Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/Vd1yJo_vZwEyEASDEDR2wKA2BpM.roa
File: Vd1yJo_vZwEyEASDEDR2wKA2BpM.roa (raw, json)
Hash identifier: j6/TOZztFKy41z/68gEMZa5/gENqUGIFDyoVkAu7nj8=
Subject key identifier: 55:DD:72:26:8F:EF:67:01:32:10:04:83:10:34:76:C0:A0:36:06:93
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 018CC94E3791D271ED6D7BD82CB07DF87579
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/Vd1yJo_vZwEyEASDEDR2wKA2BpM.roa
Signing time: Tue 02 Jan 2024 08:33:15 +0000
ROA not before: Tue 02 Jan 2024 08:33:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49011
IP address blocks: 95.174.160.0/19 maxlen: 19
178.19.0.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:37:91:d2:71:ed:6d:7b:d8:2c:b0:7d:f8:75:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Jan 2 08:33:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=55dd72268fef670132100483103476c0a0360693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ea:c5:7c:0f:c7:cb:e2:b1:fd:52:c7:a6:9d:
cb:4e:57:aa:a8:21:c4:ce:1c:72:1c:dd:8e:59:0c:
a3:1c:9c:b0:12:50:42:07:3b:80:57:22:c0:2e:c7:
0a:67:f4:f7:78:dd:89:32:11:89:68:87:c2:98:86:
b2:e0:ec:b0:31:2b:b1:05:00:2d:cf:72:2a:f6:1c:
2f:e5:f8:34:a2:0d:4b:fd:83:cb:fc:79:72:5b:98:
82:f1:72:e6:19:a8:3a:f8:ea:d8:4d:e2:c1:0c:2e:
18:8d:b2:f7:50:5c:3c:04:1d:d9:9d:ad:2f:43:65:
3c:00:ef:e1:ef:20:30:12:6e:27:74:85:7e:dd:95:
20:73:9e:d8:82:b3:b0:a5:a9:1a:5b:76:6a:8a:ec:
94:61:23:02:c9:97:f6:16:df:6d:92:55:55:0b:53:
87:18:72:f2:f3:0b:43:e0:e0:50:e9:26:84:49:46:
53:2c:ce:87:c4:d9:c8:07:d1:46:91:e7:6e:b0:11:
b5:5c:a1:ba:06:81:1e:9b:9f:11:64:ed:99:cb:d9:
2b:21:bd:99:cd:16:9b:7d:77:47:00:4e:ca:cb:c9:
27:f6:7f:ea:b3:2d:94:ef:5b:c0:b4:b3:29:d3:71:
8f:00:4b:de:20:35:66:58:51:4d:21:f3:c6:68:0c:
82:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:DD:72:26:8F:EF:67:01:32:10:04:83:10:34:76:C0:A0:36:06:93
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/Vd1yJo_vZwEyEASDEDR2wKA2BpM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.174.160.0/19
178.19.0.0/20
Signature Algorithm: sha256WithRSAEncryption
7d:1a:bc:62:40:3f:b8:a8:57:52:61:e3:21:bd:72:8e:36:fe:
6e:ca:71:ec:28:8a:e7:7e:a0:a2:85:93:12:16:d6:bc:ac:33:
9e:c3:43:61:10:50:72:ca:f6:6a:ec:40:08:9f:f1:cb:4f:43:
fc:a4:42:be:2f:b5:b1:0f:a6:5d:6c:b6:b2:11:39:2a:62:5f:
a6:a5:2c:48:41:35:b5:5e:a9:28:aa:f0:fd:22:11:34:25:57:
af:9a:fd:db:3e:2c:a4:d4:46:14:19:fa:9e:50:ac:0c:5a:0e:
d0:01:e9:bd:c3:4d:97:17:28:ec:2f:97:f5:6c:4c:f4:08:5e:
e1:fb:ab:2b:34:dd:76:0c:8a:83:7b:49:fc:ac:4e:d6:f6:2c:
e2:ee:0d:a2:e9:8d:2f:89:4e:9c:65:cc:49:59:49:b8:98:4a:
24:a6:3d:5f:11:f3:5e:ee:e4:58:96:2f:83:0f:be:98:11:2b:
18:7d:35:34:17:aa:1f:db:b2:f2:55:45:27:66:f9:3c:c2:9d:
c8:c9:00:91:4f:10:2e:9e:2d:18:55:6b:12:67:6e:02:57:89:
55:ca:b2:e9:60:00:34:78:35:06:55:28:28:7a:e6:9d:c0:fa:
dd:d1:f3:39:62:b8:c8:d9:ff:2d:c3:7f:f7:79:8d:f0:58:a1:
8a:63:d4:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:16:45 2025 by rpki-client