Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/VwTCQVBQBIaABr9HzcD5DI1SbIw.roa
File: VwTCQVBQBIaABr9HzcD5DI1SbIw.roa (raw, json)
Hash identifier: U441xM9tr/zsimOGmqjHWgfzIyQFVrdj/+NwpIJv2Ig=
Subject key identifier: 57:04:C2:41:50:50:04:86:80:06:BF:47:CD:C0:F9:0C:8D:52:6C:8C
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019427483AE3BD05F5F42109B2C1FC7602BB
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/VwTCQVBQBIaABr9HzcD5DI1SbIw.roa
Signing time: Thu 02 Jan 2025 13:50:32 +0000
ROA not before: Thu 02 Jan 2025 13:50:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2865
IP address blocks: 192.36.49.0/24 maxlen: 24
194.132.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:3a:e3:bd:05:f5:f4:21:09:b2:c1:fc:76:02:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5704c241505004868006bf47cdc0f90c8d526c8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d7:3e:1a:fe:a0:6c:cd:88:a5:9e:2d:1d:04:
6b:0f:46:ef:10:14:e4:89:0b:6f:a6:87:d3:8a:a6:
93:15:8f:7b:08:ba:a0:76:cd:34:95:2f:cc:3a:dd:
dc:fc:09:29:9e:d4:8a:66:75:14:f8:88:02:04:3a:
6a:d8:df:f7:4b:1a:af:48:ad:a7:de:18:8d:36:f0:
79:18:d5:45:c9:a9:34:df:31:ba:96:14:22:29:9b:
22:28:0a:f9:9c:24:f9:6d:a6:31:3c:31:88:9e:3a:
7e:71:1a:7a:ee:42:c3:14:c3:d5:20:0b:f1:96:46:
3b:96:a7:f9:4e:dc:4c:f3:49:c6:2c:6d:78:7a:68:
5e:ed:3f:85:18:de:3e:ab:f1:ae:8f:61:af:47:a3:
c6:a4:cf:a7:4c:3d:6c:60:1d:a7:aa:e5:2c:31:41:
c0:c9:7d:ab:4d:ad:2a:4b:9a:01:89:7e:0d:14:ec:
87:d7:18:bb:21:97:41:ce:2b:99:5d:8b:a9:20:a0:
4a:ad:4d:34:f4:45:c8:8c:1c:81:40:d9:07:88:02:
d3:83:3a:99:af:23:68:78:8a:9f:67:c6:dd:62:da:
46:6f:a8:c6:8a:18:22:17:98:4c:48:6d:df:46:f3:
f3:b1:f3:60:66:57:58:6c:6d:1f:4a:11:53:6b:59:
b5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:04:C2:41:50:50:04:86:80:06:BF:47:CD:C0:F9:0C:8D:52:6C:8C
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/VwTCQVBQBIaABr9HzcD5DI1SbIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.49.0/24
194.132.150.0/24
Signature Algorithm: sha256WithRSAEncryption
52:ff:8a:28:a9:4b:43:58:0d:92:5b:81:7c:e2:78:f8:d9:58:
6f:d0:24:5c:97:97:79:e8:31:d0:e8:3c:14:9a:0c:16:25:45:
18:07:7e:0d:ca:ef:5d:65:c5:2c:e6:50:16:95:27:e8:9f:4e:
62:29:a7:80:a0:86:7e:9b:5d:d3:be:8d:93:6b:d3:16:33:5b:
f4:ff:25:95:0e:dc:29:67:49:91:2e:bc:0c:ce:43:cd:83:72:
fb:2f:ca:54:6e:64:f7:81:40:2f:69:be:eb:28:5f:50:57:a9:
11:5b:9c:c9:10:44:2b:aa:c5:89:87:7b:d9:75:40:03:16:fc:
73:ca:a9:a7:58:8a:c4:44:90:d5:d2:5e:9e:52:d1:dc:d1:ce:
32:f6:cb:22:b6:08:f7:01:68:2a:75:6e:85:b5:dc:3c:4f:66:
92:ca:67:56:cd:7f:57:81:f4:c6:67:1f:2c:8b:ff:58:de:70:
b8:2e:71:b5:47:1c:d5:a7:26:e4:30:55:17:8d:30:35:65:98:
52:44:4d:e0:c8:a4:42:04:19:da:be:84:10:9a:79:64:aa:42:
47:16:3a:9b:00:3b:1a:f1:15:ed:98:31:36:58:73:18:81:61:
cd:2b:d7:1c:cf:49:bc:25:9d:03:89:62:7a:bb:39:db:69:7b:
92:1b:a2:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:08:15 2025 by rpki-client