Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/3fd910-78bc-442a-88ac-8c52de6fa888/1/vev4R9SqcqVytee6s6Z0JR3COYM.roa
File: vev4R9SqcqVytee6s6Z0JR3COYM.roa (raw, json)
Hash identifier: 0hHUicyfDNcNzd9gVOE9ykNNh2B97kn9na0214xMYkU=
Subject key identifier: BD:EB:F8:47:D4:AA:72:A5:72:B5:E7:BA:B3:A6:74:25:1D:C2:39:83
Certificate issuer: /CN=519e97470c63fda14c3265eb741a70e3a8b69aff
Certificate serial: 01942824448EA1830501F214FEE96FFC9FBA
Authority key identifier: 51:9E:97:47:0C:63:FD:A1:4C:32:65:EB:74:1A:70:E3:A8:B6:9A:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UZ6XRwxj_aFMMmXrdBpw46i2mv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/3fd910-78bc-442a-88ac-8c52de6fa888/1/vev4R9SqcqVytee6s6Z0JR3COYM.roa
Signing time: Thu 02 Jan 2025 17:50:52 +0000
ROA not before: Thu 02 Jan 2025 17:50:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33886
IP address blocks: 194.50.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:44:8e:a1:83:05:01:f2:14:fe:e9:6f:fc:9f:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=519e97470c63fda14c3265eb741a70e3a8b69aff
Validity
Not Before: Jan 2 17:50:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bdebf847d4aa72a572b5e7bab3a674251dc23983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:09:a1:dc:67:05:48:a1:76:b5:21:fb:2b:a9:
08:c0:0f:64:26:4f:13:aa:c0:9c:b0:46:b9:e6:c1:
d7:ce:99:4f:69:85:0c:45:81:5c:08:65:2c:f1:49:
4e:2f:b5:e1:37:bf:e6:5f:d5:b6:c6:94:3d:73:36:
ae:81:95:70:8d:e7:fd:7f:2f:ea:48:9b:8d:81:0b:
03:cc:f8:23:1b:c3:c5:d1:34:a1:87:5a:f3:10:2f:
97:15:e9:41:95:45:b8:83:ee:a1:08:54:1a:83:38:
17:25:8a:0f:3b:b4:1a:db:1c:b6:88:dd:ea:35:10:
1a:64:b0:7b:a8:49:e6:2c:98:d5:9a:16:af:b0:d8:
af:3a:f6:a8:81:4d:cc:71:dd:dd:c8:a4:5f:2d:d7:
ac:6f:72:d2:dc:6b:8e:36:de:82:a4:8c:71:32:1a:
a5:d5:95:a7:8a:72:ba:cd:72:fb:15:e6:e2:29:73:
f5:cd:6e:c8:4c:7a:5f:e5:df:ec:23:c9:bd:31:4f:
17:e6:96:4d:2b:48:7d:df:23:41:03:46:32:05:d1:
69:c6:d8:cc:30:2c:70:56:90:8e:88:cf:70:de:9c:
c5:39:4e:ba:cc:2d:77:86:de:c9:6c:83:5b:87:7e:
8e:96:d0:b4:fc:07:b0:65:2a:c3:e3:36:61:06:7b:
4a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:EB:F8:47:D4:AA:72:A5:72:B5:E7:BA:B3:A6:74:25:1D:C2:39:83
X509v3 Authority Key Identifier:
keyid:51:9E:97:47:0C:63:FD:A1:4C:32:65:EB:74:1A:70:E3:A8:B6:9A:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZ6XRwxj_aFMMmXrdBpw46i2mv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3fd910-78bc-442a-88ac-8c52de6fa888/1/vev4R9SqcqVytee6s6Z0JR3COYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3fd910-78bc-442a-88ac-8c52de6fa888/1/UZ6XRwxj_aFMMmXrdBpw46i2mv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.181.0/24
Signature Algorithm: sha256WithRSAEncryption
43:90:01:35:72:16:24:91:52:55:00:c1:23:c1:15:75:9d:83:
ed:6d:b8:2d:29:1d:3c:27:57:fc:c1:6c:b7:2c:c1:83:79:9b:
d9:0a:06:bf:65:42:e0:e4:e2:1e:98:04:64:96:ab:2e:9c:51:
df:fe:3c:7c:11:a8:43:fe:d3:0f:ae:7b:c9:cf:61:01:0f:15:
fe:33:11:18:98:09:8f:d9:da:9d:4d:5b:64:4b:cd:f8:81:da:
b1:18:35:68:76:53:23:92:9e:86:b7:60:13:8a:8c:92:6b:3e:
8c:05:73:10:e3:0a:46:bf:a4:82:6e:f6:c1:b7:67:8c:88:bc:
dd:2a:4e:4c:c9:49:7f:0b:bc:88:f7:4a:1f:a9:46:4d:94:93:
de:55:b0:52:b5:4f:75:58:d6:cb:b1:df:bc:9e:f9:ed:93:9d:
bd:81:56:ac:f3:44:bf:09:41:65:ec:fb:a6:8f:f2:43:33:1c:
f6:6a:ec:76:bc:f5:e6:75:bd:92:02:0c:d1:a3:d8:17:a9:e1:
14:72:9e:16:26:1b:9b:12:bb:64:5b:03:03:26:0a:39:10:7e:
ff:e9:9c:86:17:ec:3f:c4:30:b9:06:6e:d7:e3:bd:87:80:4d:
b2:e5:e0:2f:85:82:ce:7a:e3:71:4f:6c:73:58:70:48:d2:8b:
53:b3:b4:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:11:04 2025 by rpki-client