Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/VLgwDyLKenW1X-DL-NG-zbpxDVE.roa
File: VLgwDyLKenW1X-DL-NG-zbpxDVE.roa (raw, json)
Hash identifier: UY+vzhRUrEpWzh5w0f56Aba5vPDKpSWCiWc28SU8mcs=
Subject key identifier: 54:B8:30:0F:22:CA:7A:75:B5:5F:E0:CB:F8:D1:BE:CD:BA:71:0D:51
Certificate issuer: /CN=6085397f26a044caef6a6b669287331aa4d68645
Certificate serial: 0185723F7F52005F659335069BD1DAA70E4E
Authority key identifier: 60:85:39:7F:26:A0:44:CA:EF:6A:6B:66:92:87:33:1A:A4:D6:86:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YIU5fyagRMrvamtmkoczGqTWhkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/VLgwDyLKenW1X-DL-NG-zbpxDVE.roa
Signing time: Mon 02 Jan 2023 11:30:42 +0000
ROA not before: Mon 02 Jan 2023 11:30:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 185.229.200.0/22 maxlen: 24
185.213.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:3f:7f:52:00:5f:65:93:35:06:9b:d1:da:a7:0e:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6085397f26a044caef6a6b669287331aa4d68645
Validity
Not Before: Jan 2 11:30:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=54b8300f22ca7a75b55fe0cbf8d1becdba710d51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e8:d0:c4:04:28:79:9e:d9:e5:b8:43:ac:6b:
8d:8a:86:c0:63:80:f1:89:b0:ae:07:8f:5e:1a:7f:
f5:c8:91:33:05:84:19:06:4b:f4:e4:64:52:bc:4c:
10:b5:24:d6:25:75:9d:be:dd:e0:5a:99:6a:ef:b1:
4f:5f:06:5a:75:7a:9b:72:e2:01:17:18:5a:f0:78:
03:75:e3:98:8f:f6:0e:df:0f:e5:0a:7f:ed:9b:7d:
76:9b:c8:bc:2a:57:e1:27:79:ab:8b:c1:35:0b:17:
11:a4:ae:43:a0:b8:e7:84:96:72:a3:b5:eb:ac:34:
fc:9e:58:12:1b:c3:81:b1:78:c4:92:9c:dd:1d:e3:
c5:df:cc:c0:ec:b7:5a:90:fb:04:b9:34:f3:43:6b:
11:80:77:39:e2:7d:39:0c:20:4f:eb:0f:d4:82:96:
69:af:76:5e:b4:d3:ff:e8:7f:2e:11:d9:49:0b:f6:
e5:e5:b4:6b:60:3b:9e:4d:89:2c:01:f8:fb:72:bf:
93:3a:59:00:c9:ff:ad:e3:80:87:fd:8c:5e:05:d8:
89:4e:da:33:8f:f9:21:23:e8:7e:12:18:c1:42:81:
35:b1:da:6c:d7:82:49:76:bc:51:30:81:1f:96:52:
9b:84:c4:aa:82:27:1d:a4:19:58:5e:ff:31:a6:d0:
e0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:B8:30:0F:22:CA:7A:75:B5:5F:E0:CB:F8:D1:BE:CD:BA:71:0D:51
X509v3 Authority Key Identifier:
keyid:60:85:39:7F:26:A0:44:CA:EF:6A:6B:66:92:87:33:1A:A4:D6:86:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIU5fyagRMrvamtmkoczGqTWhkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/VLgwDyLKenW1X-DL-NG-zbpxDVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/YIU5fyagRMrvamtmkoczGqTWhkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.242.0/24
185.229.200.0/22
Signature Algorithm: sha256WithRSAEncryption
26:4c:8a:a0:0c:d2:94:fb:15:62:91:49:27:bf:96:c9:a0:19:
77:5b:5c:aa:82:7d:01:28:ba:56:d1:2a:7f:18:56:8b:de:02:
67:e1:00:44:3f:28:cf:93:c4:dc:a0:3a:2a:43:fc:e0:00:e4:
f3:f7:5b:c6:0c:a5:66:08:57:86:06:9d:ba:7f:47:43:2e:74:
0a:79:ba:d5:27:f7:0e:6d:71:48:39:b6:cc:23:62:38:23:a8:
cf:c9:27:bb:4f:21:37:ec:b3:70:aa:07:7f:5e:3c:24:60:fb:
bb:9b:18:9b:e3:d1:5c:97:6b:3d:a5:6c:d8:6c:4d:38:0f:75:
20:20:11:d5:ae:d9:73:df:be:81:61:73:68:74:d0:2e:17:17:
af:23:5a:f4:ec:ea:74:75:de:82:2c:48:9e:e5:80:ff:6d:29:
97:2b:90:f7:43:cf:08:c2:1c:61:90:41:de:63:cc:c5:69:83:
24:82:cc:95:84:1a:b4:20:91:f8:05:42:0a:d4:91:fc:d5:76:
a0:22:7d:2c:8c:df:5e:d6:a7:a8:55:87:43:c0:59:48:05:7a:
ea:cf:da:58:ce:e8:c8:5f:fd:fa:68:18:48:2f:a8:87:32:fe:
e3:a4:54:bb:06:bf:a2:7f:61:d9:fe:bb:4a:b6:cb:f7:74:ce:
08:76:03:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:25:41 2025 by rpki-client