Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/198df7-7992-44df-a6ca-bec0e9ee4a25/1/VGvIauwEJlhPAyNQnz5hs7iUEKA.roa
File: VGvIauwEJlhPAyNQnz5hs7iUEKA.roa (raw, json)
Hash identifier: 6aw37DlZQX1bIGCwjjujRonXe2PgPL/f7a5gfa1TvUI=
Subject key identifier: 54:6B:C8:6A:EC:04:26:58:4F:03:23:50:9F:3E:61:B3:B8:94:10:A0
Certificate issuer: /CN=6c453c091f6c0ca4b02b1c4ca17bb65d1de16895
Certificate serial: 018CC500BFDA4F30C3B224702F65520D9A45
Authority key identifier: 6C:45:3C:09:1F:6C:0C:A4:B0:2B:1C:4C:A1:7B:B6:5D:1D:E1:68:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEU8CR9sDKSwKxxMoXu2XR3haJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/198df7-7992-44df-a6ca-bec0e9ee4a25/1/VGvIauwEJlhPAyNQnz5hs7iUEKA.roa
Signing time: Mon 01 Jan 2024 12:30:09 +0000
ROA not before: Mon 01 Jan 2024 12:30:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50925
IP address blocks: 185.188.236.0/24 maxlen: 24
185.188.239.0/24 maxlen: 24
185.188.238.0/24 maxlen: 24
185.188.237.0/24 maxlen: 24
185.188.238.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:bf:da:4f:30:c3:b2:24:70:2f:65:52:0d:9a:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c453c091f6c0ca4b02b1c4ca17bb65d1de16895
Validity
Not Before: Jan 1 12:30:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=546bc86aec0426584f0323509f3e61b3b89410a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3f:de:8b:e2:62:b3:52:00:81:f6:b0:5e:ad:
36:31:9f:c5:ad:d4:3c:5d:c2:4c:ba:4b:83:77:d5:
2c:52:a5:6c:c4:63:df:cd:92:24:d4:03:3f:ad:83:
ce:2f:26:9d:98:7e:a8:e9:79:83:80:be:42:e9:c8:
cc:70:3c:37:47:fb:31:aa:63:ea:41:40:0f:ef:fb:
3b:82:71:72:5d:b7:17:de:45:5c:25:b0:2e:f3:66:
ad:fe:2a:a2:e3:19:7e:8e:f2:b0:6d:db:68:07:9d:
1b:ac:47:56:72:a0:a0:03:d4:50:5c:52:36:91:54:
35:8c:24:eb:52:1f:ea:2e:b6:56:42:83:4a:30:d8:
a4:0f:bd:c4:67:e9:ff:38:1e:30:91:46:9d:03:6c:
4a:23:1a:8b:85:46:7b:56:64:36:a0:d4:d4:09:9c:
8e:c1:51:60:65:40:13:84:a2:bd:d8:1a:80:3b:3c:
b0:e5:bb:80:6f:e9:a9:01:2d:74:a3:45:1d:0d:ef:
d8:e5:82:1c:0b:d4:65:5f:6f:c6:ee:4a:90:10:32:
62:66:bc:a6:37:03:20:e3:26:3b:77:71:82:f8:90:
2e:08:bf:8a:6c:cf:c6:d3:52:19:d3:33:74:b0:7f:
10:35:83:b9:0b:48:b2:ba:ed:5a:0d:13:4b:fc:bd:
a3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:6B:C8:6A:EC:04:26:58:4F:03:23:50:9F:3E:61:B3:B8:94:10:A0
X509v3 Authority Key Identifier:
keyid:6C:45:3C:09:1F:6C:0C:A4:B0:2B:1C:4C:A1:7B:B6:5D:1D:E1:68:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEU8CR9sDKSwKxxMoXu2XR3haJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/198df7-7992-44df-a6ca-bec0e9ee4a25/1/VGvIauwEJlhPAyNQnz5hs7iUEKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/198df7-7992-44df-a6ca-bec0e9ee4a25/1/bEU8CR9sDKSwKxxMoXu2XR3haJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.236.0/22
Signature Algorithm: sha256WithRSAEncryption
ae:d0:29:c1:d2:da:51:21:6b:f1:73:a9:63:c6:af:d0:5b:c8:
7e:16:29:b4:5b:79:14:aa:11:74:6d:e7:54:09:69:32:0a:75:
57:52:1b:24:f4:e2:18:3e:d3:4f:73:d7:3b:b9:2f:fb:b4:28:
c2:cf:8e:58:ce:82:03:58:49:0d:de:ee:aa:9b:55:35:81:7d:
d5:a2:93:12:85:3e:a2:dd:a1:b9:f1:6e:18:58:c0:f6:0b:9c:
a2:c2:bd:36:66:de:26:5e:76:62:6c:c9:13:c3:ad:4e:91:a4:
12:3c:37:2c:29:59:2a:00:06:fe:19:a5:54:f2:a3:8a:27:0e:
82:44:a8:0c:f5:4e:55:ea:db:9b:20:22:45:37:32:8b:5e:a8:
54:39:75:a0:6b:fe:a8:55:93:4f:8b:f4:e1:86:91:e8:e3:00:
ad:70:77:d3:c5:99:f1:46:d8:fc:56:b5:38:bf:38:45:39:a9:
f9:94:40:d4:27:97:70:22:3a:e3:c3:96:c1:2c:bc:9b:6e:c3:
1d:4d:b3:0c:b5:70:4a:03:15:28:8e:5a:95:f8:b9:ac:6e:df:
69:ed:cf:a0:28:ad:e7:56:9b:fb:e6:64:f0:4e:7e:9d:51:2b:
f2:d8:c0:89:43:57:27:63:de:20:2c:ce:d1:8e:f2:e6:be:60:
c5:68:29:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:31:32 2025 by rpki-client