Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/vm5i6AVzmYzAz9qPwbnD4VrLfVA.roa
File: vm5i6AVzmYzAz9qPwbnD4VrLfVA.roa (raw, json)
Hash identifier: VDQ8oeDiLzJU7KaKEM2DHEI37PMjg/GP0JQI1knZDEc=
Subject key identifier: BE:6E:62:E8:05:73:99:8C:C0:CF:DA:8F:C1:B9:C3:E1:5A:CB:7D:50
Certificate issuer: /CN=a6785773df313b91711bf6bc5b149ecc246b9e89
Certificate serial: 019427B52101E0DFF83EE3B24DC1157885C3
Authority key identifier: A6:78:57:73:DF:31:3B:91:71:1B:F6:BC:5B:14:9E:CC:24:6B:9E:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/vm5i6AVzmYzAz9qPwbnD4VrLfVA.roa
Signing time: Thu 02 Jan 2025 15:49:29 +0000
ROA not before: Thu 02 Jan 2025 15:49:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208324
IP address blocks: 185.239.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:21:01:e0:df:f8:3e:e3:b2:4d:c1:15:78:85:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6785773df313b91711bf6bc5b149ecc246b9e89
Validity
Not Before: Jan 2 15:49:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=be6e62e80573998cc0cfda8fc1b9c3e15acb7d50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f7:20:cc:bc:c1:6f:2a:14:cf:ce:10:b6:2c:
30:ef:f9:ef:17:a4:98:a7:c3:39:11:d1:fb:af:5d:
41:b7:74:e6:87:ea:bf:60:8c:12:6d:4d:e7:73:32:
ef:db:be:b6:b9:99:a8:60:84:a6:ac:a7:b1:4d:51:
14:b9:62:77:ca:d2:4f:f2:bb:e8:25:37:75:b8:65:
b6:6b:d9:bc:1f:43:b0:bc:50:c7:79:77:c1:bf:94:
34:de:36:e6:2b:0d:f0:ed:a5:30:50:18:9b:ab:37:
46:b3:c9:9d:a4:91:a0:76:e0:5a:6e:77:e7:d8:f6:
a2:68:dd:c6:0f:d0:97:67:68:85:74:36:8e:81:86:
79:ec:48:8c:15:81:a7:f4:60:92:79:98:be:37:9c:
ca:52:66:82:86:56:25:9f:ce:8d:57:8c:7d:19:08:
d3:3c:ff:78:98:09:0c:7a:7c:39:3e:52:c3:6c:7e:
f5:f3:ac:f7:89:5e:d5:b1:d4:b9:bf:17:e0:31:ab:
1d:61:b8:d0:ad:f1:4f:e9:07:c6:55:ac:3a:f3:33:
1e:4b:5c:af:7f:04:87:af:a9:5b:93:33:ad:cf:7b:
b9:e9:01:aa:e0:bc:46:08:ee:78:42:9f:c3:3c:d8:
d2:41:42:0b:c6:b4:32:a9:95:75:cc:a1:92:99:79:
a9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:6E:62:E8:05:73:99:8C:C0:CF:DA:8F:C1:B9:C3:E1:5A:CB:7D:50
X509v3 Authority Key Identifier:
keyid:A6:78:57:73:DF:31:3B:91:71:1B:F6:BC:5B:14:9E:CC:24:6B:9E:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/vm5i6AVzmYzAz9qPwbnD4VrLfVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.179.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:89:08:67:d0:77:37:73:07:40:c0:51:56:32:59:34:ac:5e:
4f:d7:af:14:e5:1e:0c:6d:a8:96:dd:7d:c3:02:35:43:44:88:
0d:7b:46:9b:bb:ea:7c:2a:64:2c:1f:24:fe:39:b8:b8:61:19:
40:44:8d:41:43:09:0c:6d:c0:ae:50:63:d0:fd:1c:02:84:65:
09:ab:a3:fd:b1:f4:f0:5a:97:b1:11:db:e5:fb:6f:1d:a4:f5:
9b:10:be:54:82:f2:9a:90:cc:1a:93:85:9b:6e:0a:28:fb:73:
de:3a:a0:fe:14:87:da:44:35:cc:f4:6c:df:9a:d5:f4:80:68:
fa:df:ab:69:51:80:82:20:67:c3:cc:35:33:00:09:62:75:78:
ed:dd:90:37:db:9c:ae:58:d1:03:c5:56:d6:c6:0d:ce:a1:7f:
09:b0:de:af:a1:ae:20:c6:9d:91:a8:0e:bb:67:95:f0:50:c9:
ba:1a:3f:81:7e:2c:07:90:be:6c:1c:49:8f:7a:db:7c:58:d3:
82:84:e5:04:9a:e0:c6:aa:63:44:b9:4b:56:60:e2:08:fd:98:
64:10:e8:2f:e0:d6:a2:0b:b0:18:fd:d5:03:3f:a8:02:c9:3d:
09:33:07:9d:60:08:af:0f:fd:05:46:e1:e0:bb:4f:59:0d:8a:
8d:47:0b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:08:32 2025 by rpki-client