Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/vzHyhh5HbyybH8e2L2p6WLWrTAs.roa
File: vzHyhh5HbyybH8e2L2p6WLWrTAs.roa (raw, json)
Hash identifier: pemGMurs9tSXdm3CozX4NApOqx3owIuQ7I2ySxitcuA=
Subject key identifier: BF:31:F2:86:1E:47:6F:2C:9B:1F:C7:B6:2F:6A:7A:58:B5:AB:4C:0B
Certificate issuer: /CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4
Certificate serial: 019424448E11B018B38F7B90DCC856D6DCB0
Authority key identifier: 35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/vzHyhh5HbyybH8e2L2p6WLWrTAs.roa
Signing time: Wed 01 Jan 2025 23:47:40 +0000
ROA not before: Wed 01 Jan 2025 23:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198156
IP address blocks: 91.106.29.0/24 maxlen: 24
212.7.216.0/24 maxlen: 24
212.7.217.0/24 maxlen: 24
2a01:6e80:fffe::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:8e:11:b0:18:b3:8f:7b:90:dc:c8:56:d6:dc:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4
Validity
Not Before: Jan 1 23:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bf31f2861e476f2c9b1fc7b62f6a7a58b5ab4c0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2f:28:aa:9e:06:04:2c:19:11:df:79:9a:81:
f2:e8:a8:4e:6d:ef:f3:6c:eb:45:33:c7:8e:27:b1:
5a:88:2c:6b:75:51:8c:2a:9e:a9:23:7d:a3:1d:2a:
d5:b0:e4:fe:70:0d:12:41:fe:95:aa:f3:21:8b:1c:
c3:12:c1:e0:e1:8f:14:87:03:a3:27:f7:65:2b:b9:
82:19:cd:86:52:d2:51:26:20:bf:10:17:ce:c2:35:
fe:0c:a5:56:82:f3:20:28:d9:81:3d:c5:7f:95:cb:
68:5a:18:54:c5:5a:bd:02:c0:e8:fe:5e:dc:7a:ff:
d5:1b:80:fe:8a:b7:cb:62:f2:6b:c9:69:1c:9f:5f:
af:3e:19:71:38:66:08:31:07:c2:18:59:03:d2:71:
2b:8e:5d:cd:75:d9:5b:5e:cf:8d:06:c8:da:c3:9e:
af:4b:81:33:a7:c7:7d:ef:b2:35:99:9b:ad:34:c7:
da:6f:5e:7d:f1:fa:c3:89:5c:1e:ab:7b:62:be:19:
4f:91:5f:64:f9:d0:55:01:ec:12:8b:58:df:86:bd:
22:ab:43:c5:60:f1:72:0e:b3:dd:4f:e3:41:04:52:
82:9e:b3:91:35:08:8c:b0:c4:72:a3:8e:ba:fa:61:
91:6b:9c:f6:35:2c:73:2b:c8:cd:98:28:02:5f:0a:
95:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:31:F2:86:1E:47:6F:2C:9B:1F:C7:B6:2F:6A:7A:58:B5:AB:4C:0B
X509v3 Authority Key Identifier:
keyid:35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/vzHyhh5HbyybH8e2L2p6WLWrTAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.106.29.0/24
212.7.216.0/23
IPv6:
2a01:6e80:fffe::/48
Signature Algorithm: sha256WithRSAEncryption
13:08:d6:c0:13:ed:9d:6b:6b:6a:cd:be:f4:1c:13:30:e7:cc:
55:cd:d3:bb:53:cc:82:ee:d4:f5:09:88:a7:d9:ba:63:2e:1d:
32:8f:ec:e3:e4:ac:0d:11:29:b2:e9:10:6d:30:43:a6:d0:bf:
ae:85:34:37:5e:7e:f8:42:a5:43:c1:1e:c0:ab:5e:99:8e:6b:
72:44:37:75:0a:0f:65:7d:31:21:97:58:f9:7d:d7:cf:9f:63:
26:40:ff:c4:98:10:d8:7f:ff:11:34:59:fa:99:cd:1a:a9:0b:
2a:10:d3:d4:f2:02:06:ba:54:cd:90:60:f1:e1:72:a9:ab:1c:
48:12:9a:30:ae:06:b5:03:79:d0:4a:0c:7a:f2:e2:78:24:1f:
5a:1d:a8:40:df:e3:58:0b:c0:3f:e6:01:96:17:63:3d:7d:b5:
99:07:eb:0e:5e:51:c7:36:34:bd:54:a6:2d:a0:71:8e:04:71:
41:44:26:20:87:62:61:e3:f9:15:aa:4b:cf:9e:60:e5:db:11:
c3:b6:51:aa:24:1d:17:99:82:39:4c:eb:39:31:22:a5:4b:9f:
7b:d9:e1:4c:ce:83:ac:8b:e7:cc:e8:02:88:d7:75:01:79:8a:
93:8f:05:eb:71:77:cf:f3:51:4e:3f:b2:c9:3e:f6:ae:57:bc:
a1:f3:a4:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:48:34 2025 by rpki-client