Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/vVJ9mSBx6hNqTzTJrHhncI477is.roa
File: vVJ9mSBx6hNqTzTJrHhncI477is.roa (raw, json)
Hash identifier: IBqwcIh1REPuGTD9omt2SEUvQhYlPWiLYp90qo+sIJg=
Subject key identifier: BD:52:7D:99:20:71:EA:13:6A:4F:34:C9:AC:78:67:70:8E:3B:EE:2B
Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial: 019423D75DBFC52451982718EF8A7621369D
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/vVJ9mSBx6hNqTzTJrHhncI477is.roa
Signing time: Wed 01 Jan 2025 21:48:24 +0000
ROA not before: Wed 01 Jan 2025 21:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30823
IP address blocks: 5.1.81.0/24 maxlen: 32
178.251.228.0/23 maxlen: 32
178.251.228.0/24 maxlen: 32
2a00:f826:3::/48 maxlen: 48
2a01:363::/32 maxlen: 32
2a01:364::/32 maxlen: 32
2a01:365::/32 maxlen: 32
2a01:366::/32 maxlen: 32
2a01:367::/32 maxlen: 32
2a01:367:c204::/48 maxlen: 48
2a01:367:cff3::/48 maxlen: 48
2a01:367:dead::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:5d:bf:c5:24:51:98:27:18:ef:8a:76:21:36:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Validity
Not Before: Jan 1 21:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bd527d992071ea136a4f34c9ac7867708e3bee2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9b:a2:9d:4a:bc:3c:05:8a:9d:95:81:86:21:
3f:4c:21:a1:cf:26:a6:8d:00:a6:38:21:69:d0:a2:
ae:e0:9a:e0:f9:e6:14:7c:27:37:03:6b:da:68:4a:
43:d5:bb:2e:54:3e:a0:80:e5:12:c3:ee:87:a8:26:
a1:0f:ae:73:8f:d4:f5:10:4b:75:8c:54:0f:31:44:
34:5a:e9:85:d9:cf:e6:53:e6:a9:fa:3c:2c:50:58:
11:69:4b:78:90:e7:81:f0:64:3b:bb:f6:be:ba:5e:
73:a9:6b:7e:d9:f1:8b:b7:86:25:07:c8:90:2a:fc:
03:97:25:57:d1:dc:61:5e:fd:17:3d:e2:21:60:fe:
e1:4c:1c:a7:2c:54:ce:56:38:3b:c4:df:a4:47:20:
8e:c6:75:46:0d:b7:7b:b5:56:7e:67:57:fc:7c:02:
17:22:19:22:03:3e:9e:2f:13:1d:f2:8c:ca:d1:1b:
57:60:db:f6:7e:ab:17:ad:c7:9a:87:b3:83:03:15:
0d:8d:2c:0a:c3:6e:eb:08:3e:bf:3f:7e:71:1f:88:
24:0b:c0:93:73:1d:bc:7e:5d:91:3c:0d:65:ee:e7:
4e:d4:0c:db:c7:af:2f:c3:aa:77:2e:cc:13:99:fc:
15:b6:db:9a:b3:7a:cd:f1:89:80:fb:48:c9:22:66:
75:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:52:7D:99:20:71:EA:13:6A:4F:34:C9:AC:78:67:70:8E:3B:EE:2B
X509v3 Authority Key Identifier:
keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/vVJ9mSBx6hNqTzTJrHhncI477is.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.81.0/24
178.251.228.0/23
IPv6:
2a00:f826:3::/48
2a01:363::-2a01:367:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
8a:5d:27:a7:b7:29:6a:09:f0:f2:44:4f:c3:bf:44:3d:af:e2:
c7:c7:d4:d1:f9:93:06:6c:b8:d5:d6:9b:4d:48:df:de:ba:80:
2c:66:fe:15:cb:cd:43:18:e6:96:51:c0:c8:b7:c0:b2:ee:5b:
3c:42:1e:5f:4d:a8:07:00:0a:c8:cf:5a:e2:24:98:ad:b1:b0:
cb:82:40:10:ea:93:b4:64:01:25:68:c3:b5:dc:32:6a:23:b0:
a7:2e:dd:6f:0c:f8:6a:59:dc:f7:b6:bc:8e:08:3c:3d:ab:cd:
d2:d3:f8:31:4a:2b:dd:97:e1:eb:85:db:c9:51:35:4a:ed:9e:
28:bd:1f:2d:b3:a5:a1:51:df:56:12:7a:91:60:96:12:0e:cb:
d9:1f:20:f3:9f:21:9f:56:98:38:a0:2d:58:d2:69:09:27:36:
01:4f:63:fb:77:78:b2:91:c3:38:92:a3:a5:a9:c9:8f:2a:9b:
a9:b9:a3:b8:3c:c4:a3:9f:4f:74:b7:e3:8c:38:c3:38:4b:d0:
f6:45:94:ba:90:33:27:bc:28:3c:4c:cf:7e:f2:05:3e:3c:a6:
f3:41:7d:c0:a5:3f:95:1c:12:72:00:81:02:ed:0f:4c:78:3d:
10:35:65:0b:82:6d:67:b5:76:6c:f1:da:4d:49:84:b2:f4:ca:
d2:b2:c8:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:39:51 2025 by rpki-client