Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b90cd1-cab6-4959-9fd2-2b6e2b1d6ba5/1/VxDy6fFK_papRs1LPgFIYm1fMcE.roa
File: VxDy6fFK_papRs1LPgFIYm1fMcE.roa (raw, json)
Hash identifier: 3KeKZAcRb+YPguHuvqZ6D3D6d382i0upCCeP4Nh7vwY=
Subject key identifier: 57:10:F2:E9:F1:4A:FE:96:A9:46:CD:4B:3E:01:48:62:6D:5F:31:C1
Certificate issuer: /CN=99530e14e8ed8fbc7ab4a9399c5ae2f19ee9f803
Certificate serial: E5048C
Authority key identifier: 99:53:0E:14:E8:ED:8F:BC:7A:B4:A9:39:9C:5A:E2:F1:9E:E9:F8:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mVMOFOjtj7x6tKk5nFri8Z7p-AM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b90cd1-cab6-4959-9fd2-2b6e2b1d6ba5/1/VxDy6fFK_papRs1LPgFIYm1fMcE.roa
Signing time: Sat 01 Jan 2022 08:04:41 +0000
ROA not before: Sat 01 Jan 2022 08:04:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 193.162.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15008908 (0xe5048c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99530e14e8ed8fbc7ab4a9399c5ae2f19ee9f803
Validity
Not Before: Jan 1 08:04:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5710f2e9f14afe96a946cd4b3e0148626d5f31c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:63:77:ee:22:83:27:be:ed:7c:a3:5a:7a:17:
f5:fe:63:03:e3:63:59:ec:39:7c:f1:fd:bc:7c:93:
f7:49:c8:42:59:b7:14:70:b9:07:78:06:45:e3:ef:
c0:d8:1e:ec:d6:ac:86:29:81:8d:3d:ed:f0:f7:88:
dd:c0:46:db:a3:e3:eb:4c:73:c1:64:05:6b:48:ba:
e6:63:68:f7:30:8f:92:9c:4b:5f:91:50:4b:e9:2b:
2b:b6:ad:07:f5:6e:c0:41:7f:f7:63:d8:cf:c3:ba:
cf:35:45:8e:cd:1f:e4:74:92:e4:34:0c:62:4e:f1:
5c:0b:d6:45:be:32:80:98:03:8d:18:d7:df:0b:71:
f3:75:ad:77:45:e3:eb:cc:0f:f9:31:4e:db:29:e3:
8b:27:3b:36:29:09:82:12:67:35:60:95:8c:ee:b7:
ba:b7:0d:5f:03:ea:06:65:46:5e:44:38:44:ef:a0:
a0:6c:e7:2b:65:b2:5c:01:95:a2:1f:e7:71:8c:5d:
ac:8c:eb:a3:42:7d:4b:7d:cc:a2:22:73:03:5b:1e:
75:d1:8f:e2:25:f4:95:24:56:48:16:e1:14:23:50:
f5:58:76:73:a4:8e:ae:c3:66:ac:28:f4:62:96:05:
55:4f:81:4f:5b:87:e1:65:f3:26:66:c1:b6:59:02:
e4:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:10:F2:E9:F1:4A:FE:96:A9:46:CD:4B:3E:01:48:62:6D:5F:31:C1
X509v3 Authority Key Identifier:
keyid:99:53:0E:14:E8:ED:8F:BC:7A:B4:A9:39:9C:5A:E2:F1:9E:E9:F8:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mVMOFOjtj7x6tKk5nFri8Z7p-AM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b90cd1-cab6-4959-9fd2-2b6e2b1d6ba5/1/VxDy6fFK_papRs1LPgFIYm1fMcE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b90cd1-cab6-4959-9fd2-2b6e2b1d6ba5/1/mVMOFOjtj7x6tKk5nFri8Z7p-AM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.162.133.0/24
Signature Algorithm: sha256WithRSAEncryption
19:76:eb:b5:60:5a:b4:e9:11:83:4a:ed:e1:03:f6:90:22:5d:
7d:07:ba:9f:50:c4:42:16:7d:3e:51:e9:26:f0:1e:7d:c6:ee:
26:94:92:33:a1:87:1e:c1:88:c7:c8:b9:b9:02:2d:95:51:48:
9e:31:3f:a8:aa:17:8b:94:49:25:70:04:01:93:ea:9a:fc:ed:
2c:a6:21:39:ad:18:20:77:aa:cb:14:29:6c:45:47:b7:86:5f:
75:03:33:1e:86:d9:f0:fd:37:b7:04:60:50:aa:73:6a:d9:35:
0d:c8:85:0b:ad:74:69:e2:c9:51:fd:24:fe:f3:97:3b:cc:88:
f5:c2:ce:5c:7d:b4:fd:19:e8:1f:67:dc:28:18:a1:ce:f9:68:
eb:0d:ca:4c:d9:2c:a5:43:16:4e:74:79:ef:86:ee:41:d8:76:
0c:f4:77:8e:3f:ee:58:9d:2c:9a:1d:6a:78:f9:64:73:79:ad:
78:89:bf:38:16:24:44:30:25:e6:9e:18:a1:8e:64:89:03:75:
ff:81:b4:92:3a:7e:32:18:9a:81:4c:92:62:93:d2:a4:fc:e7:
87:6d:be:47:54:03:4e:40:a4:5f:c8:c4:c5:1d:2c:88:4e:b3:
93:86:ea:5b:6e:f5:ab:ca:ae:29:d9:f2:60:3d:55:a3:d4:c5:
9e:98:25:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:24:57 2025 by rpki-client