Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/02d351-9aba-49af-ab74-a10f85046bf8/1/VveoBbup7SfAtR0ci5-_QYePHmQ.roa
File: VveoBbup7SfAtR0ci5-_QYePHmQ.roa (raw, json)
Hash identifier: H60Yc8ajoKKSRYyZr69I9lN7ta6BvFix35sc+VvI604=
Subject key identifier: 56:F7:A8:05:BB:A9:ED:27:C0:B5:1D:1C:8B:9F:BF:41:87:8F:1E:64
Certificate issuer: /CN=81601c22138b5719c4027eee75ef74679ce68ca9
Certificate serial: 01856F79558B3BE408F0FECDC108AED15650
Authority key identifier: 81:60:1C:22:13:8B:57:19:C4:02:7E:EE:75:EF:74:67:9C:E6:8C:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWAcIhOLVxnEAn7ude90Z5zmjKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/02d351-9aba-49af-ab74-a10f85046bf8/1/VveoBbup7SfAtR0ci5-_QYePHmQ.roa
Signing time: Sun 01 Jan 2023 22:35:00 +0000
ROA not before: Sun 01 Jan 2023 22:35:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212667
IP address blocks: 213.109.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:55:8b:3b:e4:08:f0:fe:cd:c1:08:ae:d1:56:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81601c22138b5719c4027eee75ef74679ce68ca9
Validity
Not Before: Jan 1 22:35:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=56f7a805bba9ed27c0b51d1c8b9fbf41878f1e64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:71:77:95:12:12:6c:41:d7:67:01:2c:bf:0b:
b3:6a:da:fb:b6:c0:54:11:73:49:90:e5:8c:4f:25:
37:1b:3d:8d:75:29:72:dd:63:c4:cb:7e:4a:c3:6c:
a6:b9:57:4d:5c:c0:f0:3e:d7:a0:19:d4:86:6d:b0:
4e:0f:c3:71:dd:49:1f:60:fc:91:d6:93:7e:58:34:
d6:14:11:cc:8f:c1:a6:39:31:e7:cb:73:50:66:30:
31:d2:ec:3e:49:7b:57:e3:e0:96:10:16:92:11:2c:
dd:62:b9:da:9a:ca:49:f0:26:45:66:8e:5f:f9:05:
85:33:26:b6:db:88:be:e6:c8:15:b1:12:a2:59:c1:
18:21:e2:5a:40:bb:58:92:bc:f6:e3:55:09:be:87:
a1:e1:64:03:7f:67:65:50:e1:1f:0c:a6:5e:1d:e7:
b0:8a:ca:88:2b:b8:f4:70:f3:a3:f6:74:b2:0f:7e:
41:2e:ca:4c:f2:d3:2c:d4:bb:49:1d:df:de:9f:d4:
92:12:ba:d9:c2:18:ec:9c:9d:16:10:2c:ca:f3:c2:
a8:ce:dc:e8:2e:ac:1a:64:38:b2:bd:b3:44:90:a9:
e6:64:a4:c6:6b:33:24:1d:d0:18:16:6c:0f:6e:55:
67:a7:f8:72:91:7c:08:7b:2e:c0:57:8f:59:a2:6b:
96:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:F7:A8:05:BB:A9:ED:27:C0:B5:1D:1C:8B:9F:BF:41:87:8F:1E:64
X509v3 Authority Key Identifier:
keyid:81:60:1C:22:13:8B:57:19:C4:02:7E:EE:75:EF:74:67:9C:E6:8C:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWAcIhOLVxnEAn7ude90Z5zmjKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/02d351-9aba-49af-ab74-a10f85046bf8/1/VveoBbup7SfAtR0ci5-_QYePHmQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/02d351-9aba-49af-ab74-a10f85046bf8/1/gWAcIhOLVxnEAn7ude90Z5zmjKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.206.0/24
Signature Algorithm: sha256WithRSAEncryption
39:84:e9:86:93:42:7c:fc:11:fc:ce:1f:c6:6e:bc:0b:17:a8:
0b:07:cc:52:b5:ac:30:d5:d3:b7:08:1a:bf:7d:de:2e:32:1c:
b3:ca:ba:df:dd:27:85:68:a9:4f:ff:e8:62:a0:62:2e:29:ce:
70:36:95:0b:41:cf:b6:d6:29:19:b9:08:4c:ab:50:20:fd:27:
2b:ac:d6:c1:cd:dc:fa:df:f2:64:94:d3:1f:78:42:f6:6e:1a:
7f:0a:d3:e1:e9:af:85:35:72:d1:db:47:40:a0:0b:00:57:3e:
0f:7a:35:ec:5c:4e:af:8f:49:a4:fb:13:c0:22:a3:57:2f:1d:
e3:4f:2d:aa:f0:86:9c:b3:ef:d3:04:30:ed:1b:7d:13:63:5e:
86:03:76:67:78:b5:33:6b:d2:23:0c:b9:49:68:54:8b:4e:21:
45:d3:fc:23:c8:44:ca:0c:3e:94:01:64:c2:07:8d:1a:f0:be:
c7:53:e8:d2:22:e7:63:b7:20:a2:f2:a3:e1:41:dd:35:cb:e6:
20:d8:e5:c8:6e:fc:76:0f:4e:8d:41:c9:92:70:e1:4b:bc:ef:
fb:e1:87:aa:4f:2a:8c:de:ef:ac:c7:8d:d1:e1:bb:65:5c:98:
23:10:ed:63:f4:52:46:12:2c:7e:f2:a0:fc:7f:ae:65:84:03:
cd:bf:a7:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:54:50 2025 by rpki-client