Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/vRQW82NzcVpqBFIgvhmlAXGyjY8.roa
File: vRQW82NzcVpqBFIgvhmlAXGyjY8.roa (raw, json)
Hash identifier: lih0RM+Yt8wwJsG7WYLqoovOjp+Z54083Pap6iGCMnY=
Subject key identifier: BD:14:16:F3:63:73:71:5A:6A:04:52:20:BE:19:A5:01:71:B2:8D:8F
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01954BF5E1717F9F05B77BF4CC827DE3F9EC
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/vRQW82NzcVpqBFIgvhmlAXGyjY8.roa
Signing time: Fri 28 Feb 2025 09:49:20 +0000
ROA not before: Fri 28 Feb 2025 09:49:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60149
IP address blocks: 86.107.73.0/24 maxlen: 24
93.113.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:4b:f5:e1:71:7f:9f:05:b7:7b:f4:cc:82:7d:e3:f9:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Feb 28 09:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bd1416f36373715a6a045220be19a50171b28d8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:82:ad:f4:a0:cb:b4:82:b9:86:bd:2f:dd:fe:
a6:69:66:28:a3:fe:e9:5e:58:66:cf:41:33:8c:62:
61:d1:dc:4d:43:db:c8:74:03:ce:ad:70:6d:8b:a5:
5b:49:28:ff:9a:68:15:91:c3:b4:93:b5:9d:03:0d:
d8:43:9a:3b:10:30:15:9f:10:fe:dd:89:f3:97:fa:
88:2d:dd:10:25:a4:8f:ee:5c:bc:fe:1a:48:fe:a2:
77:49:11:9a:ce:2f:4e:ec:78:d8:48:ca:d6:ec:f6:
0c:b8:4b:fa:31:9c:11:54:68:69:83:0a:10:1b:d0:
4b:66:23:5f:b4:c9:af:12:a9:53:df:03:27:8f:27:
f5:c5:ca:25:a1:3f:1b:7e:ac:cc:4c:4f:f6:cc:f1:
76:20:18:ac:26:ef:3a:7b:e0:5e:d7:e0:c6:eb:0e:
45:9b:15:b2:a8:3d:38:37:6d:66:db:0f:6a:35:d7:
7c:1b:d0:11:a6:71:b6:f4:83:d4:23:61:62:a3:b2:
57:15:a9:e7:ec:b4:98:34:8f:1a:cd:41:31:d5:0c:
03:50:d7:90:d1:af:a4:5e:e5:4e:9f:ee:9f:2b:c4:
e0:59:e1:95:75:6b:78:40:2d:88:8d:03:13:be:89:
3e:af:c3:b6:bd:ba:ec:e7:a2:bf:b5:2d:a5:5a:e5:
65:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:14:16:F3:63:73:71:5A:6A:04:52:20:BE:19:A5:01:71:B2:8D:8F
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/vRQW82NzcVpqBFIgvhmlAXGyjY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.107.73.0/24
93.113.126.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:84:14:1f:67:01:79:ec:b6:d2:15:79:ec:d5:ec:17:b2:29:
ef:e6:5b:d4:95:8b:33:c6:f3:ee:d8:a9:cf:a3:5b:13:9a:22:
1e:cd:5e:41:bd:4a:40:12:ac:5e:5d:d9:ff:bf:ad:93:98:ca:
d4:5a:0c:8a:5b:88:b2:11:bf:04:94:5b:b8:f7:72:1e:53:a2:
20:3a:cd:16:92:21:15:42:84:8e:91:c1:8f:12:ce:c3:00:db:
a2:eb:14:e8:b6:2c:d5:6e:fe:3e:2d:d0:3d:91:dc:b2:49:46:
39:a2:43:16:6b:d3:a9:aa:3d:cd:19:45:07:c5:77:cc:11:96:
09:53:61:b3:fb:b6:b6:77:31:ae:06:91:89:3f:30:d0:1a:b4:
5b:6d:a0:42:0a:5f:3d:4a:f3:70:c0:56:91:69:5f:bb:32:89:
80:d5:26:a4:36:64:5e:53:21:f0:9d:66:e3:47:fc:29:82:91:
7c:32:62:1e:af:6f:48:bb:7b:e4:15:70:34:4e:b1:00:bb:09:
f9:bc:fd:3e:88:d3:d6:58:21:ac:cf:bd:9f:7a:37:d6:02:44:
40:31:0a:5a:8e:53:db:9b:1c:32:81:04:ce:b9:c7:a1:4b:e1:
20:82:5f:de:0f:cd:72:6f:7e:f4:5e:b4:b0:07:9b:1e:b0:ab:
89:cb:80:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:00:10 2025 by rpki-client