Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ab3caa-313e-4683-84db-9ee5a78ec57b/1/Vo5ZMZ84hJHQfcbGTokQLijkpYo.roa
File: Vo5ZMZ84hJHQfcbGTokQLijkpYo.roa (raw, json)
Hash identifier: 64QiZd8J7X/WsxeA4F9CRovZCf4auMjg/bXOi9bqgBw=
Subject key identifier: 56:8E:59:31:9F:38:84:91:D0:7D:C6:C6:4E:89:10:2E:28:E4:A5:8A
Certificate issuer: /CN=406f014a2bc76ae04e6d304d06aacbfc8e85d514
Certificate serial: 019421B22DA603276672FFC11316C147B06E
Authority key identifier: 40:6F:01:4A:2B:C7:6A:E0:4E:6D:30:4D:06:AA:CB:FC:8E:85:D5:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QG8BSivHauBObTBNBqrL_I6F1RQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3caa-313e-4683-84db-9ee5a78ec57b/1/Vo5ZMZ84hJHQfcbGTokQLijkpYo.roa
Signing time: Wed 01 Jan 2025 11:48:32 +0000
ROA not before: Wed 01 Jan 2025 11:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1820
IP address blocks: 91.192.184.0/22 maxlen: 32
194.246.120.0/23 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:2d:a6:03:27:66:72:ff:c1:13:16:c1:47:b0:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=406f014a2bc76ae04e6d304d06aacbfc8e85d514
Validity
Not Before: Jan 1 11:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=568e59319f388491d07dc6c64e89102e28e4a58a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8f:4e:fa:94:a8:f0:c8:fa:78:55:75:bd:95:
17:e8:08:bc:72:5e:bc:6c:04:0f:93:05:3b:31:ee:
f7:3b:ab:d0:85:ce:aa:d7:66:37:03:8e:58:19:99:
dc:56:16:11:93:23:09:04:82:57:99:2a:af:52:04:
e4:82:e3:40:32:87:53:7a:ac:eb:d8:ff:9b:ff:5c:
38:86:63:f5:62:df:2a:fe:19:fb:75:38:27:13:16:
04:8f:08:88:2f:e7:fd:29:8f:e5:90:dd:f8:b6:65:
82:ef:8e:1a:d4:c1:04:57:5d:0f:fa:46:88:c1:42:
9c:a1:36:ff:34:dd:f7:eb:e2:59:05:73:d8:86:c2:
24:a3:20:1d:33:98:68:3e:8a:5b:90:70:ba:2d:91:
4e:dd:23:f4:0d:48:27:76:22:ec:f3:a8:3d:53:4d:
46:3c:24:de:ff:8e:73:5c:58:a0:89:e9:4f:d1:fe:
b8:9c:8c:89:8a:5b:0f:cb:73:8f:27:81:d8:5e:bd:
54:47:d3:bd:d1:69:3d:8f:a0:5f:11:bf:5f:12:aa:
55:1d:a7:73:d9:da:33:2e:95:dc:3f:e7:7e:7c:59:
41:b7:07:c1:10:c8:27:00:38:cb:62:2a:84:ff:0e:
4f:7e:e2:a5:b2:59:79:20:4d:40:67:de:40:09:4a:
75:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:8E:59:31:9F:38:84:91:D0:7D:C6:C6:4E:89:10:2E:28:E4:A5:8A
X509v3 Authority Key Identifier:
keyid:40:6F:01:4A:2B:C7:6A:E0:4E:6D:30:4D:06:AA:CB:FC:8E:85:D5:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QG8BSivHauBObTBNBqrL_I6F1RQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3caa-313e-4683-84db-9ee5a78ec57b/1/Vo5ZMZ84hJHQfcbGTokQLijkpYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3caa-313e-4683-84db-9ee5a78ec57b/1/QG8BSivHauBObTBNBqrL_I6F1RQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.192.184.0/22
194.246.120.0/23
Signature Algorithm: sha256WithRSAEncryption
86:7f:e5:07:db:e2:b2:71:f7:81:c5:b9:fc:d3:fd:70:66:0d:
d3:20:bb:55:30:e5:13:ab:c2:f0:bd:1d:01:ed:2e:ef:b9:89:
09:6e:e1:91:51:25:ce:80:e4:f6:8c:0c:24:76:a2:b4:7b:32:
3c:5a:0a:ff:1d:86:6f:31:56:19:68:b8:d0:78:c2:82:79:b3:
0f:a0:1b:93:a9:81:ce:fa:e5:20:32:65:2f:dc:ff:72:d4:74:
37:d2:4a:2d:37:34:82:34:57:6b:09:db:aa:63:39:c4:ba:6a:
f5:70:59:7d:fe:b0:27:0a:89:f6:99:20:a1:59:06:66:97:95:
69:f8:f6:1b:a1:40:93:7e:5d:d7:4a:c5:af:16:8d:4e:6b:01:
16:72:73:6a:02:3d:11:c3:bb:78:c3:89:ae:bb:15:d3:82:b6:
08:54:02:72:13:06:80:60:4b:db:d1:e0:cd:0f:df:99:e6:cb:
3c:2d:70:35:88:25:29:bc:4c:c8:bd:81:84:e0:c3:bd:b5:89:
43:46:c8:f9:bf:e1:2e:f2:a4:6d:20:dc:37:d8:39:87:98:ee:
63:f4:fe:83:7d:4e:9a:78:5a:a8:62:68:3b:40:54:62:9a:0a:
4e:a8:1f:af:7c:90:49:fe:9f:77:86:ce:50:75:c9:24:75:a7:
dc:48:6f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 12:52:21 2025 by rpki-client