Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/VtZIJN365t5csuc84vB_32_6ja8.roa
File: VtZIJN365t5csuc84vB_32_6ja8.roa (raw, json)
Hash identifier: 7tICPrBqn6QResKvTFXU0bHdKF7MePITgqHQLSCORYw=
Subject key identifier: 56:D6:48:24:DD:FA:E6:DE:5C:B2:E7:3C:E2:F0:7F:DF:6F:FA:8D:AF
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019427483E1D6D3E31A3AFBE8A8574C8F05B
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/VtZIJN365t5csuc84vB_32_6ja8.roa
Signing time: Thu 02 Jan 2025 13:50:33 +0000
ROA not before: Thu 02 Jan 2025 13:50:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8280
IP address blocks: 192.71.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:3e:1d:6d:3e:31:a3:af:be:8a:85:74:c8:f0:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=56d64824ddfae6de5cb2e73ce2f07fdf6ffa8daf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3f:aa:0c:f1:a5:dc:fd:7f:73:93:e8:70:4b:
1d:a4:13:18:c7:98:29:e0:0c:01:a4:7f:ca:48:ae:
a6:cb:c1:04:77:7c:10:89:c7:88:cc:ca:fd:af:2b:
b3:18:aa:5d:7c:ea:a1:6a:91:9a:56:73:5f:fa:3b:
6f:e1:be:bc:0a:ec:dc:7a:4c:30:4e:e1:9a:1f:26:
f9:21:ea:a9:83:f1:63:7e:63:d3:66:35:99:1b:a9:
ba:c6:25:dc:53:df:d0:ea:a9:87:3c:ec:a3:4b:61:
49:a2:27:c1:9a:6b:93:b3:ee:fc:24:43:9f:ec:2f:
2a:b4:c9:50:f8:ef:78:dd:16:e0:dc:7d:48:ea:ab:
8d:1a:3c:58:31:e0:3a:70:0e:fc:13:f4:ae:2e:e0:
b5:7e:5e:a7:18:cb:b5:25:b3:6e:36:f5:2d:df:17:
e1:ad:61:ce:c7:ac:7b:a2:12:61:6c:8e:3e:93:56:
23:d0:40:65:15:96:ea:14:75:7b:6f:14:5e:7b:df:
9d:c5:2a:60:e7:f4:4e:8b:e5:e6:72:14:7e:1b:53:
57:30:2c:86:48:7b:57:86:17:0d:fc:af:b6:72:7d:
dc:59:c3:a3:b8:52:91:72:7a:79:6e:5d:da:ff:1f:
03:4a:98:65:8f:96:0c:86:73:53:81:6d:da:e7:31:
db:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:D6:48:24:DD:FA:E6:DE:5C:B2:E7:3C:E2:F0:7F:DF:6F:FA:8D:AF
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/VtZIJN365t5csuc84vB_32_6ja8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.71.166.0/24
Signature Algorithm: sha256WithRSAEncryption
73:cf:77:50:de:44:02:db:67:21:a3:ae:83:f8:a7:d9:7c:e4:
91:62:ce:30:33:3c:a3:e5:e8:80:e1:ab:b8:c6:bb:74:2c:e1:
9d:2f:8e:4e:58:96:22:ad:89:f1:1c:62:1e:c2:3c:6b:3a:3e:
06:ff:9e:21:88:42:29:bd:3e:f0:b8:89:66:32:e2:fe:78:00:
c6:d3:b5:bd:06:9f:0c:e1:15:9a:8f:b9:60:19:76:33:97:fa:
3b:30:2a:f6:d8:e3:64:5c:6e:e1:d3:b8:e9:23:8b:ed:aa:26:
03:1f:a2:66:34:1f:c0:7f:1b:da:a1:f6:8e:3a:a0:b5:5c:f1:
1e:72:69:fe:e6:41:ae:66:f9:b8:01:8b:43:01:a1:26:2e:6c:
f1:ae:69:bf:58:4a:66:da:fe:fd:ec:18:d7:1d:16:27:1a:d3:
f8:9e:f1:c0:a4:d4:1e:c8:88:1e:9d:93:0d:08:20:4c:76:6b:
e9:df:51:3e:7c:bb:f6:df:8b:dc:f1:9b:34:b9:c7:d4:25:18:
c9:9e:5e:aa:1c:64:41:2a:c8:9f:e3:df:9a:78:e1:75:ee:18:
25:30:a4:53:1c:51:e5:10:60:34:52:d4:1d:da:24:5b:af:e9:
81:80:6d:85:a4:c5:d6:61:dc:9c:06:4d:e0:ae:0d:24:52:37:
7b:cf:9b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:58:24 2025 by rpki-client