Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/c5ea31-7bc1-477a-8bdc-41a35e7c22f8/1/VuecASVmjUcKvyphdlmWhBLtzCY.roa
File: VuecASVmjUcKvyphdlmWhBLtzCY.roa (raw, json)
Hash identifier: 9pywbAdYpVLPp0+Qv028vFSYWXiOfuf7WbI6OQxi+GI=
Subject key identifier: 56:E7:9C:01:25:66:8D:47:0A:BF:2A:61:76:59:96:84:12:ED:CC:26
Certificate issuer: /CN=68fed508cca5f716e4dd974de3500e7dd19baa15
Certificate serial: 0194258F36404F9A289F8373EA7019EDE91C
Authority key identifier: 68:FE:D5:08:CC:A5:F7:16:E4:DD:97:4D:E3:50:0E:7D:D1:9B:AA:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aP7VCMyl9xbk3ZdN41AOfdGbqhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/c5ea31-7bc1-477a-8bdc-41a35e7c22f8/1/VuecASVmjUcKvyphdlmWhBLtzCY.roa
Signing time: Thu 02 Jan 2025 05:48:49 +0000
ROA not before: Thu 02 Jan 2025 05:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62013
IP address blocks: 185.162.140.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:36:40:4f:9a:28:9f:83:73:ea:70:19:ed:e9:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68fed508cca5f716e4dd974de3500e7dd19baa15
Validity
Not Before: Jan 2 05:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=56e79c0125668d470abf2a617659968412edcc26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:61:0e:aa:7a:b6:cf:36:dc:38:60:7a:2c:41:
1a:5f:d3:dc:6c:14:44:f3:50:94:70:bc:bf:4c:dd:
0f:eb:ba:97:6b:81:ef:00:9c:ba:c5:1c:cf:2f:8d:
68:2d:06:92:04:89:24:03:92:d8:de:29:b1:6b:85:
0f:db:3f:e1:ec:c9:48:f2:be:6a:cd:20:55:c2:47:
12:21:33:80:69:3e:34:77:1d:ba:c2:bc:23:40:3b:
5e:11:1f:5a:8f:b9:59:8c:02:25:9d:d6:dd:ed:57:
a2:79:6f:cd:0a:d7:e4:04:5f:09:73:5f:38:70:1c:
f0:74:9f:06:0f:23:27:89:35:e6:18:3b:73:cf:9d:
4a:37:62:1b:bf:a3:8e:05:cb:36:b0:31:7c:77:60:
7d:4a:a7:a3:1c:e1:2c:33:67:4e:e0:d8:c3:ac:0f:
24:10:77:2d:8e:17:d6:7c:ca:38:54:e7:aa:4e:76:
cf:36:74:74:cf:e6:cb:01:83:75:6c:19:60:eb:66:
a6:ac:86:a3:50:5d:55:a6:bc:15:77:72:ea:0e:9a:
da:fb:2e:21:d5:f6:3f:97:98:3d:a0:d4:9c:c8:b7:
44:c8:8b:6b:ef:75:bb:03:f4:02:8c:d8:54:1f:b4:
e0:8b:b7:e0:aa:5b:36:09:95:c9:68:83:d3:8b:87:
6b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E7:9C:01:25:66:8D:47:0A:BF:2A:61:76:59:96:84:12:ED:CC:26
X509v3 Authority Key Identifier:
keyid:68:FE:D5:08:CC:A5:F7:16:E4:DD:97:4D:E3:50:0E:7D:D1:9B:AA:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aP7VCMyl9xbk3ZdN41AOfdGbqhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c5ea31-7bc1-477a-8bdc-41a35e7c22f8/1/VuecASVmjUcKvyphdlmWhBLtzCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c5ea31-7bc1-477a-8bdc-41a35e7c22f8/1/aP7VCMyl9xbk3ZdN41AOfdGbqhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.162.140.0/22
Signature Algorithm: sha256WithRSAEncryption
05:33:45:aa:f9:70:f7:c6:24:92:16:9e:99:0d:bf:8d:7a:68:
47:17:d3:70:dd:72:6e:da:c6:13:fb:ea:9b:42:97:e9:91:d1:
1b:96:bf:81:92:44:e4:c9:01:91:b4:e5:09:56:cf:92:fa:57:
ea:5a:17:82:f7:a0:2d:34:34:b6:a0:00:d0:81:8f:02:72:90:
7f:c3:6c:ff:5d:53:04:62:40:83:8a:f8:b7:47:6a:e9:5f:a2:
82:0a:b3:54:4c:43:54:b5:cb:51:ac:56:af:06:e4:01:49:f6:
14:06:25:51:76:74:20:71:4f:07:8d:c4:46:2b:36:52:b5:4b:
b6:ba:d7:30:bb:f4:05:b8:de:73:f3:b6:e3:ba:fe:80:3a:1d:
ea:58:00:d0:bf:38:d4:1a:eb:1e:45:a4:2c:6c:e1:d5:36:e8:
1b:ea:33:9e:7f:51:2e:cc:ae:68:c3:0e:86:29:71:6f:34:b2:
55:47:50:e6:71:c8:83:51:a4:30:98:b0:29:17:1c:b8:0e:3b:
22:70:ab:44:5a:f7:dc:ae:f2:6e:0c:43:85:0b:9d:0d:55:ec:
11:60:d7:5b:40:78:45:19:75:ee:2e:e7:97:8e:1c:2b:84:03:
7b:7f:22:78:96:f5:ea:81:49:dd:65:91:04:17:f8:5b:cd:49:
35:e3:76:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:08:11 2025 by rpki-client