Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/VoPDHE74Xr_ZMKBPVLbRBIDC8gE.roa
File: VoPDHE74Xr_ZMKBPVLbRBIDC8gE.roa (raw, json)
Hash identifier: A9WHdLxbQ7t7ovZZiJPbZqyydMmXMTjoT/gtMFQy8qc=
Subject key identifier: 56:83:C3:1C:4E:F8:5E:BF:D9:30:A0:4F:54:B6:D1:04:80:C2:F2:01
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 019423D70A6CD35FAA1CF1300AC94D29F4D3
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/VoPDHE74Xr_ZMKBPVLbRBIDC8gE.roa
Signing time: Wed 01 Jan 2025 21:48:02 +0000
ROA not before: Wed 01 Jan 2025 21:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29641
IP address blocks: 193.124.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:0a:6c:d3:5f:aa:1c:f1:30:0a:c9:4d:29:f4:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 1 21:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5683c31c4ef85ebfd930a04f54b6d10480c2f201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:49:cf:ca:a8:f9:06:7c:1d:bb:14:8c:df:5f:
1e:3f:22:90:04:27:20:d4:a4:9d:1f:c4:6f:ac:4f:
18:24:f2:d5:1c:57:8d:10:fb:3a:70:3c:c7:89:ec:
c1:68:34:2e:5c:2a:fd:c6:33:07:34:4e:2a:c2:af:
7c:ea:54:d9:d1:30:08:de:5e:5f:c5:aa:c1:69:b1:
89:cc:8a:08:9f:f0:28:64:86:4f:4f:91:d0:64:07:
e2:e5:9b:59:32:77:24:88:ac:19:f0:c2:20:63:d5:
df:b8:34:9d:b9:81:00:65:fb:d8:b3:0e:07:57:fb:
9a:0a:f8:5f:3e:e6:7c:a1:e2:85:86:2a:15:97:7b:
b2:73:5e:7f:72:02:6f:98:ce:99:6e:29:20:64:c1:
8d:8b:f0:d3:f5:d4:3d:63:68:4b:29:bc:57:d7:88:
2c:29:4f:7d:86:cd:0e:c8:59:2e:7a:0e:8a:0f:4e:
b1:35:ac:44:7a:0c:82:91:d3:a6:54:b3:2a:b5:ef:
9c:3d:6e:0c:76:4e:4e:53:90:47:27:2f:ec:b3:05:
4a:0b:45:3a:ae:cd:a2:27:ef:30:d3:8e:14:22:69:
b1:a2:1f:b3:46:1e:c3:86:48:28:63:d2:a2:1a:ec:
1b:a2:3e:d0:c0:cf:63:4a:c9:68:36:95:64:e0:3f:
dc:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:83:C3:1C:4E:F8:5E:BF:D9:30:A0:4F:54:B6:D1:04:80:C2:F2:01
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/VoPDHE74Xr_ZMKBPVLbRBIDC8gE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.189.0/24
Signature Algorithm: sha256WithRSAEncryption
93:ad:c0:cb:3e:b6:83:37:76:e0:81:86:ff:ff:6f:95:63:85:
aa:8c:b4:16:31:ac:99:e5:04:60:a0:79:47:d6:0f:62:c0:f1:
58:c2:b0:7c:de:eb:b2:70:9f:5a:c6:50:8c:f6:38:05:dc:3d:
1e:7c:64:bf:a3:fe:6b:70:7e:80:6e:69:7e:82:36:23:83:90:
f1:03:bd:91:08:7b:87:3a:66:1e:5f:aa:a2:ff:3e:a7:f8:ee:
f2:c7:68:8f:96:13:04:aa:aa:4f:f4:c0:04:8e:36:7a:51:e2:
12:ee:1f:dc:f5:72:c5:ab:e7:71:26:b7:8b:99:66:19:90:cd:
e6:a6:81:8d:34:0e:3a:26:6b:96:85:e6:e4:67:8a:21:d0:4f:
b8:36:fe:f2:6d:73:16:c2:ec:49:32:87:33:f2:e9:a2:3b:49:
bf:77:ad:60:92:6d:93:3d:0d:8e:0a:b0:64:c8:97:89:5d:6f:
49:f3:a3:a6:3a:14:b5:fa:9b:f8:d1:b4:7d:19:88:02:16:d6:
03:03:46:a8:ee:d5:7d:a9:51:42:75:1c:2c:0e:7f:77:73:75:
6c:ec:60:ce:22:b3:1d:e7:f6:1d:fe:87:1f:7f:e7:fe:6c:66:
eb:92:61:9e:16:57:41:e3:21:a9:b4:a4:ee:75:8b:32:1d:61:
41:39:5a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:07:59 2025 by rpki-client