Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/vhsU-Mk4n6LTs3h_CW72UDdQ-Yo.roa
File: vhsU-Mk4n6LTs3h_CW72UDdQ-Yo.roa (raw, json)
Hash identifier: /Lyc9yY9aYiua/DgwEbj3beulG9xgs4u0ic0tqOS/M0=
Subject key identifier: BE:1B:14:F8:C9:38:9F:A2:D3:B3:78:7F:09:6E:F6:50:37:50:F9:8A
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01942748571378D2FB5350952AC88EA7C04A
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/vhsU-Mk4n6LTs3h_CW72UDdQ-Yo.roa
Signing time: Thu 02 Jan 2025 13:50:39 +0000
ROA not before: Thu 02 Jan 2025 13:50:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43893
IP address blocks: 192.71.58.0/24 maxlen: 24
192.121.13.0/24 maxlen: 24
192.121.62.0/24 maxlen: 24
192.165.66.0/24 maxlen: 24
193.234.52.0/24 maxlen: 24
193.234.53.0/24 maxlen: 24
194.71.161.0/24 maxlen: 24
194.71.162.0/24 maxlen: 24
194.71.224.0/24 maxlen: 24
194.103.221.0/24 maxlen: 24
194.132.30.0/24 maxlen: 24
194.132.80.0/24 maxlen: 24
194.132.82.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:57:13:78:d2:fb:53:50:95:2a:c8:8e:a7:c0:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=be1b14f8c9389fa2d3b3787f096ef6503750f98a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:70:7e:db:39:7e:73:ad:11:9f:50:ed:34:4d:
24:b9:38:cb:81:e1:fa:93:09:69:89:9d:85:b2:11:
b6:b3:9a:de:39:db:1d:19:40:71:e8:6b:e1:d2:22:
ac:05:6b:25:6d:ed:ca:5c:8e:73:ae:5d:41:30:1f:
46:b5:2b:b5:a7:61:1b:04:e2:96:9b:eb:d6:1f:93:
e7:00:8c:37:c4:86:b6:45:7c:c7:4c:13:b1:f1:d9:
05:be:7e:4b:a8:2f:58:f4:6b:32:6f:2f:ab:be:72:
59:10:3a:44:b2:95:bf:ae:d1:fc:15:8e:64:ec:94:
e2:1f:5f:17:f8:1a:0c:bf:f7:51:8c:5c:76:7f:b2:
fc:2b:77:4b:20:a6:30:b3:c8:42:e2:fb:a9:49:5c:
47:91:11:87:9e:a5:01:7c:17:1c:ca:91:b3:d1:10:
d9:62:a8:45:65:6e:2b:df:4c:6e:ac:04:c4:4c:4c:
b4:b7:03:76:b2:26:e4:62:29:be:37:23:a2:a1:ec:
9f:70:af:5c:b4:ef:54:99:0f:50:dc:78:7b:0b:9e:
c1:5b:31:a4:8b:fb:ed:90:56:90:4a:97:19:73:34:
44:a1:6d:57:77:a4:cc:5d:e8:8d:55:cf:9f:6a:fa:
08:0a:83:cd:72:d9:a1:18:fc:2c:9f:e7:0e:ad:6d:
c0:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:1B:14:F8:C9:38:9F:A2:D3:B3:78:7F:09:6E:F6:50:37:50:F9:8A
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/vhsU-Mk4n6LTs3h_CW72UDdQ-Yo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.71.58.0/24
192.121.13.0/24
192.121.62.0/24
192.165.66.0/24
193.234.52.0/23
194.71.161.0-194.71.162.255
194.71.224.0/24
194.103.221.0/24
194.132.30.0/24
194.132.80.0/24
194.132.82.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:95:eb:26:af:c7:63:16:9b:0e:f0:5f:64:b7:b8:2f:9b:39:
43:c6:47:79:bf:ce:58:68:ab:02:66:e4:5f:85:91:cb:45:be:
df:9a:b0:3f:47:45:6c:a8:75:1b:e6:9e:40:9d:b8:11:83:7b:
6f:d7:aa:6b:9a:4b:bb:fd:49:83:f8:d5:37:cb:2b:7c:bb:20:
99:33:75:e1:f1:80:7c:42:80:0b:29:a4:c5:61:21:f8:56:4e:
0a:48:e5:2a:36:96:7d:80:e5:82:03:a3:d0:05:ad:9c:1a:b1:
e5:8e:12:8e:5a:14:85:9c:7b:1b:94:66:f0:7f:42:98:00:88:
c7:9e:2d:0b:4e:ab:7e:a6:b5:ab:e7:3c:4c:77:4c:4c:8c:e1:
e9:9e:c7:72:45:6e:40:fd:e8:05:55:32:1b:fc:4f:c0:f1:33:
8a:07:bc:a8:33:76:e9:ef:21:65:4e:08:45:10:a1:a4:69:f6:
df:c6:eb:91:ed:65:66:d2:24:44:79:7d:ef:a6:3a:c2:99:d4:
6c:7d:1c:f1:f7:cf:84:e6:74:87:68:f7:b3:e1:d0:33:4c:84:
dd:c5:21:13:01:60:42:f9:38:36:68:69:05:b4:db:9a:b2:04:
e4:49:09:4d:42:3b:90:ee:6f:e7:b0:27:bc:46:82:c0:0c:b9:
a4:6d:3e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:21 2025 by rpki-client