Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/VzoNXL780cFrtxBAM22HPsqCfbY.roa
File: VzoNXL780cFrtxBAM22HPsqCfbY.roa (raw, json)
Hash identifier: r8ASjL2fERxq4oWQV1zbe0dNGLgz5xWOZYb0jAuonuU=
Subject key identifier: 57:3A:0D:5C:BE:FC:D1:C1:6B:B7:10:40:33:6D:87:3E:CA:82:7D:B6
Certificate issuer: /CN=0c5140282591f9912f9639ee1412b6d1dcff0861
Certificate serial: 01941FFAB2E8434A2D0D8D792A4E84BFF342
Authority key identifier: 0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/VzoNXL780cFrtxBAM22HPsqCfbY.roa
Signing time: Wed 01 Jan 2025 03:48:30 +0000
ROA not before: Wed 01 Jan 2025 03:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212330
IP address blocks: 188.72.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:b2:e8:43:4a:2d:0d:8d:79:2a:4e:84:bf:f3:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5140282591f9912f9639ee1412b6d1dcff0861
Validity
Not Before: Jan 1 03:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=573a0d5cbefcd1c16bb71040336d873eca827db6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:09:cb:ad:dc:b8:c0:d5:de:36:bb:af:2c:2e:
d9:94:b1:40:52:89:1d:7d:b3:ef:c7:43:c7:0e:55:
a4:3e:82:2d:e0:8f:8c:2a:e0:8e:91:d1:83:b5:4c:
d0:07:6d:4f:d4:d7:65:0d:df:73:6d:6c:c5:57:db:
70:f5:92:2f:f3:ea:0e:ec:a0:e2:1e:76:65:ac:bd:
91:79:47:64:cd:a3:4a:05:5a:a8:c1:b2:b2:af:72:
67:85:f2:cd:2d:14:d7:98:54:cc:34:cd:d8:cd:88:
5a:e6:3a:e3:8c:e9:c2:e7:3c:63:9f:43:f1:3d:4c:
fc:3b:b3:df:7c:0a:be:af:7c:27:d9:a1:01:56:b4:
08:1b:e1:07:56:9b:8c:71:31:ae:b1:63:a5:0c:fd:
2e:6b:85:95:3e:6b:54:1c:14:ec:e2:b1:84:1e:a9:
19:03:c4:6e:c3:98:02:7b:e3:b2:67:75:67:16:dc:
00:f6:64:ef:1d:84:9d:40:cb:24:52:6a:82:69:57:
17:6b:46:a9:2a:86:54:ef:40:0c:12:38:3d:1e:cb:
68:2e:2a:89:14:0b:75:43:73:d3:fe:f4:d3:9c:93:
57:44:71:f2:83:77:50:00:c1:d2:e1:d5:bf:59:b1:
dd:f8:c1:73:fb:28:1c:f2:18:bd:bc:e0:ba:c1:86:
79:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:3A:0D:5C:BE:FC:D1:C1:6B:B7:10:40:33:6D:87:3E:CA:82:7D:B6
X509v3 Authority Key Identifier:
keyid:0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/VzoNXL780cFrtxBAM22HPsqCfbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.72.1.0/24
Signature Algorithm: sha256WithRSAEncryption
56:ad:a5:50:d1:4d:e3:3f:58:ab:af:4e:60:dc:47:91:58:d6:
00:a5:41:5a:8b:78:16:f3:26:c2:06:44:3a:28:47:ab:41:aa:
4b:de:af:ca:c8:94:0a:e6:8e:af:73:d4:a6:17:da:ba:57:74:
81:3e:d2:a3:6f:68:82:d4:6e:6d:a6:c0:15:77:0e:0c:f4:2d:
d6:40:82:06:1f:f3:5a:8b:2b:34:8c:56:78:9f:4a:43:23:bc:
23:57:4e:c6:ef:7c:df:5f:08:14:b6:4b:31:81:05:2d:99:75:
e3:2d:4b:3b:cc:0b:ad:08:a4:2f:a3:38:d8:6e:65:e5:97:89:
e5:b1:51:17:b3:c2:c2:94:1e:6a:1c:9b:95:4c:e5:b8:93:4d:
e3:99:44:b1:03:74:1a:d0:15:19:cd:51:29:e9:3e:cd:71:45:
20:4e:8a:6d:ad:97:ec:be:84:14:2b:89:f4:c6:01:26:d2:03:
13:38:d2:f3:1c:08:b6:56:ac:04:85:be:34:2e:22:0e:97:46:
6f:36:be:7c:d0:a8:24:ea:25:c0:ea:6a:88:55:c1:dc:d8:0e:
a6:e3:6c:a1:09:4b:bd:0f:1d:78:1a:24:6d:73:65:9a:8c:a0:
b5:7e:bd:b0:01:37:00:3a:07:eb:d3:2e:04:0a:4d:a6:da:06:
9f:48:a7:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:13:54 2025 by rpki-client