Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/VKKwhUzZulnDKblssToKXi4fsqw.roa
File: VKKwhUzZulnDKblssToKXi4fsqw.roa (raw, json)
Hash identifier: j9JluwIc2CfqCGMf3iCXxKMXPfc8OstsFNw6jpmxRww=
Subject key identifier: 54:A2:B0:85:4C:D9:BA:59:C3:29:B9:6C:B1:3A:0A:5E:2E:1F:B2:AC
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 0189BA4DA533E7DBA8951572CA15F37352C2
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/VKKwhUzZulnDKblssToKXi4fsqw.roa
Signing time: Thu 03 Aug 2023 07:29:57 +0000
ROA not before: Thu 03 Aug 2023 07:29:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15723
IP address blocks: 185.81.219.0/24 maxlen: 24
185.81.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ba:4d:a5:33:e7:db:a8:95:15:72:ca:15:f3:73:52:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Aug 3 07:29:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=54a2b0854cd9ba59c329b96cb13a0a5e2e1fb2ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:56:a2:40:d9:e2:8f:04:1a:2a:8b:a4:aa:c2:
45:40:22:a2:cc:d3:f6:a0:fa:c8:f5:3c:ee:0d:cf:
12:97:9a:e3:e0:7c:2c:40:ae:35:07:01:c3:f3:34:
31:1b:18:b2:19:df:13:0e:31:a7:f2:77:ac:1a:96:
b5:2e:00:ce:bf:9d:5f:7f:e1:75:8d:7a:1b:13:ee:
b2:70:b6:55:ee:2e:21:a5:37:ed:41:16:22:5c:3b:
b2:9b:77:95:68:af:14:22:73:2b:d5:bc:33:5a:36:
03:02:0d:e3:22:88:62:2d:5a:55:83:9e:ca:63:7b:
65:49:d8:62:47:6d:df:98:34:00:14:1b:bb:96:9f:
c1:f9:b5:33:62:43:73:72:37:ae:c6:d9:bc:e8:fd:
6f:7a:4a:ab:51:fb:69:67:ee:37:8f:92:0f:39:85:
d1:67:d3:ad:5c:c1:c3:70:58:fe:65:21:9b:80:78:
28:2a:fb:0f:2f:81:16:7a:ed:0d:a9:44:bc:ee:71:
e2:11:75:25:1e:b3:45:19:15:fe:86:d5:d3:02:ae:
c6:50:3f:f2:ae:80:e7:aa:a9:69:8f:8d:aa:68:42:
5b:c0:88:15:4f:36:43:73:79:36:b0:85:9f:b8:43:
20:2c:e8:4c:28:77:70:86:1a:01:28:34:0f:8f:b7:
5c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:A2:B0:85:4C:D9:BA:59:C3:29:B9:6C:B1:3A:0A:5E:2E:1F:B2:AC
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/VKKwhUzZulnDKblssToKXi4fsqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.216.0/24
185.81.219.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:1d:a3:07:4b:fc:20:96:a2:bc:e5:4e:a2:03:4b:a5:cf:ee:
53:66:60:ee:6c:df:c3:f9:c6:34:1a:c3:a6:c9:ae:dc:14:70:
5d:8b:de:24:eb:d5:f4:af:22:d9:58:21:19:ca:a0:5d:20:6c:
25:2d:e4:e1:68:49:fa:40:7b:d7:2b:2a:5b:88:72:14:e3:ab:
fb:6d:a2:14:a1:2c:91:96:cc:d5:d1:8d:c6:47:a0:a2:4e:ba:
2b:6c:11:0c:1c:23:f8:ce:2e:a6:bc:0a:eb:51:e1:e1:2c:f5:
1a:cc:21:45:03:9b:9b:eb:5f:7f:2e:ce:13:3d:73:73:45:01:
69:7f:cd:fc:1a:42:e0:6b:4f:03:ec:31:15:48:0d:9d:db:9f:
82:1a:40:28:bb:1e:37:75:2b:bd:5b:d9:92:ad:24:2e:fa:f8:
4b:2a:e4:b3:85:52:e1:bc:02:dc:3b:ad:96:7e:f4:f1:28:55:
76:ba:67:e4:37:a0:0f:f1:f0:ae:59:31:54:46:41:83:e0:9b:
02:6d:84:fb:6a:0e:4e:22:2f:e3:92:61:ea:dc:bd:55:a3:75:
3c:18:e4:0b:17:17:b2:5d:f3:9b:fd:c1:34:e3:ac:78:1d:a8:
b2:98:e6:4c:fa:61:2e:81:2c:53:4b:a2:eb:87:40:7a:41:d2:
44:1d:5b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:29:49 2025 by rpki-client