Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/Vfen33v1zrF1U4W1eWwhHEsbqGA.roa
File: Vfen33v1zrF1U4W1eWwhHEsbqGA.roa (raw, json)
Hash identifier: w3PxgtpxD6a285bTjcEiEC6QMtVVhaLBfzodaIOYwng=
Subject key identifier: 55:F7:A7:DF:7B:F5:CE:B1:75:53:85:B5:79:6C:21:1C:4B:1B:A8:60
Certificate issuer: /CN=6041072ee1a1b1c068412dfb0355d2759932c5f5
Certificate serial: 01941F8C0F12B18564E8271541FE7F640A82
Authority key identifier: 60:41:07:2E:E1:A1:B1:C0:68:41:2D:FB:03:55:D2:75:99:32:C5:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YEEHLuGhscBoQS37A1XSdZkyxfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/Vfen33v1zrF1U4W1eWwhHEsbqGA.roa
Signing time: Wed 01 Jan 2025 01:47:39 +0000
ROA not before: Wed 01 Jan 2025 01:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29302
IP address blocks: 146.185.16.0/20 maxlen: 20
2a01:5a80::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:0f:12:b1:85:64:e8:27:15:41:fe:7f:64:0a:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6041072ee1a1b1c068412dfb0355d2759932c5f5
Validity
Not Before: Jan 1 01:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=55f7a7df7bf5ceb1755385b5796c211c4b1ba860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5a:1b:6e:17:13:58:53:44:d0:bb:88:0e:7b:
5b:09:83:1d:c9:5c:a0:4b:d5:e7:a9:84:ea:c6:d4:
87:11:e8:b5:f3:90:00:00:c0:cf:7e:c4:63:95:2f:
76:91:3f:3b:4d:ac:30:f5:77:e1:d9:06:1f:2c:88:
f8:a4:fc:f1:ce:1d:ef:3d:02:e6:a1:61:35:d7:ca:
f3:12:fc:85:95:b4:78:80:19:91:fa:06:42:c4:f4:
eb:88:0b:06:0e:5a:e6:52:ce:65:01:b5:bc:47:a3:
28:b3:d3:1c:9b:74:4b:ba:8d:ad:2b:8e:ef:3c:ec:
fd:03:25:66:19:65:be:7f:cc:89:78:fd:b8:49:58:
05:d9:b8:a3:09:46:f2:3b:ad:f2:98:5d:69:44:30:
fe:96:bc:45:aa:69:26:1d:73:8c:0e:3b:21:de:75:
a5:ab:01:55:aa:78:a1:e7:dc:82:c9:5d:42:d7:16:
05:12:18:49:80:49:5d:d7:65:39:96:16:50:04:e9:
b9:9a:af:8b:07:e3:8a:45:d9:27:90:f7:12:27:13:
a6:11:e1:8d:f1:db:e4:92:0b:3b:2f:36:01:97:bc:
9a:5e:a6:1c:c6:47:8b:5f:36:df:14:e1:35:3d:7e:
39:e6:a5:89:37:37:f5:21:e9:0c:fd:8b:c4:b5:b1:
18:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:F7:A7:DF:7B:F5:CE:B1:75:53:85:B5:79:6C:21:1C:4B:1B:A8:60
X509v3 Authority Key Identifier:
keyid:60:41:07:2E:E1:A1:B1:C0:68:41:2D:FB:03:55:D2:75:99:32:C5:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YEEHLuGhscBoQS37A1XSdZkyxfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/Vfen33v1zrF1U4W1eWwhHEsbqGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.185.16.0/20
IPv6:
2a01:5a80::/32
Signature Algorithm: sha256WithRSAEncryption
79:f8:79:f6:4c:03:44:8c:a9:e7:58:d6:c9:41:60:8d:90:1c:
e2:df:d2:a5:f1:d9:ea:90:42:d8:2c:12:f5:58:78:97:83:a6:
18:25:40:83:4c:45:a6:fd:fe:72:96:93:b2:10:cb:d2:bc:c1:
5f:c3:91:26:29:42:fc:bc:f9:1e:d4:e5:3d:fe:20:f3:9f:0e:
0f:33:00:b8:1d:0c:a5:07:8c:58:c9:e5:cb:f7:43:13:8c:18:
9f:82:f9:00:ce:90:cb:81:2f:17:45:05:89:26:eb:bb:ab:ae:
40:68:78:80:1c:89:ba:49:54:77:c6:92:f3:6f:28:30:91:1c:
d3:8d:7a:9e:49:66:5f:4c:7c:04:27:d7:e1:b7:4f:83:89:a1:
c1:d6:d6:59:ca:44:81:e4:78:ee:df:4c:9b:f5:b2:e6:c4:c0:
ee:be:b3:37:fe:29:de:3b:e6:e9:ac:e4:a9:b5:7b:33:99:86:
01:26:ac:68:64:28:0a:6f:d3:e0:04:db:c3:50:c9:67:17:d7:
5f:8a:9f:b8:ad:df:c9:1a:3e:99:a1:1f:b1:c7:09:9b:8b:fc:
95:43:2f:35:7d:39:59:f1:34:d0:8c:f6:71:30:97:7f:ff:e0:
d0:3c:2c:a9:3b:4f:97:61:db:17:d4:46:68:c8:e4:aa:d1:9f:
30:cd:58:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:46:10 2025 by rpki-client