Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/vt_rPo7gouwwld0Wtx2yl78VaDo.roa
File: vt_rPo7gouwwld0Wtx2yl78VaDo.roa (raw, json)
Hash identifier: EkfeCWgR2Alx3N7RkrGCi4ja0KhKv8p/q1+SEhsog1s=
Subject key identifier: BE:DF:EB:3E:8E:E0:A2:EC:30:95:DD:16:B7:1D:B2:97:BF:15:68:3A
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01942220196DB47F9792142419E7A51BBCD7
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/vt_rPo7gouwwld0Wtx2yl78VaDo.roa
Signing time: Wed 01 Jan 2025 13:48:36 +0000
ROA not before: Wed 01 Jan 2025 13:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16628
IP address blocks: 45.8.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:19:6d:b4:7f:97:92:14:24:19:e7:a5:1b:bc:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 1 13:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bedfeb3e8ee0a2ec3095dd16b71db297bf15683a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:df:3e:fb:12:6f:60:c1:8e:48:e3:61:5f:91:
8e:53:01:1e:f8:14:96:d3:6c:09:2c:21:af:89:ec:
b1:58:f4:0e:de:12:9c:17:8f:64:d4:6f:d6:8b:c8:
66:9a:92:78:9f:31:12:ad:2e:01:02:de:8c:61:3a:
6d:e1:9b:4a:4e:bb:68:b7:10:1d:ca:dc:18:67:39:
f1:d2:2d:73:33:45:f4:99:c9:29:96:a2:6d:77:c4:
9c:29:29:5b:2e:68:c0:45:71:e8:57:f8:d9:e1:17:
57:1d:bc:1c:7e:d7:1c:0b:c1:78:89:36:11:b7:96:
55:4c:f7:38:7b:60:96:a9:7a:2a:cd:83:f5:da:50:
fc:93:3f:ac:65:f5:d2:be:a8:c7:68:ed:27:ad:11:
c3:22:51:56:4c:85:49:50:fd:9c:0e:89:24:61:dd:
f6:24:8b:62:b3:9c:d6:7e:92:65:53:0f:1c:16:12:
5c:50:f3:1f:b4:2a:87:e7:80:2d:98:5b:88:39:b0:
7e:c8:78:d3:e2:6c:2b:8c:a8:0c:cd:31:6c:ca:dc:
75:55:e3:6e:7a:b5:78:fa:44:a4:a5:75:ef:01:75:
96:99:21:41:1c:58:26:5b:00:e9:8a:81:5f:b0:44:
80:9d:c0:06:be:e2:81:ed:59:ab:2a:cc:a1:cf:dc:
da:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:DF:EB:3E:8E:E0:A2:EC:30:95:DD:16:B7:1D:B2:97:BF:15:68:3A
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/vt_rPo7gouwwld0Wtx2yl78VaDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.21.0/24
Signature Algorithm: sha256WithRSAEncryption
89:26:07:9e:2b:95:c4:36:e7:ed:db:63:47:22:52:3b:5c:8c:
2c:e7:81:90:14:b7:43:e3:a0:0f:a2:d7:da:f0:ee:15:c9:28:
cc:3b:7c:8c:3d:8f:fb:50:e4:57:05:48:5f:57:7f:38:50:e7:
a4:c0:55:24:a3:64:a0:e5:d2:39:4b:a5:50:b1:8a:1e:12:35:
25:74:d5:e5:d1:ff:08:20:89:59:24:d8:fc:ba:93:f2:3b:3b:
9e:56:d2:97:fe:0c:7a:20:84:20:d2:ea:8a:cc:e3:17:80:a3:
64:04:6a:47:8a:78:9c:f1:1a:ec:2e:84:2f:21:99:99:e5:58:
8e:61:6c:10:05:84:c0:43:0d:23:df:ee:73:5b:6d:f0:6d:6d:
cb:2d:02:5e:20:43:79:b6:d5:70:d4:4b:b2:42:a9:81:2a:75:
12:53:8f:1c:56:88:08:ad:c2:cd:e5:ee:60:cf:06:07:ac:8c:
12:a8:dc:38:47:d9:a4:3d:47:46:bd:2c:c4:52:5f:58:c6:ab:
82:fa:79:20:69:4e:a8:6e:84:03:79:0f:07:77:4d:c4:50:81:
5e:4c:80:e0:5c:cf:f1:b5:01:7d:c0:7c:ad:7c:a2:f5:f4:00:
f2:0c:e9:1d:5c:02:3f:64:96:2c:a6:a8:bc:80:23:76:a9:c9:
a3:9a:7e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 09:28:20 2025 by rpki-client