Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/VHskNMe_9EcN5Ps8VV0dA6UjJfM.roa
File: VHskNMe_9EcN5Ps8VV0dA6UjJfM.roa (raw, json)
Hash identifier: +hDMAKuEEYDkIBhUAQS0ED3/5LZ3DcqLT6h5fu0q5Vc=
Subject key identifier: 54:7B:24:34:C7:BF:F4:47:0D:E4:FB:3C:55:5D:1D:03:A5:23:25:F3
Certificate issuer: /CN=04a2ae2cd094333018c41daafb474c6cfa80d07d
Certificate serial: 0194228D8363266F1874BBA206A7EB4BDD79
Authority key identifier: 04:A2:AE:2C:D0:94:33:30:18:C4:1D:AA:FB:47:4C:6C:FA:80:D0:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/VHskNMe_9EcN5Ps8VV0dA6UjJfM.roa
Signing time: Wed 01 Jan 2025 15:48:07 +0000
ROA not before: Wed 01 Jan 2025 15:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8290
IP address blocks: 185.77.144.0/22 maxlen: 22
195.28.128.0/19 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:83:63:26:6f:18:74:bb:a2:06:a7:eb:4b:dd:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a2ae2cd094333018c41daafb474c6cfa80d07d
Validity
Not Before: Jan 1 15:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=547b2434c7bff4470de4fb3c555d1d03a52325f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:35:88:ce:27:21:78:53:43:ea:72:64:95:0d:
bb:73:4a:1a:1c:c4:8c:3d:75:6d:92:76:d1:81:24:
71:b3:6b:d3:ff:20:77:48:1c:b5:ca:56:c6:6d:fd:
1c:c6:53:f0:10:c6:c7:e6:74:97:c8:cb:ea:c4:89:
3d:5f:e4:26:9f:18:05:5f:01:98:7f:fa:3d:32:23:
14:fc:08:d6:1f:95:86:71:0e:96:7c:52:4f:1b:f1:
a4:5f:fa:89:40:c4:4e:77:5a:2b:b1:e1:ce:80:8a:
1b:32:65:51:f4:16:6d:55:c0:37:3e:d3:72:22:49:
6d:e0:bb:b8:b9:65:26:aa:56:e7:9e:fc:df:8a:fd:
75:87:19:ae:70:74:03:3a:a9:1a:b0:06:b7:ca:cf:
16:85:22:33:9d:36:49:7a:8d:ad:1a:92:fa:b8:3d:
5a:bf:d9:06:f2:d1:5b:64:ae:c7:d4:80:13:1d:e9:
45:a0:18:0a:2c:7b:da:f0:ba:2a:2a:de:64:67:b0:
51:e1:52:43:17:02:e8:e3:3f:38:53:d9:bd:e8:1b:
21:03:66:af:4e:c1:a1:ea:c0:59:b5:ad:3d:63:04:
ee:05:11:7c:31:d6:92:a1:7d:24:d9:bb:70:4f:8b:
14:d8:bc:96:f9:7c:75:fa:8e:6f:66:50:43:37:ea:
27:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:7B:24:34:C7:BF:F4:47:0D:E4:FB:3C:55:5D:1D:03:A5:23:25:F3
X509v3 Authority Key Identifier:
keyid:04:A2:AE:2C:D0:94:33:30:18:C4:1D:AA:FB:47:4C:6C:FA:80:D0:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/VHskNMe_9EcN5Ps8VV0dA6UjJfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.77.144.0/22
195.28.128.0/19
Signature Algorithm: sha256WithRSAEncryption
35:1a:17:e0:83:0c:db:bc:1a:f6:7b:38:49:7a:b1:b0:ca:69:
ef:89:2f:21:3d:a4:5d:3f:17:f4:62:96:38:78:b9:e3:30:7a:
5d:bd:c4:b9:20:4f:da:df:a7:21:d3:46:56:72:58:fa:60:9f:
db:db:82:b4:05:bf:9f:fd:40:ee:1b:a4:86:d2:d4:c5:ed:13:
f7:0e:0c:52:5e:69:13:fd:65:a9:3c:1f:fc:12:b3:0c:e9:81:
98:73:b2:14:3a:7f:11:94:7f:45:1e:4b:68:a0:d7:6e:e1:4e:
37:83:f2:67:8d:98:8b:1d:36:4a:6f:2c:98:a4:53:d7:69:ff:
bd:a2:45:b2:29:87:aa:a4:de:d1:d9:98:45:75:35:40:3d:54:
45:1d:7d:7e:2a:5e:49:85:d7:29:81:a8:a9:8f:09:f7:7e:e2:
25:97:84:9e:d6:53:c7:61:9c:85:b4:ed:6c:e8:f3:bd:5e:01:
02:8c:aa:d0:80:60:af:83:2a:dc:74:da:8d:55:42:54:ca:5f:
7b:ff:de:37:bb:bf:e0:53:8e:24:48:d1:3b:53:8e:71:2b:bc:
7a:50:2b:1c:cb:5b:8c:59:b4:39:a4:1f:be:b5:df:a6:f5:36:
d8:6d:cd:e1:f2:79:b1:e0:28:6d:00:17:10:87:bd:d5:ff:06:
e4:d6:47:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:32:52 2025 by rpki-client