Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/0e58dc-7c90-49d7-8855-fa32d2d52968/1/vYR5ABwtJ7q6oSyxxElARDk7dqw.roa
File: vYR5ABwtJ7q6oSyxxElARDk7dqw.roa (raw, json)
Hash identifier: obrOWN19xkWreFh1sEBEYAaVII0u+vgvq2GtQ4FWPEo=
Subject key identifier: BD:84:79:00:1C:2D:27:BA:BA:A1:2C:B1:C4:49:40:44:39:3B:76:AC
Certificate issuer: /CN=f0cc7a447482e57b0604babb82a52409cde3b36d
Certificate serial: 0194228DAE6141DBABEFA7363911DAE3BE5B
Authority key identifier: F0:CC:7A:44:74:82:E5:7B:06:04:BA:BB:82:A5:24:09:CD:E3:B3:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Mx6RHSC5XsGBLq7gqUkCc3js20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/0e58dc-7c90-49d7-8855-fa32d2d52968/1/vYR5ABwtJ7q6oSyxxElARDk7dqw.roa
Signing time: Wed 01 Jan 2025 15:48:17 +0000
ROA not before: Wed 01 Jan 2025 15:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 40676
IP address blocks: 86.106.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:ae:61:41:db:ab:ef:a7:36:39:11:da:e3:be:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0cc7a447482e57b0604babb82a52409cde3b36d
Validity
Not Before: Jan 1 15:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bd8479001c2d27babaa12cb1c4494044393b76ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9e:2a:5b:1a:f9:2a:34:19:4d:38:09:1e:d3:
0e:0f:f1:95:b2:f9:93:63:b2:8c:6a:c5:c7:ac:ca:
2c:7b:4a:03:16:c3:19:20:2e:46:5b:84:be:f8:3a:
3f:b5:06:c7:12:68:38:d2:a3:4c:98:af:87:08:c4:
91:f4:76:c1:5c:27:56:f3:47:2e:35:c3:e2:05:7f:
c3:85:e4:f0:a2:fb:ca:4a:15:1e:ef:f9:e9:82:43:
2f:8a:ce:52:30:8e:5c:f0:72:64:43:9d:f0:3e:b2:
15:47:6c:5b:37:ba:9d:6b:6d:5c:40:ff:48:a3:22:
ef:44:10:8d:50:a7:61:e8:ee:a5:7a:e9:a7:98:e5:
bd:8f:68:0a:20:55:df:62:37:71:97:74:36:7c:e1:
b8:4e:11:e8:9d:6b:f2:49:a2:30:8f:79:99:af:af:
61:c9:de:02:2a:8b:41:5c:70:e0:e1:cd:6e:61:16:
b3:39:e6:3d:45:6a:86:b9:2f:76:91:3f:d9:3d:86:
4d:62:2e:95:43:c5:de:a0:7e:ad:a9:ea:3e:7c:3e:
f0:d7:3a:02:20:a7:cb:28:f3:16:c5:39:3f:5d:23:
6c:0d:91:60:0c:17:24:1f:11:d5:ec:89:49:56:ad:
96:62:a6:e9:b7:1f:9c:05:87:55:65:10:11:65:09:
b3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:84:79:00:1C:2D:27:BA:BA:A1:2C:B1:C4:49:40:44:39:3B:76:AC
X509v3 Authority Key Identifier:
keyid:F0:CC:7A:44:74:82:E5:7B:06:04:BA:BB:82:A5:24:09:CD:E3:B3:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Mx6RHSC5XsGBLq7gqUkCc3js20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0e58dc-7c90-49d7-8855-fa32d2d52968/1/vYR5ABwtJ7q6oSyxxElARDk7dqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0e58dc-7c90-49d7-8855-fa32d2d52968/1/8Mx6RHSC5XsGBLq7gqUkCc3js20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.106.24.0/24
Signature Algorithm: sha256WithRSAEncryption
27:f3:72:76:7c:b4:ba:f0:82:55:28:d1:5d:10:77:18:d7:71:
69:6f:24:1e:0a:1b:bd:2c:e5:66:a9:9d:6f:32:70:93:36:43:
06:fb:8f:17:10:7b:75:68:64:3d:96:83:15:d7:c1:84:4b:12:
1f:a8:f9:ae:80:73:13:1a:ac:c5:48:d5:b7:0c:df:fb:23:fc:
26:3c:bb:93:59:3c:51:98:28:a9:6a:cd:fa:27:39:f1:6c:f0:
7d:10:5f:ff:49:46:18:c8:cb:31:03:66:fe:a0:60:9b:bb:a7:
38:53:20:2f:fc:f5:e2:6c:fc:6b:0a:2a:7c:23:a3:62:3a:e8:
23:fa:39:e0:5f:9b:1f:87:c6:88:12:82:7e:57:e1:a1:d3:9d:
c5:8a:b3:a0:90:94:8d:82:8d:26:ca:7a:81:30:45:41:1a:45:
01:6f:a2:a7:c2:74:7b:50:89:5d:63:da:ac:28:a5:01:6d:20:
1e:50:17:af:6c:78:90:d2:96:e1:02:7a:42:77:95:d5:bb:60:
a2:51:6d:a5:60:0d:a4:58:a0:4a:48:b8:21:51:4d:55:88:ee:
18:81:21:64:6a:e1:ae:8a:87:9a:a9:70:4f:7f:84:c3:11:26:
2c:5f:29:01:06:34:8a:e3:4f:5e:bb:ae:f6:7c:90:aa:28:ad:
86:d7:82:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:22:26 2025 by rpki-client