Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/vmkVgb9N_5wAEFtAOAjwuSdx1Xs.roa
File: vmkVgb9N_5wAEFtAOAjwuSdx1Xs.roa (raw, json)
Hash identifier: To73D5BDmwWuULrYV7q3UmXkLh1DadkYNkNoo+AcLqo=
Subject key identifier: BE:69:15:81:BF:4D:FF:9C:00:10:5B:40:38:08:F0:B9:27:71:D5:7B
Certificate issuer: /CN=e58069748748e9aebd7be40587d8140efde55b6b
Certificate serial: 01942826A44E466D2C2D6820333386D43F17
Authority key identifier: E5:80:69:74:87:48:E9:AE:BD:7B:E4:05:87:D8:14:0E:FD:E5:5B:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YBpdIdI6a69e-QFh9gUDv3lW2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/vmkVgb9N_5wAEFtAOAjwuSdx1Xs.roa
Signing time: Thu 02 Jan 2025 17:53:28 +0000
ROA not before: Thu 02 Jan 2025 17:53:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12843
IP address blocks: 193.47.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:a4:4e:46:6d:2c:2d:68:20:33:33:86:d4:3f:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e58069748748e9aebd7be40587d8140efde55b6b
Validity
Not Before: Jan 2 17:53:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=be691581bf4dff9c00105b403808f0b92771d57b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:69:76:93:c2:1c:00:ee:24:3f:95:bd:68:03:
af:23:01:52:a6:0b:b5:71:89:a1:9c:01:a7:6b:2d:
cd:ee:89:44:48:12:fe:03:95:3c:a9:48:77:92:da:
6f:34:9d:ce:a2:55:45:d4:c4:4f:0a:37:18:bf:39:
9b:76:4e:09:24:20:b6:21:4c:a0:5b:19:5a:82:77:
24:86:fe:b8:15:fa:64:8c:5d:df:6c:78:e3:a5:c0:
76:07:c9:94:1d:3e:a0:ee:07:38:79:d9:70:61:56:
4e:9d:ed:48:99:18:af:9d:a6:a1:6d:91:29:d6:39:
c0:64:3e:f9:a4:c4:91:c1:05:68:8d:6c:01:e1:9f:
8b:5e:a6:86:d0:93:25:5f:e2:f4:14:80:9e:b4:96:
3a:64:75:15:21:2f:fa:35:f2:f4:01:12:e8:e7:e4:
a6:ba:05:8e:af:8c:bd:d4:a5:86:47:d8:63:c5:af:
43:73:ae:86:0c:74:fb:6b:fb:d9:54:f0:60:c2:4f:
34:c0:73:60:a8:be:28:51:3f:42:18:76:94:de:71:
12:7c:3d:ec:32:e5:9c:5d:83:7a:87:3e:8f:a9:97:
63:df:f4:6f:09:41:a7:9e:29:d8:ba:8d:2a:83:93:
9a:1f:23:d9:f1:8e:5a:56:a0:c3:b2:55:ae:7b:32:
34:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:69:15:81:BF:4D:FF:9C:00:10:5B:40:38:08:F0:B9:27:71:D5:7B
X509v3 Authority Key Identifier:
keyid:E5:80:69:74:87:48:E9:AE:BD:7B:E4:05:87:D8:14:0E:FD:E5:5B:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YBpdIdI6a69e-QFh9gUDv3lW2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/vmkVgb9N_5wAEFtAOAjwuSdx1Xs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.47.152.0/24
Signature Algorithm: sha256WithRSAEncryption
63:4f:65:51:68:dd:34:f4:a9:9f:e4:47:3d:4d:09:47:7c:e0:
f9:86:b5:25:8b:5b:96:2a:e0:9a:da:13:b7:52:76:89:8e:d5:
eb:fc:d8:5c:a6:ae:e9:a6:3f:e5:3f:df:1d:23:26:04:56:36:
e2:13:5c:25:bc:a8:9c:8a:18:02:6d:7d:ac:2d:1e:d3:22:ca:
42:62:94:2a:9a:6e:a3:b6:68:ec:8e:37:7b:d9:de:4e:82:aa:
e8:b3:c5:0f:f5:73:65:98:95:ce:2a:fc:f4:99:c9:f4:3d:c8:
13:3f:8c:e1:ef:2a:4b:70:9f:ff:8e:99:ed:90:17:0d:87:5f:
e4:85:96:f8:5b:41:d6:f8:bb:23:6d:cb:d1:c0:a0:b4:e9:f5:
b2:1d:53:9e:aa:fd:a1:96:0f:db:c4:c3:e9:ac:1c:e9:e3:1d:
56:48:b1:af:db:c6:f1:2b:e9:46:59:33:66:95:df:48:ac:ed:
d0:3e:c5:ac:fa:95:30:f1:a6:55:a7:c7:91:34:49:8f:70:36:
e7:78:6d:3c:d8:f9:9f:22:2f:c5:a3:40:c9:8a:0d:31:2c:2d:
71:37:6a:b8:01:06:f1:5a:46:64:a7:d2:a1:14:55:fa:2a:23:
99:9e:76:58:0d:04:73:8c:b1:85:00:e3:54:97:f3:ee:68:e3:
72:91:86:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:27:47 2025 by rpki-client