Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/VD6wEJYNAt-3ccOgOQEtYbRpD0A.roa
File: VD6wEJYNAt-3ccOgOQEtYbRpD0A.roa (raw, json)
Hash identifier: 8S53UWk8y2kICWluONZMk3V/wk1nRogIOqOUIQmbX3U=
Subject key identifier: 54:3E:B0:10:96:0D:02:DF:B7:71:C3:A0:39:01:2D:61:B4:69:0F:40
Certificate issuer: /CN=f7822d4597e5493d15178bfb10e6841dd17e5897
Certificate serial: 0194228DD51C92B5097FA9C2E0494AAE07ED
Authority key identifier: F7:82:2D:45:97:E5:49:3D:15:17:8B:FB:10:E6:84:1D:D1:7E:58:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/94ItRZflST0VF4v7EOaEHdF-WJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/VD6wEJYNAt-3ccOgOQEtYbRpD0A.roa
Signing time: Wed 01 Jan 2025 15:48:27 +0000
ROA not before: Wed 01 Jan 2025 15:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 146.133.124.0/24 maxlen: 24
146.133.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:d5:1c:92:b5:09:7f:a9:c2:e0:49:4a:ae:07:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7822d4597e5493d15178bfb10e6841dd17e5897
Validity
Not Before: Jan 1 15:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=543eb010960d02dfb771c3a039012d61b4690f40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:28:3b:55:0b:a9:62:ae:98:6d:e9:6d:c3:4d:
eb:e9:24:79:a4:48:e3:90:57:12:39:1d:59:25:d8:
b2:b7:72:ea:d0:72:1e:60:cd:7e:06:df:80:2b:f4:
81:ec:c1:06:d9:ec:c8:b8:79:3b:f1:6f:4b:34:1b:
0c:5a:2d:68:a8:35:ca:3e:9e:89:53:3c:47:5b:34:
d4:82:de:f6:8b:f2:2b:05:ad:a9:ad:f3:dd:7d:44:
d9:6a:6c:73:3a:5e:8c:26:8b:ca:10:c9:16:be:83:
ac:05:ee:14:1c:cc:f5:a8:58:71:3c:9c:c6:35:9d:
5e:9d:fb:ab:be:03:c1:ef:aa:f5:dd:48:64:c1:6a:
07:1e:e0:03:cc:57:d2:6f:97:62:72:37:cf:82:20:
aa:d6:14:f3:df:0a:79:14:9c:ab:b6:8f:65:03:e5:
55:b4:73:89:b5:fd:85:8f:5a:a2:dc:5c:f5:a0:5a:
89:bb:c6:a4:1f:4e:ad:d5:73:ad:40:25:cd:cc:2c:
1a:b0:8e:d2:43:ce:1d:b4:c1:77:19:0b:89:07:9c:
5f:7f:fd:4f:37:87:3f:19:b8:a1:4a:1f:e7:99:66:
c5:6b:68:e5:a5:7f:24:49:97:1f:6e:e4:82:59:06:
c9:a6:69:e2:c6:7f:f3:79:32:a1:dd:26:e5:fd:66:
cb:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:3E:B0:10:96:0D:02:DF:B7:71:C3:A0:39:01:2D:61:B4:69:0F:40
X509v3 Authority Key Identifier:
keyid:F7:82:2D:45:97:E5:49:3D:15:17:8B:FB:10:E6:84:1D:D1:7E:58:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94ItRZflST0VF4v7EOaEHdF-WJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/VD6wEJYNAt-3ccOgOQEtYbRpD0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/94ItRZflST0VF4v7EOaEHdF-WJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.133.124.0/24
146.133.127.0/24
Signature Algorithm: sha256WithRSAEncryption
55:fb:49:ca:e5:3a:0f:7e:d9:4f:87:30:2e:c4:95:13:17:14:
06:9e:89:d8:88:30:fb:5c:80:d4:1a:a5:41:f8:ad:9c:5c:a8:
94:4f:3f:42:fe:06:85:36:fe:92:9c:32:af:11:74:5a:57:e8:
29:ec:f8:82:fc:3d:68:e8:22:58:4d:e8:48:0c:b1:7a:70:99:
fc:e1:af:78:30:09:a1:ac:03:fd:1b:c1:1e:03:3e:de:52:77:
e6:90:3d:cf:45:02:71:8f:5c:bc:97:c0:ea:9e:8f:ca:ad:37:
06:48:64:52:83:bb:5f:e8:ac:51:84:c5:6c:bd:85:16:38:1d:
47:f0:bf:89:23:b2:13:ae:bb:27:f8:72:96:14:5e:ee:43:a2:
82:27:48:7a:63:b7:1f:b9:1d:42:05:b5:e7:22:f9:4f:cd:82:
e1:8e:95:b3:0e:92:b9:73:60:4e:25:57:c0:d4:18:db:91:46:
c6:0e:ae:e7:ef:47:9f:4b:5f:fc:ff:91:90:15:5b:bf:5e:d7:
8b:a8:9b:08:df:d1:61:3b:da:3b:07:0e:a6:49:e3:83:5d:49:
1c:e8:8e:92:f7:b9:f9:b1:5b:ee:dc:39:41:06:fc:db:2b:2b:
46:d2:03:a8:e1:3c:ba:c0:87:37:8b:84:6d:b5:b1:be:68:52:
39:df:16:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:00:37 2025 by rpki-client