Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/vVfAaVV4RQ-v10Ln3XvS11S8vIQ.roa
File: vVfAaVV4RQ-v10Ln3XvS11S8vIQ.roa (raw, json)
Hash identifier: pAR+AqdDFp48BMgN58F8Y9CgzqQ/1Cphi0yffPmxt8E=
Subject key identifier: BD:57:C0:69:55:78:45:0F:AF:D7:42:E7:DD:7B:D2:D7:54:BC:BC:84
Certificate issuer: /CN=6e6d7bcabfcc308d420053c482a0d59fb1282e30
Certificate serial: 019424448C3BA4BDB2ADC4702C8A416F301A
Authority key identifier: 6E:6D:7B:CA:BF:CC:30:8D:42:00:53:C4:82:A0:D5:9F:B1:28:2E:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bm17yr_MMI1CAFPEgqDVn7EoLjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/vVfAaVV4RQ-v10Ln3XvS11S8vIQ.roa
Signing time: Wed 01 Jan 2025 23:47:39 +0000
ROA not before: Wed 01 Jan 2025 23:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 145.219.32.0/22 maxlen: 22
145.219.36.0/22 maxlen: 22
145.219.40.0/21 maxlen: 21
145.219.48.0/21 maxlen: 21
145.219.56.0/21 maxlen: 21
145.219.64.0/18 maxlen: 18
145.219.128.0/17 maxlen: 17
193.176.255.0/24 maxlen: 24
2a04:b0c4::/30 maxlen: 30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:8c:3b:a4:bd:b2:ad:c4:70:2c:8a:41:6f:30:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e6d7bcabfcc308d420053c482a0d59fb1282e30
Validity
Not Before: Jan 1 23:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bd57c0695578450fafd742e7dd7bd2d754bcbc84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:aa:a8:e8:c9:bf:99:ad:65:22:9d:78:ef:4d:
a3:d5:3f:c0:55:bb:c8:da:3b:ef:48:6e:3f:90:9a:
68:8a:26:e1:07:01:90:62:05:eb:fd:87:a7:43:b0:
77:86:78:4b:e0:e1:a5:8b:06:08:3b:24:1a:db:05:
c9:fa:e0:03:c5:69:d1:19:48:fc:1c:21:71:ba:84:
d0:b4:2d:d1:a2:f9:c7:4c:db:aa:7b:ac:52:36:e0:
f4:7c:e0:05:9d:81:92:dc:39:76:1d:fa:1c:05:f3:
8c:23:d8:cb:92:51:de:1e:fc:96:24:3f:e9:d4:4d:
0c:35:d7:3d:aa:eb:ca:d1:8f:2c:9a:b4:e6:1a:ff:
c6:ab:18:41:f4:d8:d5:8f:91:9b:a5:b4:89:cf:db:
eb:39:ad:5f:6a:f3:09:b5:34:61:30:85:1f:46:18:
8a:b2:0c:6e:e4:ec:e7:70:7e:6f:a4:9e:a5:e4:b3:
cb:f9:a1:cc:b6:8f:46:c1:35:a5:43:87:85:f2:42:
88:eb:a8:80:7c:19:cb:6a:ea:0e:da:68:64:5a:35:
c6:48:17:78:26:d7:6e:cd:46:6e:46:9e:a9:11:cf:
37:25:81:a9:51:72:af:ce:68:70:1f:3e:7a:ae:f7:
a6:4b:c7:94:f2:3a:3d:45:5b:b9:e2:05:39:ec:60:
ed:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:57:C0:69:55:78:45:0F:AF:D7:42:E7:DD:7B:D2:D7:54:BC:BC:84
X509v3 Authority Key Identifier:
keyid:6E:6D:7B:CA:BF:CC:30:8D:42:00:53:C4:82:A0:D5:9F:B1:28:2E:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bm17yr_MMI1CAFPEgqDVn7EoLjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/vVfAaVV4RQ-v10Ln3XvS11S8vIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.219.32.0-145.219.255.255
193.176.255.0/24
IPv6:
2a04:b0c4::/30
Signature Algorithm: sha256WithRSAEncryption
6e:e9:68:e6:89:c7:02:57:c7:a7:62:a4:b8:cc:4e:e2:07:59:
ab:85:13:50:44:7d:27:7e:09:29:88:91:f0:df:84:5e:3c:2c:
10:27:90:f9:cb:cf:88:77:b3:96:2b:c6:ef:36:16:bb:ca:07:
1b:d9:8e:56:0b:1c:55:f5:43:81:63:a4:05:53:e3:6c:c1:5b:
f7:e6:16:c1:01:fa:98:bc:d4:8f:7d:52:11:c9:37:bb:0b:ab:
05:c1:36:0b:45:9d:2f:31:b0:15:7b:24:84:cd:7a:93:89:64:
c8:e3:b6:c9:d9:f6:19:f6:70:0d:86:13:7b:69:a5:68:0a:00:
4c:cd:ce:7c:2a:2c:0c:8f:8e:b9:ea:03:34:c1:f6:99:1f:7f:
9a:42:88:17:ac:4f:92:43:36:0f:ee:88:07:a3:c9:a9:52:50:
15:76:16:bc:6a:07:65:aa:d0:bc:75:ab:87:68:12:99:b8:0c:
2a:e3:08:a6:c3:2a:f1:14:9e:1c:dd:0b:82:f6:95:9c:06:ba:
f4:d6:20:74:f7:c2:0d:75:bd:e5:d0:25:37:13:aa:b0:0e:2b:
f0:ec:50:87:45:4a:6c:c4:56:cf:f9:69:4a:76:f0:83:22:38:
5e:67:ae:9d:4b:a3:4b:79:c6:d9:3d:79:83:84:ae:9c:27:0a:
a0:fc:57:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:05:53 2025 by rpki-client