Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/b281ce-0e59-4911-82aa-0a08e47f27d1/1/V8t35Mej1TlrlbpW-UhLQesXQ8Q.roa
File: V8t35Mej1TlrlbpW-UhLQesXQ8Q.roa (raw, json)
Hash identifier: Ex8kOE4ukEwwnH68l67Pn8VTWwvu/cANjuSW8eZ5eKA=
Subject key identifier: 57:CB:77:E4:C7:A3:D5:39:6B:95:BA:56:F9:48:4B:41:EB:17:43:C4
Certificate issuer: /CN=bd2aac0640e07c735e13488ae87035bd083b5a21
Certificate serial: 01857169DBE14C48567981B968985C096E63
Authority key identifier: BD:2A:AC:06:40:E0:7C:73:5E:13:48:8A:E8:70:35:BD:08:3B:5A:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vSqsBkDgfHNeE0iK6HA1vQg7WiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/b281ce-0e59-4911-82aa-0a08e47f27d1/1/V8t35Mej1TlrlbpW-UhLQesXQ8Q.roa
Signing time: Mon 02 Jan 2023 07:37:21 +0000
ROA not before: Mon 02 Jan 2023 07:37:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19905
IP address blocks: 193.41.176.0/22 maxlen: 24
194.9.220.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:69:db:e1:4c:48:56:79:81:b9:68:98:5c:09:6e:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd2aac0640e07c735e13488ae87035bd083b5a21
Validity
Not Before: Jan 2 07:37:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=57cb77e4c7a3d5396b95ba56f9484b41eb1743c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:42:6a:2c:69:b8:8b:00:ed:eb:4b:c8:0e:b9:
a6:31:6f:c3:9d:86:88:96:f4:40:62:01:2d:b8:e4:
99:85:c5:9a:6c:96:f0:1e:db:c9:24:f2:92:71:b1:
f4:8c:4e:ea:37:08:64:38:8e:36:53:49:5f:81:77:
e6:c2:29:5f:f0:d4:5a:5f:88:c8:2e:53:b8:5b:41:
c7:ed:18:02:50:0f:7d:1a:24:e7:3c:4f:61:ea:ef:
bd:93:f9:70:9e:6e:22:c3:7d:8b:25:92:f3:af:1f:
d6:1c:1b:13:d4:51:f5:a7:1d:c8:59:95:40:75:76:
5f:30:c7:9a:ee:da:93:92:01:3e:e7:bf:a4:95:a1:
ff:ec:fa:42:45:f9:54:b2:5a:ab:1b:62:a1:17:d8:
6b:c0:55:4f:64:62:8a:ba:21:11:24:64:e7:08:3a:
bc:71:41:ff:7d:b9:b6:9f:20:5d:a8:05:7e:b3:22:
e7:46:13:06:f2:ce:4b:70:5d:63:f2:31:90:4f:1b:
9e:8c:53:ca:82:ce:80:f6:9e:1b:fe:5f:f8:fa:31:
f0:43:e7:11:32:71:aa:ef:4c:0e:ac:b9:24:85:2a:
5d:1c:03:98:0d:d7:d9:d5:e5:a6:47:4a:c3:6f:2e:
2c:87:db:57:b7:9f:87:7f:1b:b2:ad:b3:11:a5:dc:
95:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:CB:77:E4:C7:A3:D5:39:6B:95:BA:56:F9:48:4B:41:EB:17:43:C4
X509v3 Authority Key Identifier:
keyid:BD:2A:AC:06:40:E0:7C:73:5E:13:48:8A:E8:70:35:BD:08:3B:5A:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vSqsBkDgfHNeE0iK6HA1vQg7WiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b281ce-0e59-4911-82aa-0a08e47f27d1/1/V8t35Mej1TlrlbpW-UhLQesXQ8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b281ce-0e59-4911-82aa-0a08e47f27d1/1/vSqsBkDgfHNeE0iK6HA1vQg7WiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.41.176.0/22
194.9.220.0/23
Signature Algorithm: sha256WithRSAEncryption
99:95:89:48:eb:3d:68:43:9b:cf:dc:98:e7:9f:64:5c:80:d4:
8e:b4:01:48:1b:73:0a:9f:40:2c:51:20:be:98:e8:09:92:cb:
4f:8e:fb:6f:cf:d0:35:34:9e:22:a8:f8:b7:c7:39:e8:55:b6:
ae:c2:3b:16:b4:ae:ce:48:ea:46:e5:2a:2a:bb:a9:5e:8b:74:
85:3e:c5:21:aa:54:ce:d4:6b:62:3e:39:6a:ed:9c:84:8c:e0:
d1:fb:b5:b2:9a:c3:38:52:1c:d8:c4:24:47:df:39:7b:8e:81:
8e:ab:c0:39:f4:84:6d:0e:de:d0:4c:a8:5e:bf:6c:b0:79:30:
d8:df:25:80:4c:64:00:f1:96:91:81:02:92:62:67:fa:03:6b:
85:8b:81:54:65:ee:97:d2:f5:3c:de:15:b8:f8:a7:68:7b:d0:
b9:a0:fa:53:57:ac:a5:b1:ab:0b:7a:16:c7:9a:d9:a6:9f:82:
e9:75:ea:5d:92:ac:c1:bd:d9:a7:83:36:0b:ac:27:88:ac:13:
3d:df:51:ff:50:d7:08:e7:62:04:79:c5:43:b1:f1:56:22:c7:
e6:f0:06:bf:2f:22:94:b0:a9:10:c0:c3:f3:2c:8c:ba:78:19:
85:db:fc:95:63:92:fa:97:6f:48:ed:f9:59:34:17:93:ee:d0:
e4:ef:86:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:55:31 2025 by rpki-client