Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/VpsRzQTJA64lC7vij3O8hFs3bzA.roa
File: VpsRzQTJA64lC7vij3O8hFs3bzA.roa (raw, json)
Hash identifier: 53hcaUQGM77OwpGZOxko49B9rWKmFC7/FKduRIYK6i8=
Subject key identifier: 56:9B:11:CD:04:C9:03:AE:25:0B:BB:E2:8F:73:BC:84:5B:37:6F:30
Certificate issuer: /CN=651bad95276947c7be536af4c870a3721f0b7761
Certificate serial: 01856DEF6694A7EA5BE1AEB747E4ED334BFA
Authority key identifier: 65:1B:AD:95:27:69:47:C7:BE:53:6A:F4:C8:70:A3:72:1F:0B:77:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRutlSdpR8e-U2r0yHCjch8Ld2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/VpsRzQTJA64lC7vij3O8hFs3bzA.roa
Signing time: Sun 01 Jan 2023 15:24:43 +0000
ROA not before: Sun 01 Jan 2023 15:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49981
IP address blocks: 213.184.85.0/24 maxlen: 24
2a09:3a00:3000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ef:66:94:a7:ea:5b:e1:ae:b7:47:e4:ed:33:4b:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=651bad95276947c7be536af4c870a3721f0b7761
Validity
Not Before: Jan 1 15:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=569b11cd04c903ae250bbbe28f73bc845b376f30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a0:ce:0e:18:89:35:b2:04:d6:13:d0:85:8b:
e8:db:df:b1:ef:7e:da:bb:6a:30:83:b0:f9:cb:14:
9e:2f:39:e9:fb:7e:76:7d:bf:c0:4f:2d:bb:fa:77:
e8:6e:9b:af:c5:2a:95:d1:02:87:f7:7c:22:db:0d:
c0:ea:94:87:1e:5a:69:58:1b:d8:13:2e:f9:b2:bc:
9a:cf:66:60:72:24:fe:49:36:7b:8e:88:3d:fa:4e:
0c:10:eb:c1:7a:4a:3a:9f:4f:b2:ae:43:ed:b8:ce:
14:83:a8:4b:84:38:10:73:ea:82:b7:b0:47:0a:f0:
bf:a5:a1:5c:d6:8c:04:bd:5f:4b:6b:6f:c8:95:d2:
a5:15:fe:d4:c5:ff:83:01:1e:65:1c:77:46:ac:34:
a1:bb:8f:1b:a3:8f:5b:75:a1:3c:1b:73:bb:5b:fe:
62:70:ea:16:bc:40:ed:ab:91:7e:fc:cf:8f:bd:8a:
86:34:27:e6:c1:75:3f:90:46:02:61:27:a3:73:95:
a2:5a:22:b3:59:0a:e5:08:a1:53:9b:dd:cd:98:e1:
90:e1:30:28:8a:be:0e:c5:a1:63:ef:00:ff:b0:2d:
f6:7a:d3:12:68:9c:39:91:4d:c4:ec:0c:49:3a:07:
c7:87:79:c0:51:39:eb:e0:2a:10:00:53:9f:7d:46:
26:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:9B:11:CD:04:C9:03:AE:25:0B:BB:E2:8F:73:BC:84:5B:37:6F:30
X509v3 Authority Key Identifier:
keyid:65:1B:AD:95:27:69:47:C7:BE:53:6A:F4:C8:70:A3:72:1F:0B:77:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRutlSdpR8e-U2r0yHCjch8Ld2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/VpsRzQTJA64lC7vij3O8hFs3bzA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/ZRutlSdpR8e-U2r0yHCjch8Ld2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.184.85.0/24
IPv6:
2a09:3a00:3000::/40
Signature Algorithm: sha256WithRSAEncryption
17:a3:47:ac:bf:db:99:c2:6f:6c:db:42:80:b6:49:0b:93:60:
dd:54:31:2a:fb:f3:d4:a9:aa:cd:6f:bd:cd:57:ec:e9:0c:a8:
61:13:7f:e1:f7:92:67:b6:fe:10:0a:d3:85:d5:88:6d:2d:60:
af:10:97:1b:83:0f:5d:65:0f:7b:d6:0e:fd:c6:a0:9d:11:e2:
8e:db:b5:c4:ce:4e:d5:f1:43:de:bd:16:af:fc:42:90:1c:17:
7a:1b:03:80:31:ce:b9:d2:aa:8e:65:7e:c0:76:a4:2c:29:00:
d2:a1:f1:de:67:53:ba:63:03:8f:53:dc:27:7e:af:27:e4:2f:
3f:18:38:25:63:cd:15:4f:24:0d:c0:6b:1a:fb:c3:da:c4:02:
26:63:5d:f5:eb:7b:d3:f4:fe:f1:ab:54:7e:20:f7:6a:57:56:
17:02:4d:04:ee:1b:2b:e3:71:f2:5f:44:27:fa:06:8f:48:aa:
f2:7f:6e:8c:8e:23:10:a9:46:7e:66:7e:a7:1d:1b:07:6a:64:
18:42:d0:ec:76:ea:b2:e9:4e:44:e2:c8:78:f2:20:d4:76:e6:
0e:07:81:8a:99:4f:67:3a:d7:71:8c:62:41:ab:7f:35:ef:97:
81:f2:8f:db:66:bb:25:26:6c:40:63:23:f0:ca:74:aa:7f:b7:
4a:96:88:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:44:03 2025 by rpki-client