Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/4119f6-4aaa-4a3c-985b-a95a815ab371/1/VWKQ_Lmstyws9TfC2VVYfRXWjF8.roa
File: VWKQ_Lmstyws9TfC2VVYfRXWjF8.roa (raw, json)
Hash identifier: +HfQ3a68/KHwaRiVRbS5AxAXKtK0ucjG2SmMY96NxzU=
Subject key identifier: 55:62:90:FC:B9:AC:B7:2C:2C:F5:37:C2:D9:55:58:7D:15:D6:8C:5F
Certificate issuer: /CN=df0085c0e617e079594a01ba6fb666fc784e00fc
Certificate serial: 01857139ECE12B401096F9AF344C57497EB8
Authority key identifier: DF:00:85:C0:E6:17:E0:79:59:4A:01:BA:6F:B6:66:FC:78:4E:00:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3wCFwOYX4HlZSgG6b7Zm_HhOAPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/4119f6-4aaa-4a3c-985b-a95a815ab371/1/VWKQ_Lmstyws9TfC2VVYfRXWjF8.roa
Signing time: Mon 02 Jan 2023 06:44:59 +0000
ROA not before: Mon 02 Jan 2023 06:44:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34412
IP address blocks: 146.19.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:39:ec:e1:2b:40:10:96:f9:af:34:4c:57:49:7e:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df0085c0e617e079594a01ba6fb666fc784e00fc
Validity
Not Before: Jan 2 06:44:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=556290fcb9acb72c2cf537c2d955587d15d68c5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:0f:6c:63:74:aa:75:64:0e:cf:57:df:66:ff:
58:cd:4e:bb:76:64:a3:ed:db:26:b6:2d:a2:9e:c7:
77:52:9a:d4:24:d9:6c:6a:ad:90:08:60:1f:5a:92:
e4:1b:83:b1:b0:2a:24:ca:4c:95:92:53:1d:18:ae:
37:2e:c5:8a:bc:9a:84:49:fd:a1:9d:35:e4:66:f0:
2e:2b:13:70:7d:33:5c:33:47:de:81:74:ea:20:99:
2b:a3:86:5e:c1:74:52:67:12:06:aa:f6:0d:dc:2d:
1a:3f:52:d1:67:f3:b7:ed:b1:7e:7d:13:10:9c:a8:
de:5d:8f:4d:7e:d5:80:24:71:a5:52:32:12:74:0b:
f0:d0:7b:61:30:9e:86:49:56:59:cb:7a:80:15:1b:
91:67:93:cb:5e:ab:ed:d8:3c:3b:a7:af:f1:fe:73:
3a:83:d2:f5:94:9b:6a:85:4e:f4:9a:2a:b5:07:f0:
90:8c:3c:73:96:bc:96:ba:ba:fd:1d:c3:ef:c6:e6:
f0:23:8f:24:29:ac:ac:09:a8:79:d1:88:cc:de:01:
5a:97:09:1c:8a:ee:a3:98:08:5d:58:4b:d7:f8:d0:
15:ad:75:00:b6:e9:d2:f9:ae:8d:46:5d:a8:7a:64:
ec:ef:f7:1c:66:ce:a7:5a:a0:47:ba:79:76:d1:59:
a3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:62:90:FC:B9:AC:B7:2C:2C:F5:37:C2:D9:55:58:7D:15:D6:8C:5F
X509v3 Authority Key Identifier:
keyid:DF:00:85:C0:E6:17:E0:79:59:4A:01:BA:6F:B6:66:FC:78:4E:00:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3wCFwOYX4HlZSgG6b7Zm_HhOAPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4119f6-4aaa-4a3c-985b-a95a815ab371/1/VWKQ_Lmstyws9TfC2VVYfRXWjF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4119f6-4aaa-4a3c-985b-a95a815ab371/1/3wCFwOYX4HlZSgG6b7Zm_HhOAPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.217.0/24
Signature Algorithm: sha256WithRSAEncryption
95:5e:56:5e:03:98:a8:e5:27:b5:1f:ee:5a:78:c9:bd:57:cf:
46:9d:51:9a:e6:4e:a7:2e:47:cf:6d:be:04:25:f2:40:2c:28:
c1:97:ba:41:22:e3:0a:1b:d3:1d:77:e1:ed:4b:00:a9:69:bb:
64:f0:a1:a6:a0:c1:12:77:aa:ae:bc:9c:80:40:f2:7c:c6:b6:
93:99:06:d0:6e:5f:aa:54:47:a0:b2:ae:f4:d6:39:0e:2e:6e:
5e:e5:aa:eb:e9:2e:b5:cd:c2:0a:de:af:85:df:fc:a5:20:ba:
10:e1:42:0a:b2:40:d0:ba:45:df:59:5f:fd:7e:f4:84:d7:59:
4a:86:27:9c:69:00:bb:75:09:5a:ff:7e:6b:ac:de:58:87:d7:
28:55:4c:c9:cc:77:80:de:d8:10:ad:6e:7c:7d:21:bf:3d:04:
6a:f2:95:97:0a:1f:e7:75:c7:fe:33:4f:e6:09:b2:95:27:0b:
a1:93:67:97:c8:9b:4b:39:f8:25:96:99:3f:54:6b:d2:59:1d:
1e:65:e9:9f:c2:9a:d0:8c:59:88:e0:3c:f2:83:95:97:d9:9b:
09:27:ab:54:ec:70:b8:ee:e6:0c:c4:d1:c2:ef:5c:ce:e2:aa:
da:20:16:8c:70:a0:4f:8e:b1:3d:2a:39:0b:7c:6d:0f:38:67:
39:fa:46:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:14:15 2025 by rpki-client