Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/b95ca0-853f-48ab-9b41-e0aee1bbf9e3/1/vxDWfcBErbw3QM5tYdBzh-7Akm8.roa
File: vxDWfcBErbw3QM5tYdBzh-7Akm8.roa (raw, json)
Hash identifier: qv/OhT65F1U2TWpmssPcn9SlD/6ghmK29vjWP8rBXfE=
Subject key identifier: BF:10:D6:7D:C0:44:AD:BC:37:40:CE:6D:61:D0:73:87:EE:C0:92:6F
Certificate issuer: /CN=5aedcb334d39e797817e2eb47703c018b4dc49d5
Certificate serial: 0194221FA5BCDEBE0055CE71CEEFC8372C7F
Authority key identifier: 5A:ED:CB:33:4D:39:E7:97:81:7E:2E:B4:77:03:C0:18:B4:DC:49:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wu3LM00555eBfi60dwPAGLTcSdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/b95ca0-853f-48ab-9b41-e0aee1bbf9e3/1/vxDWfcBErbw3QM5tYdBzh-7Akm8.roa
Signing time: Wed 01 Jan 2025 13:48:06 +0000
ROA not before: Wed 01 Jan 2025 13:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51983
IP address blocks: 194.88.6.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:a5:bc:de:be:00:55:ce:71:ce:ef:c8:37:2c:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5aedcb334d39e797817e2eb47703c018b4dc49d5
Validity
Not Before: Jan 1 13:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bf10d67dc044adbc3740ce6d61d07387eec0926f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:35:a8:31:d2:9b:94:c3:14:10:a0:42:ce:de:
9d:e1:ae:2e:a4:f1:19:33:fa:c3:4e:30:5c:83:6f:
ef:16:f1:23:2a:ca:b7:4e:b4:33:4b:42:c1:e7:b4:
1c:d9:7f:7d:29:6d:b4:a5:57:42:4c:fd:d8:fa:95:
10:b0:cf:5f:db:d8:82:31:ed:94:da:30:62:63:0a:
81:2f:39:93:91:aa:a8:ab:56:35:84:de:ca:21:d3:
61:2b:97:7b:33:58:f9:85:b8:95:a7:44:67:d8:19:
e4:a0:2b:c1:68:16:a3:58:8a:0b:b1:36:47:8f:37:
b3:cb:6b:af:76:4b:7e:9e:10:be:27:7b:8d:70:5b:
20:e8:de:f0:b7:91:b9:33:97:42:58:ef:eb:4e:d3:
96:e1:0a:8f:3a:13:57:c1:74:a5:ba:c3:f6:57:2e:
57:a0:ba:3d:b0:fb:79:53:62:fd:00:d4:e2:cf:4d:
68:39:3e:67:66:a6:9b:25:f8:f1:d8:27:f1:a5:40:
a9:38:92:b2:c6:bf:d8:ad:ed:c1:e1:e2:02:7c:cb:
d9:7c:01:28:1d:4d:4e:0f:28:a1:c0:ef:8c:4a:1a:
87:6e:52:6c:8b:6e:37:4f:df:71:4f:45:3c:a9:78:
b9:0d:65:29:b0:c7:06:d2:fd:44:97:cb:b5:e9:c4:
64:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:10:D6:7D:C0:44:AD:BC:37:40:CE:6D:61:D0:73:87:EE:C0:92:6F
X509v3 Authority Key Identifier:
keyid:5A:ED:CB:33:4D:39:E7:97:81:7E:2E:B4:77:03:C0:18:B4:DC:49:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wu3LM00555eBfi60dwPAGLTcSdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b95ca0-853f-48ab-9b41-e0aee1bbf9e3/1/vxDWfcBErbw3QM5tYdBzh-7Akm8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b95ca0-853f-48ab-9b41-e0aee1bbf9e3/1/Wu3LM00555eBfi60dwPAGLTcSdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.88.6.0/23
Signature Algorithm: sha256WithRSAEncryption
87:9f:c2:f7:27:75:4c:49:84:7d:23:2c:63:c0:73:bd:fd:f7:
47:7c:3f:61:a9:35:48:e9:44:a8:70:d9:50:ab:81:5c:8b:fd:
69:dd:5f:e8:ac:39:20:18:a6:e1:ef:81:22:fe:85:81:e2:03:
10:73:c6:3a:f7:39:9f:29:8d:e3:44:dd:24:f3:e7:d8:ce:b9:
4b:61:82:32:51:9d:63:d7:7e:30:d0:ce:8c:2f:b6:07:92:14:
58:1d:82:d5:02:62:f1:19:e2:d5:d0:9f:4f:4b:9b:d9:04:08:
83:63:a5:40:0c:d2:1d:b8:53:5d:74:81:34:bc:c9:d9:87:9f:
62:99:8d:07:f1:36:84:cc:d2:70:66:b5:97:57:b0:98:87:63:
96:38:33:d8:ef:64:d7:2d:19:66:b2:60:5a:c2:79:6e:b6:2a:
02:57:01:f3:aa:22:2a:c7:bd:50:d5:dc:bd:9a:19:69:e4:33:
09:f3:ed:53:e5:19:7c:b0:2b:35:47:60:47:38:e4:d5:28:4a:
8a:3e:23:0b:e0:12:41:6b:69:37:dc:4d:36:ef:20:aa:10:5d:
e2:29:92:68:5a:34:5e:4f:b5:32:75:42:da:5e:4b:80:20:04:
8b:7a:01:c8:ae:c0:18:cf:5b:fe:dc:63:cd:ac:11:be:90:ca:
44:1f:3e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:48:32 2025 by rpki-client