Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/118413-b7aa-459c-99fa-4de1b520a594/1/vTTN7Jd0zPqa91uLSy540B9C-ks.roa
File: vTTN7Jd0zPqa91uLSy540B9C-ks.roa (raw, json)
Hash identifier: OZfHJYsEdowOMA253v79GTAv8RCtV3bvgVGY0+xVsr8=
Subject key identifier: BD:34:CD:EC:97:74:CC:FA:9A:F7:5B:8B:4B:2E:78:D0:1F:42:FA:4B
Certificate issuer: /CN=279669579b3ce61ee8ee7d6af7e314b0f726361f
Certificate serial: 019427478A80D7B3D49BA301F7C856099D0A
Authority key identifier: 27:96:69:57:9B:3C:E6:1E:E8:EE:7D:6A:F7:E3:14:B0:F7:26:36:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5ZpV5s85h7o7n1q9-MUsPcmNh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/118413-b7aa-459c-99fa-4de1b520a594/1/vTTN7Jd0zPqa91uLSy540B9C-ks.roa
Signing time: Thu 02 Jan 2025 13:49:47 +0000
ROA not before: Thu 02 Jan 2025 13:49:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60781
IP address blocks: 185.129.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:8a:80:d7:b3:d4:9b:a3:01:f7:c8:56:09:9d:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279669579b3ce61ee8ee7d6af7e314b0f726361f
Validity
Not Before: Jan 2 13:49:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bd34cdec9774ccfa9af75b8b4b2e78d01f42fa4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bf:a8:e4:f1:e3:59:52:5a:dc:e2:2f:3d:1f:
8d:3f:66:6a:d4:ec:5b:e6:8e:e4:1f:b6:3e:24:e5:
04:b6:36:3a:d1:70:62:7c:b6:7e:3d:a8:ad:e0:55:
49:65:19:04:5d:36:84:da:d5:da:a1:82:14:53:d8:
64:75:a1:f3:d5:92:6c:08:27:58:7b:1e:01:88:a2:
08:34:35:20:a4:67:ef:2b:28:5f:4a:a8:c9:d3:61:
98:6b:20:fd:f1:97:7b:8f:6e:db:38:a3:b7:8b:ef:
f3:cc:4e:29:65:c4:3c:76:6f:d7:d4:91:ef:2e:9e:
be:c0:2e:79:51:18:23:84:bf:49:ba:fb:4d:7d:24:
02:a9:b6:3d:d0:3f:c0:21:06:7a:a3:03:86:5b:54:
61:16:67:c9:3c:a7:22:7d:bb:98:c3:60:04:cf:38:
80:74:7a:7e:ab:51:c7:9b:a4:c9:de:74:11:6b:51:
da:32:94:5a:b5:9b:f6:91:3a:ca:c6:99:66:65:1c:
7e:d7:56:31:ab:79:64:88:03:41:d9:70:83:be:d9:
70:1b:4b:00:5c:7a:98:39:eb:0a:9a:e3:fe:2b:d1:
1f:92:94:10:14:5b:69:03:87:67:12:6e:a1:5c:4e:
c0:94:ca:de:1d:14:e2:d9:81:54:1b:f6:7a:aa:2b:
77:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:34:CD:EC:97:74:CC:FA:9A:F7:5B:8B:4B:2E:78:D0:1F:42:FA:4B
X509v3 Authority Key Identifier:
keyid:27:96:69:57:9B:3C:E6:1E:E8:EE:7D:6A:F7:E3:14:B0:F7:26:36:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5ZpV5s85h7o7n1q9-MUsPcmNh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/118413-b7aa-459c-99fa-4de1b520a594/1/vTTN7Jd0zPqa91uLSy540B9C-ks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/118413-b7aa-459c-99fa-4de1b520a594/1/J5ZpV5s85h7o7n1q9-MUsPcmNh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.129.121.0/24
Signature Algorithm: sha256WithRSAEncryption
02:0a:7d:29:c1:ee:3f:64:bb:90:71:b4:14:55:e4:51:db:ed:
a6:be:3e:6f:bd:e9:4e:f0:29:8f:cc:8a:5a:43:5b:27:c6:3f:
c9:ba:20:9e:85:6c:82:6a:04:d4:59:dd:da:90:b1:46:7b:b1:
91:7f:ce:88:82:c9:0a:2c:d5:7e:46:3f:63:d3:76:5b:d2:b9:
8e:7e:ea:68:70:90:46:d0:17:c9:cf:e9:c7:3f:b4:ab:95:4a:
ab:31:c1:cb:17:7e:11:ac:19:fb:9e:46:45:00:42:ec:80:a9:
32:2b:de:af:24:d8:2d:63:17:f1:c1:94:2d:e7:0d:bd:ba:61:
24:9d:d4:30:32:52:4e:59:36:99:07:47:17:3c:3a:c4:33:cf:
f5:5c:06:d3:1f:f7:49:d2:b5:d5:16:90:94:48:3b:68:07:4b:
1f:6e:fd:e0:f7:71:63:68:70:2d:9b:a7:6f:e5:34:73:57:f6:
59:29:7e:2b:9c:8d:3d:a8:ae:8c:ab:59:4a:15:57:f0:b5:38:
b2:87:63:ac:9f:ad:7f:85:01:59:05:52:b3:e6:b9:a0:28:a3:
04:1d:52:7b:45:ba:5f:36:e8:25:ad:a4:a8:af:40:e9:7e:e6:
e2:05:1c:9d:ac:6d:6a:f5:5a:5d:3f:e4:5b:b9:fc:7f:1f:4e:
d7:14:59:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:00:42 2025 by rpki-client