Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/vQsJW15dMwHZY104nt15UgW_JpU.roa
File: vQsJW15dMwHZY104nt15UgW_JpU.roa (raw, json)
Hash identifier: Wpy6rJjJCiowwMoCuc7Oz0XTeA0XwRwWa9jhMg3QDw0=
Subject key identifier: BD:0B:09:5B:5E:5D:33:01:D9:63:5D:38:9E:DD:79:52:05:BF:26:95
Certificate issuer: /CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Certificate serial: 0194228DEDCFFBE96DCE1B4607A8F68EE5D3
Authority key identifier: 5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/vQsJW15dMwHZY104nt15UgW_JpU.roa
Signing time: Wed 01 Jan 2025 15:48:34 +0000
ROA not before: Wed 01 Jan 2025 15:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56547
IP address blocks: 79.127.8.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:ed:cf:fb:e9:6d:ce:1b:46:07:a8:f6:8e:e5:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Validity
Not Before: Jan 1 15:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bd0b095b5e5d3301d9635d389edd795205bf2695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:1a:49:4b:01:ae:3b:0b:24:7f:f1:c3:fb:96:
e1:7d:c7:74:12:a4:d2:de:73:9d:84:1a:eb:50:85:
0b:1d:9c:3e:e3:d1:98:fb:4c:d0:ec:23:6b:a2:57:
f0:73:3e:0b:14:1f:4f:8c:c1:c0:9f:da:2d:b8:c2:
8a:99:ac:6d:a5:d9:ae:cf:4f:6d:41:ed:35:6f:ef:
f3:0c:b6:bf:57:4e:a0:7f:7f:70:a5:3c:ae:2c:58:
1a:63:7a:77:37:23:af:64:ce:be:30:e2:46:76:9e:
bc:5b:ce:60:ee:65:a2:29:9a:fc:47:e3:75:25:79:
6f:b6:fe:67:07:99:c0:7b:d4:67:bb:3a:6c:0e:5e:
5a:7d:c2:8f:d6:03:4e:58:e6:84:b3:f3:f5:fb:45:
af:62:cc:ee:66:f6:39:b1:ef:0d:fd:0f:13:7f:3b:
c9:1c:d2:4f:4e:66:44:3c:21:3f:8b:82:5b:11:59:
e5:07:cb:11:a5:54:80:ff:51:88:10:01:4a:57:f0:
2e:27:6f:55:6e:08:08:61:36:74:d5:3c:0f:f5:f8:
f8:39:8f:86:61:ae:4e:11:7a:f9:10:30:d4:6f:eb:
aa:4f:9d:25:9b:e2:1b:50:0e:6f:fe:2b:17:2a:63:
8a:0e:99:b9:20:a6:46:14:d1:74:cc:33:6f:04:f0:
d4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:0B:09:5B:5E:5D:33:01:D9:63:5D:38:9E:DD:79:52:05:BF:26:95
X509v3 Authority Key Identifier:
keyid:5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/vQsJW15dMwHZY104nt15UgW_JpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.127.8.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:7d:f7:4c:12:78:e8:47:7b:93:89:e6:a8:e0:e2:8f:11:fa:
02:88:c9:54:fd:71:24:e9:d8:fd:18:40:78:9e:07:50:24:86:
47:1f:1e:37:30:5e:54:1e:78:b8:22:13:73:ae:3c:90:48:ef:
97:40:1d:55:d9:5d:b5:01:62:c9:df:b3:7c:52:1a:9c:4e:25:
f0:d9:62:6d:69:ae:a6:e6:06:42:ab:20:0d:f7:19:61:12:57:
8a:69:4f:8f:e7:f2:ba:27:4c:78:86:31:8a:da:a4:e7:7a:cb:
cf:1b:63:20:ad:af:0d:c9:32:c9:4b:d5:90:86:4e:03:94:17:
00:cb:74:5f:06:a2:3c:c4:cc:d5:65:70:34:70:b8:9e:d3:5c:
33:10:86:0a:a0:58:6c:1a:c2:28:a5:76:78:25:d4:ae:18:dc:
a1:3d:81:44:be:84:60:b9:d8:7d:2b:91:c7:20:16:7b:23:57:
7d:72:f6:af:74:95:3f:a6:75:45:b7:32:9d:49:3c:e7:ed:09:
a2:ae:84:83:37:01:c0:c9:eb:64:5f:78:d6:5e:95:c0:23:00:
f5:3e:b4:2b:de:7b:11:a1:b5:4d:eb:81:98:01:f0:a0:d1:0e:
57:0f:dd:4b:ea:d5:6e:33:09:d0:b8:13:de:82:26:47:07:df:
2e:fa:b6:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 04:21:37 2025 by rpki-client