on console-fra.rpki-client.org