Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/VHRVXn6aDGinTjiE7BA05enfH2Q.roa
File: VHRVXn6aDGinTjiE7BA05enfH2Q.roa (raw, json)
Hash identifier: HWebi466PogM3Mfy4s/kKB9Ol8sTTEX1NAe07QPFw7U=
Subject key identifier: 54:74:55:5E:7E:9A:0C:68:A7:4E:38:84:EC:10:34:E5:E9:DF:1F:64
Certificate issuer: /CN=00cb6701ff829394db69ce67c30ad8735f126018
Certificate serial: 019422FBF379A60E0A8081F929E132080E17
Authority key identifier: 00:CB:67:01:FF:82:93:94:DB:69:CE:67:C3:0A:D8:73:5F:12:60:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AMtnAf-Ck5Tbac5nwwrYc18SYBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/VHRVXn6aDGinTjiE7BA05enfH2Q.roa
Signing time: Wed 01 Jan 2025 17:48:44 +0000
ROA not before: Wed 01 Jan 2025 17:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2116
IP address blocks: 193.22.94.0/24 maxlen: 24
194.0.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:f3:79:a6:0e:0a:80:81:f9:29:e1:32:08:0e:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00cb6701ff829394db69ce67c30ad8735f126018
Validity
Not Before: Jan 1 17:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5474555e7e9a0c68a74e3884ec1034e5e9df1f64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ef:c9:81:78:53:99:e8:60:82:fd:9e:30:17:
ed:7c:c2:49:ff:ae:71:b7:17:99:6b:b8:9c:91:4f:
1c:c2:39:3b:0d:c1:1f:4a:be:97:f8:94:a4:f3:51:
dc:9d:4d:71:cd:95:b9:99:d4:b2:89:81:f2:0d:bc:
62:b7:24:96:d1:71:bb:7f:ee:4d:8e:d7:60:55:49:
68:ba:f2:04:fe:d7:0f:56:53:f0:87:3f:67:a1:79:
03:f6:70:6d:0a:6e:ed:ab:c2:80:ea:fe:5f:9a:36:
f7:21:43:44:7a:ba:7e:0d:51:b2:b1:4a:80:56:08:
d7:b5:06:aa:f0:8a:a0:53:3f:1d:a2:41:1d:d1:c4:
68:70:6e:62:cf:43:bd:54:c9:d0:2c:cf:8e:bc:d0:
ca:40:42:80:39:f5:78:cf:f8:84:32:0e:83:03:05:
68:18:4d:28:ea:8b:bd:88:1e:2b:ef:c8:9e:bc:23:
06:19:d9:2c:e9:60:56:69:9a:89:7a:b7:47:74:73:
84:37:51:1a:99:d7:ee:97:89:82:e8:e0:ee:00:ea:
cf:7e:89:13:d4:ea:44:b3:40:03:8e:50:5a:75:e9:
5d:57:b0:12:52:76:3a:e3:14:a9:27:60:56:45:61:
75:ec:3d:51:b1:48:d6:b8:5e:dc:3d:5b:9f:f8:fc:
5e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:74:55:5E:7E:9A:0C:68:A7:4E:38:84:EC:10:34:E5:E9:DF:1F:64
X509v3 Authority Key Identifier:
keyid:00:CB:67:01:FF:82:93:94:DB:69:CE:67:C3:0A:D8:73:5F:12:60:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AMtnAf-Ck5Tbac5nwwrYc18SYBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/VHRVXn6aDGinTjiE7BA05enfH2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.94.0/24
194.0.192.0/24
Signature Algorithm: sha256WithRSAEncryption
72:c4:a1:24:5b:70:67:f1:1d:6a:01:57:81:df:22:30:ee:c9:
72:fd:02:89:46:68:36:cf:97:02:e7:c5:83:1b:03:f7:51:3c:
af:44:2a:91:36:10:9f:65:9f:89:ea:ee:68:30:81:48:0c:28:
9a:87:27:a7:52:77:00:2d:1e:a2:6d:f2:84:4f:0c:ed:52:74:
80:93:e8:20:f4:71:9d:cf:2b:58:9a:aa:58:a7:e1:c0:c3:fd:
fb:52:a8:a6:17:65:95:51:61:3d:6a:d6:4e:dd:88:1b:c6:04:
c4:c3:3d:73:a3:dc:eb:46:b4:d7:41:31:e5:56:5b:c6:b4:dd:
33:05:84:f5:15:8a:fc:b8:82:05:fe:7e:f3:3a:03:d6:ca:08:
28:ef:5a:17:93:d9:b1:96:7d:3a:18:ac:a1:5a:92:a9:88:4f:
2a:5b:24:8b:cb:43:5d:54:92:69:e7:b8:cb:6a:f2:b0:f0:14:
6c:14:15:bd:cf:03:21:14:76:27:b4:47:fb:48:f8:38:7d:7c:
d7:af:f1:3f:5b:6e:ed:4f:f6:cb:a3:3e:a2:ac:55:84:9b:bb:
73:17:12:db:a1:fe:2e:a5:66:44:ae:b7:04:1d:7b:70:83:c9:
94:ec:b6:03:62:e9:40:7b:92:45:c9:1f:de:75:d1:e7:ac:8a:
bc:60:c6:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:46:49 2025 by rpki-client