Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/a8a5f8-f018-40c9-bef7-34e9cc3d56d4/1/VhR6-WTquHS_2jnfD6TSdxmLio8.roa
File: VhR6-WTquHS_2jnfD6TSdxmLio8.roa (raw, json)
Hash identifier: W0QV+vJybHz/CWW9vsyk2vI5OGmRUVH5JOXqdf8uQIU=
Subject key identifier: 56:14:7A:F9:64:EA:B8:74:BF:DA:39:DF:0F:A4:D2:77:19:8B:8A:8F
Certificate issuer: /CN=84891f8db08c110d9b5b5eb4c5a9579e4133c816
Certificate serial: 019422FB866A40647EC1E4CEA55FF98544B4
Authority key identifier: 84:89:1F:8D:B0:8C:11:0D:9B:5B:5E:B4:C5:A9:57:9E:41:33:C8:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hIkfjbCMEQ2bW160xalXnkEzyBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/a8a5f8-f018-40c9-bef7-34e9cc3d56d4/1/VhR6-WTquHS_2jnfD6TSdxmLio8.roa
Signing time: Wed 01 Jan 2025 17:48:16 +0000
ROA not before: Wed 01 Jan 2025 17:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48955
IP address blocks: 193.33.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:86:6a:40:64:7e:c1:e4:ce:a5:5f:f9:85:44:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84891f8db08c110d9b5b5eb4c5a9579e4133c816
Validity
Not Before: Jan 1 17:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=56147af964eab874bfda39df0fa4d277198b8a8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:71:b4:51:48:89:ce:bd:e2:06:13:cd:7e:4c:
3f:ca:f8:e3:18:b5:3c:3b:ca:d3:9e:b3:0c:01:2f:
a5:f8:84:e6:70:1f:e4:b5:c5:04:6c:f2:6d:dd:d0:
72:ec:d2:1b:c2:e2:01:9d:cd:47:6e:7c:da:31:0d:
c1:17:db:2a:99:d4:2c:77:f8:f1:39:fa:5f:05:f8:
f5:72:82:21:45:4e:49:14:d1:3c:95:57:7f:c2:c8:
f9:43:f3:d0:74:af:b8:04:68:74:66:0c:a7:8a:74:
58:96:81:9b:ec:32:b1:29:62:59:f1:ea:64:9a:45:
c3:73:e6:b9:0f:48:18:58:0c:37:ac:ae:fb:99:d5:
49:e5:4f:d4:2b:81:a8:07:7e:dd:7b:96:c8:8d:9b:
fa:e0:6a:6d:fd:85:57:bb:19:6a:bf:89:dd:1d:aa:
88:57:21:97:f5:66:b8:b6:24:ae:69:e1:38:87:18:
46:6d:46:e2:37:47:11:3e:e8:04:9d:bf:ba:11:ff:
cc:61:78:4d:91:20:e9:88:ea:da:07:76:d2:74:f8:
83:c7:0b:66:35:e3:31:8b:96:e5:8b:09:40:60:17:
f5:ae:bc:20:4b:6b:d9:e4:26:3b:4a:2b:81:f7:29:
ef:a3:3a:d1:90:e8:f5:3f:f6:e5:ac:3f:b7:26:30:
25:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:14:7A:F9:64:EA:B8:74:BF:DA:39:DF:0F:A4:D2:77:19:8B:8A:8F
X509v3 Authority Key Identifier:
keyid:84:89:1F:8D:B0:8C:11:0D:9B:5B:5E:B4:C5:A9:57:9E:41:33:C8:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hIkfjbCMEQ2bW160xalXnkEzyBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/a8a5f8-f018-40c9-bef7-34e9cc3d56d4/1/VhR6-WTquHS_2jnfD6TSdxmLio8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/a8a5f8-f018-40c9-bef7-34e9cc3d56d4/1/hIkfjbCMEQ2bW160xalXnkEzyBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.33.105.0/24
Signature Algorithm: sha256WithRSAEncryption
31:c8:95:e9:0d:b0:04:cf:b6:78:3b:2c:01:70:af:f7:44:30:
ed:ef:2a:09:23:29:a4:da:fe:ad:98:3a:99:a8:57:60:8a:96:
22:eb:7e:8c:29:48:17:d7:70:4e:80:ac:0c:72:ca:66:fa:8e:
fe:36:7c:b2:c3:8e:2b:65:13:f0:45:ba:e9:89:24:31:84:78:
6e:ad:3d:27:ba:f7:4b:7e:77:91:17:f9:d6:5d:3d:0d:47:93:
56:c0:54:a6:ee:52:dd:6b:e5:7c:98:f5:14:31:b0:85:5b:e3:
09:ac:97:c1:13:47:db:d8:0b:93:6e:af:a3:29:f0:b6:bd:66:
3e:11:94:aa:a1:eb:5a:55:7a:3f:bc:e0:8d:b7:96:d5:1c:b6:
21:9b:db:2d:c0:b6:20:5f:97:13:b8:72:23:02:70:18:ab:73:
1c:64:fa:a5:e8:ca:29:87:04:7b:ce:b9:a6:7b:d4:00:49:96:
12:86:d1:af:47:02:5c:a7:cc:e9:0e:21:84:52:e4:c5:06:0b:
a7:00:ae:84:5a:52:21:1f:42:af:b8:22:c8:0c:88:52:0e:d1:
ab:f3:cb:80:e0:7b:a9:5c:67:31:69:98:42:8b:39:2a:b3:30:
44:1c:f9:c3:e8:03:aa:57:74:20:54:80:81:95:5d:54:ee:66:
fe:25:7d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:45:29 2025 by rpki-client