Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/VYcd8FjXNHDVApcueXRSjyRVmJM.roa
File: VYcd8FjXNHDVApcueXRSjyRVmJM.roa (raw, json)
Hash identifier: aFR1kGnZQ9rg29rphYo8LKZGgsrIFjnrZC9F/pWg97Y=
Subject key identifier: 55:87:1D:F0:58:D7:34:70:D5:02:97:2E:79:74:52:8F:24:55:98:93
Certificate issuer: /CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Certificate serial: 0185CBBBDA2C3AA32152C9D51947BDC3AD24
Authority key identifier: DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/VYcd8FjXNHDVApcueXRSjyRVmJM.roa
Signing time: Thu 19 Jan 2023 20:32:43 +0000
ROA not before: Thu 19 Jan 2023 20:32:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206092
IP address blocks: 192.109.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:cb:bb:da:2c:3a:a3:21:52:c9:d5:19:47:bd:c3:ad:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Validity
Not Before: Jan 19 20:32:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=55871df058d73470d502972e7974528f24559893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3b:ee:ff:a1:3e:50:0d:ab:61:5f:42:ed:45:
22:92:3c:4b:76:f8:f6:45:e1:02:f8:a2:ab:40:ec:
79:95:19:61:8c:92:86:7f:ab:65:d1:df:33:13:39:
bd:96:2f:b6:b6:ff:ad:6b:3e:2f:5c:bb:18:d4:69:
da:1a:99:fc:a5:20:37:19:13:5b:87:22:2c:ea:b7:
f5:c3:a2:d2:6f:d4:25:92:a6:78:16:a2:4f:d8:27:
d2:bc:20:3b:90:d4:b3:af:c4:96:50:13:1b:61:11:
b2:02:a0:12:29:18:06:bb:96:b1:ad:e2:e1:74:a9:
88:f8:89:44:67:4c:de:3e:38:b2:4b:11:07:c2:de:
1a:d8:78:b0:44:6e:c9:f4:63:df:bc:75:83:b8:1b:
43:c6:b4:bf:8f:25:7b:ae:32:55:15:77:96:45:e9:
f1:2f:0f:28:f3:10:e1:e8:70:38:9f:2d:b1:39:3f:
fc:77:59:3a:74:67:bf:ce:35:2f:92:06:a8:b1:13:
86:d7:d7:b2:24:ef:f5:13:9b:43:f2:b1:90:29:5b:
b1:17:e0:62:ae:36:e2:9d:c5:f7:66:27:6f:d8:24:
8e:72:0a:0f:d4:e9:06:10:10:6f:61:d8:67:42:92:
e0:35:14:83:1d:96:1e:a5:ec:54:53:d9:86:1b:9b:
ac:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:87:1D:F0:58:D7:34:70:D5:02:97:2E:79:74:52:8F:24:55:98:93
X509v3 Authority Key Identifier:
keyid:DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/VYcd8FjXNHDVApcueXRSjyRVmJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/2-jMj1rx5zYtRU892RqClSkZ22E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.205.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:97:8e:d3:3e:0a:f0:35:00:58:49:5d:8f:81:46:b4:9d:e8:
aa:3b:97:8b:a3:74:f7:b0:24:79:5f:f1:fe:0b:01:09:ab:66:
89:2f:e2:a9:7b:59:27:79:d3:82:c8:01:d0:d2:94:16:c9:2d:
fa:f5:3c:be:07:fc:d5:f8:9e:e8:6f:df:bd:fd:78:96:a6:dd:
05:b2:17:8c:0c:bf:d2:cd:7d:0f:f3:1f:e9:2a:7b:58:3a:7a:
b4:45:dd:f1:f3:b8:ae:52:86:ce:40:13:4a:d7:0b:e0:0b:7c:
a1:89:b3:6c:a1:fd:0b:b6:fc:14:2d:d1:46:34:81:aa:26:48:
8d:ea:d9:4e:ce:5f:35:5e:3c:63:01:92:ec:aa:1b:c7:b4:68:
2d:12:bd:1b:89:36:bf:98:2d:47:f2:c9:ae:ed:14:a1:6d:bf:
22:80:ba:8f:5e:1a:cb:ae:18:80:33:7d:cf:d9:03:f4:00:76:
b8:50:ce:15:d0:38:60:fa:ce:6b:44:50:7a:d4:a4:0d:04:b5:
db:41:48:a8:d0:63:a9:7c:4f:cd:c6:28:0d:b7:79:32:e2:73:
3f:1c:b2:e9:71:21:59:fa:32:30:1f:30:22:17:29:c1:90:59:
88:44:4a:99:74:f9:da:d5:87:45:04:f8:68:71:0c:9e:df:99:
da:b2:19:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 06:56:32 2025 by rpki-client