Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/ea3638-6981-4de8-ad82-4d62eacd95ec/1/VLw3XZodbe23DM8NjdXfx1I1mhs.roa
File: VLw3XZodbe23DM8NjdXfx1I1mhs.roa (raw, json)
Hash identifier: M0HVeYogsonT2ikAKccQSS05DNPlbJ4aCVB9InYzfwM=
Subject key identifier: 54:BC:37:5D:9A:1D:6D:ED:B7:0C:CF:0D:8D:D5:DF:C7:52:35:9A:1B
Certificate issuer: /CN=0a192818f0a0d9739dc1238baf2c417e4e8e830c
Certificate serial: 01856FB11EBAD12C72ECCEF6CAAE5219D69C
Authority key identifier: 0A:19:28:18:F0:A0:D9:73:9D:C1:23:8B:AF:2C:41:7E:4E:8E:83:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ChkoGPCg2XOdwSOLryxBfk6Ogww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/ea3638-6981-4de8-ad82-4d62eacd95ec/1/VLw3XZodbe23DM8NjdXfx1I1mhs.roa
Signing time: Sun 01 Jan 2023 23:35:56 +0000
ROA not before: Sun 01 Jan 2023 23:35:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201211
IP address blocks: 185.164.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:b1:1e:ba:d1:2c:72:ec:ce:f6:ca:ae:52:19:d6:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a192818f0a0d9739dc1238baf2c417e4e8e830c
Validity
Not Before: Jan 1 23:35:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=54bc375d9a1d6dedb70ccf0d8dd5dfc752359a1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:91:81:99:27:f0:68:76:1e:28:74:a4:01:81:
08:8a:cd:d1:ce:d2:83:39:cf:5b:d0:b1:9c:07:3b:
ae:60:8d:f0:5d:0e:5f:11:cc:af:c5:f4:62:bc:35:
e2:b7:fa:b0:9c:c0:6f:58:e2:7d:86:bf:d2:75:32:
a4:5e:e5:65:13:28:ae:98:41:0c:87:1a:c2:83:b6:
07:64:da:fa:6e:e1:e2:2b:22:16:bc:cb:ee:87:55:
09:1f:2f:ca:56:af:9d:ce:31:70:8f:70:90:51:a3:
99:49:92:81:1b:b1:93:85:39:32:ed:a8:8b:e0:6b:
06:c7:d0:f5:83:2e:de:f0:67:ae:37:10:57:79:6d:
f6:47:0a:6e:5b:92:f2:fb:ce:b1:de:86:38:c8:ae:
f3:c9:35:83:2f:ed:a9:f0:f0:94:09:85:67:31:88:
d8:1c:be:2c:86:76:44:fb:4f:b4:22:ff:c4:f5:09:
a6:f7:0d:ac:73:bb:54:5b:b0:30:53:03:20:b2:e7:
ed:99:4e:b4:e3:eb:83:46:c9:c4:95:1a:fb:40:fc:
97:7b:a8:61:aa:65:7f:c4:57:ef:63:61:11:7f:f6:
cf:62:8b:84:af:0d:f6:39:4d:de:5c:7e:86:2d:17:
5d:c7:3b:f4:bf:c9:14:75:f4:4a:e2:8f:29:6f:42:
a6:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:BC:37:5D:9A:1D:6D:ED:B7:0C:CF:0D:8D:D5:DF:C7:52:35:9A:1B
X509v3 Authority Key Identifier:
keyid:0A:19:28:18:F0:A0:D9:73:9D:C1:23:8B:AF:2C:41:7E:4E:8E:83:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ChkoGPCg2XOdwSOLryxBfk6Ogww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ea3638-6981-4de8-ad82-4d62eacd95ec/1/VLw3XZodbe23DM8NjdXfx1I1mhs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ea3638-6981-4de8-ad82-4d62eacd95ec/1/ChkoGPCg2XOdwSOLryxBfk6Ogww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.164.174.0/24
Signature Algorithm: sha256WithRSAEncryption
17:08:b1:4f:bf:38:1e:dd:04:90:32:c4:3c:eb:c9:de:24:86:
06:96:40:92:07:12:4b:b2:86:fd:e5:3f:99:05:e6:31:07:fa:
42:6c:f7:94:3e:5b:b6:ee:3e:58:48:1f:68:d4:15:e0:5e:64:
98:4c:df:04:2b:fb:ed:e1:cf:6d:7e:12:da:3d:10:6e:6f:e8:
da:ab:71:d5:f1:d2:c2:86:b9:ac:63:48:98:28:74:1e:e7:2b:
15:4c:13:72:3f:6b:a0:22:38:96:58:8e:66:63:b0:8f:f0:d6:
9e:38:1b:94:e4:23:6a:fd:54:f4:4b:6d:d2:73:64:5c:91:bf:
2b:ae:e2:29:df:dc:eb:cd:37:eb:89:cb:1a:a5:b6:55:e4:a9:
bc:3f:fb:7e:70:32:45:66:f6:f9:be:6a:48:cd:aa:e5:48:97:
87:d5:22:74:ef:fb:53:77:f5:34:72:dc:77:35:27:6a:53:1a:
6d:19:00:59:06:3f:bd:20:fc:5f:73:8c:47:5c:55:6e:28:e6:
27:1c:3c:b9:35:60:de:af:3e:0d:e4:55:08:64:46:ca:c4:ad:
4b:94:0e:55:3f:b8:25:2f:8c:32:5b:25:e3:d5:10:9e:92:0e:
5e:5c:fa:b4:e9:1a:e5:53:81:e4:96:29:a0:20:fe:94:bd:f3:
43:6b:70:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:56:48 2025 by rpki-client