Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/J77jo9bOLCQlRa9jZXP7dkS-vsc.roa
File: J77jo9bOLCQlRa9jZXP7dkS-vsc.roa (raw, json)
Hash identifier: BkSOP5B+rRmnn+pH6eFEIdlnuALStZNG5jHgh2jmArM=
Subject key identifier: 27:BE:E3:A3:D6:CE:2C:24:25:45:AF:63:65:73:FB:76:44:BE:BE:C7
Certificate issuer: /CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Certificate serial: 019423D7CDCA8104652CF7F54FE2616A9D0D
Authority key identifier: 69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/J77jo9bOLCQlRa9jZXP7dkS-vsc.roa
Signing time: Wed 01 Jan 2025 21:48:52 +0000
ROA not before: Wed 01 Jan 2025 21:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42708
IP address blocks: 79.141.174.0/23 maxlen: 23
185.117.88.0/23 maxlen: 23
185.174.133.0/24 maxlen: 24
193.42.39.0/24 maxlen: 24
2a01:8640:6::/48 maxlen: 48
2a01:8640:9::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:cd:ca:81:04:65:2c:f7:f5:4f:e2:61:6a:9d:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Validity
Not Before: Jan 1 21:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=27bee3a3d6ce2c242545af636573fb7644bebec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:57:fa:d1:b2:d9:23:42:1d:b0:43:5d:c2:6f:
03:0b:2b:13:59:67:65:0a:2c:cb:f1:41:7d:e9:80:
24:fc:06:a3:79:a3:1a:78:e6:17:ce:99:43:dd:3a:
2e:3f:0b:2e:a2:91:42:53:f9:62:a2:b2:27:8c:18:
f9:86:cd:e9:43:95:cf:ca:d3:33:e9:ad:67:40:79:
77:dd:b7:d9:82:e0:49:fc:e6:3e:51:da:84:75:1d:
ab:0a:e7:04:fa:67:ac:cf:67:93:04:d5:26:7d:51:
38:0a:92:2c:85:63:82:f2:97:12:b8:95:4d:36:9d:
78:cd:19:fb:d7:24:71:4a:3e:86:fb:9e:6e:ac:ae:
c8:1c:b8:4e:19:fd:3e:fb:34:56:2f:80:46:18:5c:
71:92:39:91:45:b3:6d:e3:d9:56:48:6e:63:45:f7:
8a:6c:99:c8:4c:72:89:17:81:23:95:fc:ad:7a:a8:
68:36:9b:f1:3b:b3:31:e7:d1:81:56:79:be:16:de:
f3:e1:a6:50:62:da:92:a3:c5:2f:8e:9f:db:13:de:
ed:56:6e:91:f7:62:75:f5:cd:2b:0d:58:e6:5a:cc:
c5:7e:87:5e:8b:0f:4b:1a:54:a8:13:c8:62:55:1f:
e4:81:65:05:4c:74:b9:21:eb:ae:50:9c:d7:40:34:
88:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:BE:E3:A3:D6:CE:2C:24:25:45:AF:63:65:73:FB:76:44:BE:BE:C7
X509v3 Authority Key Identifier:
keyid:69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/J77jo9bOLCQlRa9jZXP7dkS-vsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.141.174.0/23
185.117.88.0/23
185.174.133.0/24
193.42.39.0/24
IPv6:
2a01:8640:6::/48
2a01:8640:9::/48
Signature Algorithm: sha256WithRSAEncryption
25:5c:78:f2:ae:13:25:0c:0c:e9:e4:48:25:dc:c2:a0:65:86:
f8:17:56:00:f9:46:85:22:59:f6:6d:96:e3:42:8d:b9:57:e8:
34:9b:94:50:15:7a:f5:c5:7f:e4:a9:30:df:6a:77:df:03:40:
c5:5d:7b:54:8f:89:b1:88:bd:69:40:c5:18:a6:ed:63:60:24:
a7:9a:cf:34:c4:17:36:9d:b9:8f:47:b5:82:20:78:be:4b:31:
0f:7f:7a:97:53:ed:23:d1:28:d2:e8:a8:5a:62:96:74:8a:c3:
fc:89:64:6a:dd:b0:b8:88:a9:12:ae:8a:57:cb:05:d9:dc:e1:
cf:39:b3:18:a6:a6:38:40:dd:8c:c1:90:64:44:c0:75:ba:33:
41:5f:16:3a:72:5a:f1:31:fd:80:0f:11:44:77:43:74:98:14:
cf:ec:fc:8d:e2:64:a6:88:77:8b:49:05:e5:98:d1:50:93:95:
85:2b:02:b5:5f:fa:b5:73:8c:d5:71:31:f9:2c:23:42:98:12:
ae:e1:28:06:2b:3e:4d:da:b4:3f:5e:71:4f:74:1b:35:37:ef:
15:cd:4e:66:87:7f:73:89:e7:46:dc:05:d6:8d:5d:c5:6b:68:
d3:a2:7e:9d:04:36:99:5a:47:a1:ac:e8:a5:fd:d0:d2:d3:41:
d3:5e:d0:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:11 2025 by rpki-client