Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/7e5552-0b7d-400c-95fd-856f43f69aa3/1/VAT0YFZWS5be6u3aQjXsIc8VOPQ.roa
File: VAT0YFZWS5be6u3aQjXsIc8VOPQ.roa (raw, json)
Hash identifier: 7DmtE2qEVHNSoxqugDuUJTvUcYCh90Gh5wcL/pFqKbU=
Subject key identifier: 54:04:F4:60:56:56:4B:96:DE:EA:ED:DA:42:35:EC:21:CF:15:38:F4
Certificate issuer: /CN=2cf3834cdab5abbcdb6bc5cf4e5503d16e84623a
Certificate serial: 018D13D7ECB38C1186C2451AE10EEA86362C
Authority key identifier: 2C:F3:83:4C:DA:B5:AB:BC:DB:6B:C5:CF:4E:55:03:D1:6E:84:62:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LPODTNq1q7zba8XPTlUD0W6EYjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/7e5552-0b7d-400c-95fd-856f43f69aa3/1/VAT0YFZWS5be6u3aQjXsIc8VOPQ.roa
Signing time: Tue 16 Jan 2024 19:55:34 +0000
ROA not before: Tue 16 Jan 2024 19:55:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58061
IP address blocks: 91.242.225.0/24 maxlen: 24
194.26.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:13:d7:ec:b3:8c:11:86:c2:45:1a:e1:0e:ea:86:36:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cf3834cdab5abbcdb6bc5cf4e5503d16e84623a
Validity
Not Before: Jan 16 19:55:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5404f46056564b96deeaedda4235ec21cf1538f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:59:ac:4e:63:05:7c:b2:8f:77:92:20:12:de:
82:09:bf:86:2b:b3:78:fa:73:9c:62:16:7e:d4:e7:
5a:42:82:0f:4d:aa:7d:74:46:f4:2d:21:08:e5:73:
af:db:f5:32:19:d0:07:12:7c:e0:23:0e:8b:b5:86:
fb:d7:3a:49:f1:76:c1:81:3e:e2:af:05:82:a4:c2:
b8:ef:05:c6:76:d4:81:24:e1:c0:d9:30:be:03:ba:
72:3c:95:50:b7:cf:1b:ce:a4:fd:df:ad:7d:d0:45:
b5:b7:08:dd:a5:1d:65:aa:9d:82:21:55:cb:35:79:
ed:2e:89:51:6c:27:b9:6c:d9:f0:58:c7:d8:bf:ec:
9f:2b:dc:c4:e4:68:22:1c:69:35:a6:c9:2e:95:ff:
7d:34:fb:89:40:ba:ed:41:40:98:7a:ef:7d:ea:ea:
b6:9c:71:03:29:9d:90:db:7e:a0:60:b2:93:95:bb:
56:de:17:0a:7b:5b:eb:a5:00:1b:57:c0:44:17:76:
9c:4b:a5:34:5c:67:19:31:cf:a8:b5:34:3c:82:bd:
e4:23:87:a7:7b:42:de:1c:b4:63:13:ee:ce:71:9b:
1f:5a:71:3e:bd:5a:ec:66:5c:0d:39:af:95:b8:23:
82:05:b7:f3:da:bf:15:42:a9:05:fd:fa:d7:79:62:
1e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:04:F4:60:56:56:4B:96:DE:EA:ED:DA:42:35:EC:21:CF:15:38:F4
X509v3 Authority Key Identifier:
keyid:2C:F3:83:4C:DA:B5:AB:BC:DB:6B:C5:CF:4E:55:03:D1:6E:84:62:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LPODTNq1q7zba8XPTlUD0W6EYjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7e5552-0b7d-400c-95fd-856f43f69aa3/1/VAT0YFZWS5be6u3aQjXsIc8VOPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7e5552-0b7d-400c-95fd-856f43f69aa3/1/LPODTNq1q7zba8XPTlUD0W6EYjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.225.0/24
194.26.216.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:df:25:75:59:d2:78:a3:51:df:c1:62:bd:d6:a2:d4:4c:7a:
0f:44:72:53:af:63:6d:cd:43:30:36:e5:b6:82:33:3e:26:d7:
58:8c:1e:e9:f8:4e:b5:6c:8b:b9:85:3d:0e:3a:12:84:fb:e2:
3d:65:03:97:53:fd:c1:90:5f:b7:97:c6:49:ba:c1:ac:8e:fb:
68:89:79:db:57:07:c1:93:f5:5a:a9:f0:87:c9:47:bc:91:10:
c2:ef:72:59:c6:e8:f1:84:aa:a4:f5:95:c7:45:a4:c9:e3:96:
b6:b0:fa:57:aa:ce:bb:af:1b:ae:08:4c:a8:45:18:6f:2d:32:
e2:2f:c9:e4:26:2d:64:d5:e6:dd:e0:0d:b8:ca:d5:79:3d:df:
71:cb:29:84:01:c3:3c:68:b2:61:bf:04:cf:9d:31:18:10:24:
2b:93:9d:73:39:70:05:1c:4f:08:13:fc:46:85:01:92:ca:6c:
9e:17:b5:b5:5a:31:ed:4a:a7:76:9e:8b:92:2b:7f:6b:77:0b:
79:37:96:2e:03:bc:cc:78:9e:bc:02:6b:6c:b1:5b:5b:da:78:
03:4e:58:01:25:c2:62:96:2d:70:a1:3f:70:5f:75:68:3c:21:
be:a1:4a:0b:38:f6:27:53:1c:84:f0:48:17:17:09:dc:77:ef:
01:bd:58:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:15:11 2025 by rpki-client