Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/f6524d-6a16-4859-9862-558252a62e3c/1/vQvyiuJjcgCRwjJ_0cCOp8THqAI.roa
File: vQvyiuJjcgCRwjJ_0cCOp8THqAI.roa (raw, json)
Hash identifier: CIVJWSwDrX7q8sq5G/CRwOpVEi40Kk0pZL0DQFq6IuU=
Subject key identifier: BD:0B:F2:8A:E2:63:72:00:91:C2:32:7F:D1:C0:8E:A7:C4:C7:A8:02
Certificate issuer: /CN=c04c9d31a1f3592e787b3aa59698f9d4a703ae1f
Certificate serial: 12D5D82F
Authority key identifier: C0:4C:9D:31:A1:F3:59:2E:78:7B:3A:A5:96:98:F9:D4:A7:03:AE:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wEydMaHzWS54ezqllpj51KcDrh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/f6524d-6a16-4859-9862-558252a62e3c/1/vQvyiuJjcgCRwjJ_0cCOp8THqAI.roa
Signing time: Sat 01 Jan 2022 06:57:37 +0000
ROA not before: Sat 01 Jan 2022 06:57:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48767
IP address blocks: 185.140.52.0/24 maxlen: 24
2a07:1a80::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 316004399 (0x12d5d82f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c04c9d31a1f3592e787b3aa59698f9d4a703ae1f
Validity
Not Before: Jan 1 06:57:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bd0bf28ae263720091c2327fd1c08ea7c4c7a802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b8:7d:5f:7e:71:ee:95:3b:c5:7d:6a:22:92:
bc:0d:ed:42:ad:b9:22:31:72:bf:ef:41:6d:21:b6:
e6:48:3b:2b:fb:f9:db:29:58:be:01:14:5c:08:de:
07:16:08:3c:b2:cf:f7:c8:ef:2e:fb:98:91:ec:5b:
e2:1c:41:d0:2d:7a:a2:6d:8c:74:1d:be:40:ab:3d:
11:ae:64:50:d4:c6:bc:25:17:ef:70:43:73:0d:d5:
fe:27:f6:f3:38:39:df:99:b8:e9:15:7e:17:39:e3:
7d:6d:44:e6:86:c4:aa:c5:c4:dd:8b:84:ac:7a:6b:
39:cf:c9:51:58:0a:c8:95:2a:ed:f3:3a:3f:26:f8:
8a:ac:a6:d7:17:14:38:e2:87:f3:02:c0:d4:c8:11:
61:4f:74:5e:d2:64:02:e2:46:94:da:22:f6:86:2f:
65:2c:2c:3d:2a:f2:b6:19:18:ab:69:ae:f7:ca:3e:
5b:dd:47:4c:d7:eb:1e:28:93:70:3a:ef:e2:b8:91:
a4:8a:36:4a:38:46:ce:d7:f5:00:65:3c:28:12:72:
6c:dd:cc:95:bc:a7:f8:98:a5:80:00:46:b8:9e:18:
dd:b8:35:b0:63:b6:a8:bb:45:1e:f2:8e:c3:5e:d1:
69:76:66:d4:55:7b:a5:55:84:72:2e:04:c1:4b:91:
99:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:0B:F2:8A:E2:63:72:00:91:C2:32:7F:D1:C0:8E:A7:C4:C7:A8:02
X509v3 Authority Key Identifier:
keyid:C0:4C:9D:31:A1:F3:59:2E:78:7B:3A:A5:96:98:F9:D4:A7:03:AE:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wEydMaHzWS54ezqllpj51KcDrh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f6524d-6a16-4859-9862-558252a62e3c/1/vQvyiuJjcgCRwjJ_0cCOp8THqAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f6524d-6a16-4859-9862-558252a62e3c/1/wEydMaHzWS54ezqllpj51KcDrh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.140.52.0/24
IPv6:
2a07:1a80::/48
Signature Algorithm: sha256WithRSAEncryption
20:ff:6d:7b:c3:73:c9:7d:cd:59:f8:32:5a:2c:05:f6:c9:95:
7c:3f:53:9d:ee:23:ac:af:18:6f:1f:b3:d3:1a:a5:e5:90:d8:
01:f1:75:b7:31:ce:d8:23:85:6f:ca:6d:ea:05:3d:78:90:f7:
87:13:a9:89:fe:e6:e7:c7:46:b3:8c:bb:0e:8f:e5:32:66:3b:
bd:7e:09:e1:dc:0a:a0:24:0e:29:e3:fb:f6:71:00:8c:07:c2:
36:ad:5e:d7:ee:b2:38:95:44:b4:9a:52:0f:70:80:22:2d:6b:
07:4b:59:bc:e6:e6:8c:f9:42:e6:2f:0e:d8:e1:37:cf:68:5c:
7d:6a:d6:61:1f:41:6e:c7:a7:bf:8d:36:8e:6e:db:a3:72:56:
fe:f2:d9:a9:de:72:37:f4:d0:21:04:68:02:e0:54:5f:57:d0:
a4:87:b3:bb:ce:2a:54:32:7f:2d:7a:ea:2d:bc:57:5a:64:08:
9b:c2:b2:35:b3:fe:18:31:1a:5d:4d:da:4b:0f:06:ea:8d:e9:
e4:a8:dd:4c:5c:eb:6a:41:74:c3:47:9a:07:ae:00:64:95:34:
c3:17:8d:9e:47:1f:7e:8c:76:72:dc:33:ea:75:e9:1a:1a:67:
96:14:8e:44:38:f2:4a:35:6e:f3:3a:66:45:34:e0:a4:e5:f1:
82:8d:63:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:00:52 2025 by rpki-client