Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/vzcqP3LvlK_sQg8vPWTBe97Nav0.roa
File: vzcqP3LvlK_sQg8vPWTBe97Nav0.roa (raw, json)
Hash identifier: 3HGCRFI+BCpq9Cd0n6gj7Tnh3DZvLgpQucs3TlDSYJE=
Subject key identifier: BF:37:2A:3F:72:EF:94:AF:EC:42:0F:2F:3D:64:C1:7B:DE:CD:6A:FD
Certificate issuer: /CN=61edfe7a4fc64de529d162df2fed0780c6e5e1a8
Certificate serial: 0194266A330BE6AD8F7913F0DE6121B1B96B
Authority key identifier: 61:ED:FE:7A:4F:C6:4D:E5:29:D1:62:DF:2F:ED:07:80:C6:E5:E1:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/vzcqP3LvlK_sQg8vPWTBe97Nav0.roa
Signing time: Thu 02 Jan 2025 09:48:01 +0000
ROA not before: Thu 02 Jan 2025 09:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6730
IP address blocks: 193.134.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:33:0b:e6:ad:8f:79:13:f0:de:61:21:b1:b9:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61edfe7a4fc64de529d162df2fed0780c6e5e1a8
Validity
Not Before: Jan 2 09:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bf372a3f72ef94afec420f2f3d64c17bdecd6afd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:39:4d:2c:33:ce:f1:f6:06:0d:28:9d:44:78:
2d:67:c7:ce:33:df:d2:ce:8d:2a:d3:04:63:a1:1f:
33:59:63:3b:e7:92:8c:1a:ee:ab:5f:77:7b:44:c8:
9b:c9:1c:5d:1a:62:d1:11:e5:d6:26:87:f3:e4:ab:
75:99:75:86:af:1c:13:a5:ca:24:f8:e8:63:fa:22:
f3:07:ae:ac:32:b4:28:47:ff:c3:d0:78:79:d4:69:
c4:52:96:99:99:93:f6:1c:a4:fc:32:f2:39:14:74:
22:4f:73:38:8d:9b:c2:9b:0d:20:73:cf:6e:84:c5:
ca:d7:6f:e8:e9:b0:a3:a9:16:e0:12:90:c1:9e:1c:
41:d7:f1:a2:7e:3c:c9:c4:8d:dd:45:54:ae:c3:ca:
ff:14:7a:a6:d6:2a:2e:95:46:7a:ba:26:21:aa:bf:
ce:17:f3:44:1f:07:c7:df:81:c4:42:4d:88:c1:8c:
99:2c:7c:9d:92:ba:51:ea:94:5c:17:26:9e:54:02:
d8:dd:91:46:7c:58:56:40:2a:13:e0:27:3e:9d:44:
c5:f9:02:94:be:6c:01:06:9a:3b:94:96:4d:9e:cf:
b9:d8:b8:45:a0:35:32:49:63:5a:ae:d8:70:a6:f2:
09:57:f5:db:ef:75:1d:47:e1:c0:24:19:50:5f:c4:
37:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:37:2A:3F:72:EF:94:AF:EC:42:0F:2F:3D:64:C1:7B:DE:CD:6A:FD
X509v3 Authority Key Identifier:
keyid:61:ED:FE:7A:4F:C6:4D:E5:29:D1:62:DF:2F:ED:07:80:C6:E5:E1:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/vzcqP3LvlK_sQg8vPWTBe97Nav0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.134.252.0/24
Signature Algorithm: sha256WithRSAEncryption
06:ee:86:1e:86:36:42:98:43:b6:2e:8f:86:2f:0b:30:e8:31:
3c:cc:c3:67:8e:7e:24:61:4a:cd:3a:12:2b:88:8b:f5:35:10:
a8:ce:1a:26:8b:af:42:6b:05:88:70:2a:33:d0:11:c1:02:10:
6a:8c:1b:c6:ab:57:77:db:95:77:58:4c:7d:f4:a1:e8:2e:ff:
02:85:61:d2:f5:44:e5:28:9f:af:cf:5c:13:35:f6:b1:74:3a:
d3:4c:d0:03:cc:d4:36:a1:2b:b7:a2:a0:9e:d8:31:f7:58:7f:
81:79:20:e8:c4:7c:29:ff:60:6e:c4:91:3a:07:7c:42:d9:47:
b7:47:8a:d6:b1:22:10:c9:09:5b:82:23:a7:fb:7c:93:ab:b6:
a9:96:b9:80:45:9a:93:0d:56:73:f6:8f:d1:f9:bd:2c:8e:53:
3d:a9:cd:79:da:67:96:aa:2b:29:c7:56:c8:c2:29:9f:08:e3:
67:17:46:16:cc:a0:70:d1:bb:c7:23:e9:e2:33:8c:6b:a3:55:
b5:b1:d2:48:88:2d:3c:b5:02:33:63:e4:1e:10:41:78:83:52:
44:2c:e9:b9:7f:9b:4a:09:22:ca:09:66:03:ec:f2:f7:bc:43:
c6:ec:f2:80:64:63:cc:44:7f:be:90:74:93:a9:d0:c4:02:24:
93:0d:8a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:41:38 2025 by rpki-client