Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/VP9UpkHXpmaL0wfkrIWdevHkrYs.roa
File: VP9UpkHXpmaL0wfkrIWdevHkrYs.roa (raw, json)
Hash identifier: CXd+mX9s6NaxDGtX1uChJA0ovZXaMqipImkIUc51Q0c=
Subject key identifier: 54:FF:54:A6:41:D7:A6:66:8B:D3:07:E4:AC:85:9D:7A:F1:E4:AD:8B
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01942369B60D0A6AC595A109581F3961FB24
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/VP9UpkHXpmaL0wfkrIWdevHkrYs.roa
Signing time: Wed 01 Jan 2025 19:48:37 +0000
ROA not before: Wed 01 Jan 2025 19:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62162
IP address blocks: 85.204.43.0/24 maxlen: 24
85.204.73.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:b6:0d:0a:6a:c5:95:a1:09:58:1f:39:61:fb:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 1 19:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=54ff54a641d7a6668bd307e4ac859d7af1e4ad8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:01:b2:f3:16:a3:76:17:b0:17:68:12:04:97:
7d:c8:20:a2:3f:2c:8d:d4:33:ba:6e:af:fa:6e:c5:
f0:c6:9f:7d:ee:80:b9:35:ab:46:32:26:b7:00:3c:
62:f3:fa:26:0e:8a:6d:c7:d1:da:01:27:ea:ee:65:
75:48:a1:a4:0d:8b:4b:d5:35:13:02:f5:36:e1:f5:
f9:e5:96:9f:be:f8:e6:a5:cf:6a:d0:d5:1f:7a:4e:
ab:fd:49:b3:25:e9:5e:0f:c9:71:ff:c8:f9:ea:72:
19:74:a9:3a:04:90:2c:a2:b6:6d:e3:fb:55:6f:cb:
be:08:3f:3c:ed:18:a1:81:44:7f:9e:81:28:57:ee:
c7:3c:ae:e7:4e:34:29:35:f1:03:a3:9f:cc:dc:48:
17:25:06:61:30:e4:3b:f4:99:c2:f3:78:fe:4b:8a:
2c:69:2f:69:d2:c6:84:85:aa:ca:d4:eb:d2:1a:ed:
ca:1e:99:79:0d:f9:0d:88:a2:d2:bd:73:d7:ce:e0:
49:5d:36:a4:a8:2f:ed:ea:a3:d4:46:bf:9b:93:56:
36:93:d3:7d:f1:53:95:22:ba:3a:74:87:4b:7c:a3:
77:02:e3:2a:60:18:0c:6d:54:75:b6:23:6e:b8:d3:
97:5a:bd:e8:82:4e:6f:72:dc:f6:bb:7d:e5:f8:fb:
20:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:FF:54:A6:41:D7:A6:66:8B:D3:07:E4:AC:85:9D:7A:F1:E4:AD:8B
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/VP9UpkHXpmaL0wfkrIWdevHkrYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.43.0/24
85.204.73.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:30:af:08:65:b6:7e:81:ea:1a:b7:02:c5:82:41:4b:32:99:
b3:f2:c6:f1:83:d0:41:7f:d1:bd:b2:34:8d:31:21:69:01:41:
c6:10:ab:6e:b2:19:e3:fe:a6:2d:13:65:c8:43:6c:bd:36:19:
8e:61:c5:72:c0:ae:f8:5d:f4:c8:0a:17:70:0e:e4:f2:5b:e8:
3c:e3:d3:8d:88:99:b5:40:fb:cd:e3:7d:ad:fe:7e:dc:f0:c1:
e6:af:0a:ab:10:4d:78:16:4d:38:8b:f6:d5:9b:a6:ea:83:14:
93:db:58:2f:b0:6e:ce:12:4f:f9:94:ab:d3:c7:54:43:51:fe:
82:65:cc:17:9f:3e:5b:10:de:ab:e5:d2:6a:f6:2c:d9:55:3f:
39:5e:f3:10:a6:e1:c9:ce:16:e5:6d:ac:57:aa:76:f6:c6:4a:
98:2a:5c:2e:54:6d:1c:83:34:8e:d6:35:8f:02:b8:06:b1:7b:
3d:02:af:c0:66:fe:ca:4e:0b:a4:1e:c7:f5:3a:f2:65:69:96:
d2:08:3f:cf:d7:20:26:af:2f:f3:f0:93:85:bc:fe:2a:70:6e:
0b:dd:5f:a6:9b:10:42:a5:c4:b2:7d:ba:41:38:13:79:ff:c7:
5a:e8:d9:36:04:2a:79:90:2c:a4:57:74:6c:bb:50:9e:a0:9f:
36:41:dc:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:48 2025 by rpki-client