Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/vsWDxcLVkwwTdQ-SWHS81ZQk760.roa
File: vsWDxcLVkwwTdQ-SWHS81ZQk760.roa (raw, json)
Hash identifier: 3UxSA0KShjvN3Wq5M2y+DEYPLSkXl83rfIUxsmC4InY=
Subject key identifier: BE:C5:83:C5:C2:D5:93:0C:13:75:0F:92:58:74:BC:D5:94:24:EF:AD
Certificate issuer: /CN=6085397f26a044caef6a6b669287331aa4d68645
Certificate serial: 01856FF93E817972DB21E095C2C95063B61E
Authority key identifier: 60:85:39:7F:26:A0:44:CA:EF:6A:6B:66:92:87:33:1A:A4:D6:86:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YIU5fyagRMrvamtmkoczGqTWhkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/vsWDxcLVkwwTdQ-SWHS81ZQk760.roa
Signing time: Mon 02 Jan 2023 00:54:43 +0000
ROA not before: Mon 02 Jan 2023 00:54:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29066
IP address blocks: 185.130.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:3e:81:79:72:db:21:e0:95:c2:c9:50:63:b6:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6085397f26a044caef6a6b669287331aa4d68645
Validity
Not Before: Jan 2 00:54:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bec583c5c2d5930c13750f925874bcd59424efad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b0:f9:df:e4:2f:76:54:56:ce:19:53:a2:a6:
34:b2:29:93:12:df:8c:a8:0b:03:d4:b5:c6:39:82:
e9:45:91:79:81:eb:11:20:4e:1d:9e:fd:b6:32:8c:
2b:3b:b7:3d:36:42:5a:07:5d:ad:85:4d:19:1b:88:
ae:6d:1e:8e:60:7f:87:56:91:83:d9:28:da:f2:77:
c3:29:ce:07:b6:2a:26:55:19:50:7c:0a:b0:1e:6d:
5f:16:0b:9b:30:02:f0:79:01:61:3b:16:02:1b:27:
39:6a:82:00:f8:3b:80:57:4c:1b:e1:d6:cf:cc:b6:
3e:99:d8:14:b2:23:7e:8c:43:98:30:7f:49:b0:76:
e3:8f:63:92:ad:0b:64:41:7d:70:3d:f1:57:06:db:
7a:2e:01:3e:75:5b:5c:b5:89:b6:ce:cd:f1:f2:c9:
e7:ca:9c:98:22:89:cd:66:d1:b6:14:68:16:71:17:
7c:b1:c7:f0:24:e9:d4:3c:ee:57:69:2d:8a:4b:0a:
a5:87:46:6b:26:b0:63:d8:99:48:b3:e8:ae:f8:4b:
4b:9a:e0:ce:f5:1b:ee:23:33:fe:51:b7:1d:5a:d1:
d6:96:e1:cc:cb:78:09:16:58:e3:34:bb:37:ef:a5:
51:9e:de:95:d9:ad:73:52:28:12:47:96:a7:32:60:
12:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:C5:83:C5:C2:D5:93:0C:13:75:0F:92:58:74:BC:D5:94:24:EF:AD
X509v3 Authority Key Identifier:
keyid:60:85:39:7F:26:A0:44:CA:EF:6A:6B:66:92:87:33:1A:A4:D6:86:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIU5fyagRMrvamtmkoczGqTWhkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/vsWDxcLVkwwTdQ-SWHS81ZQk760.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/YIU5fyagRMrvamtmkoczGqTWhkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.130.62.0/24
Signature Algorithm: sha256WithRSAEncryption
34:e3:42:81:2c:1a:36:f0:1a:9a:e3:1f:7c:1d:2c:c1:ea:d3:
6a:59:62:68:6e:02:b8:25:f6:18:fe:dd:4e:b6:ff:07:99:8a:
08:73:69:e1:6b:8e:43:f3:a4:54:8d:14:f7:8c:b9:db:fe:06:
e3:b0:c6:6b:43:f1:46:d5:4d:8b:21:84:66:c6:70:4b:8b:48:
0e:8a:c5:1f:a2:66:7a:89:ab:38:7d:03:bd:ce:5b:ce:f3:30:
3f:9f:5b:31:4b:bf:51:56:57:65:9e:15:bc:a8:d3:41:f3:3d:
40:91:95:2a:5a:2f:26:12:2c:29:4b:4a:d2:a7:70:43:97:6a:
12:12:de:89:c8:14:94:fc:0a:7c:c7:1a:69:d4:8b:9a:d8:71:
1d:67:8a:12:33:5f:73:62:a4:32:40:3f:3f:49:c8:39:a0:a1:
73:5a:e5:0e:90:30:f4:c6:38:2f:aa:9d:15:42:da:42:69:72:
0a:f1:5f:c0:1d:44:c7:2f:25:5c:89:3d:97:ff:b0:2a:21:ee:
5d:f9:7c:d1:64:85:05:9f:f4:ba:ec:ab:11:90:bf:d6:26:b4:
9d:53:ff:9c:7d:cb:1c:46:ef:ca:22:79:33:15:4b:5f:0d:5b:
25:5f:6c:60:43:f4:c3:49:e1:b0:5a:30:46:6c:76:d1:57:f1:
be:6e:4d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:28:34 2025 by rpki-client