Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/722fe6-5f0a-49e8-abdb-caa2ad0de122/1/vdJ1-O2PFV8hSx7613G44_kcY5Y.roa
File: vdJ1-O2PFV8hSx7613G44_kcY5Y.roa (raw, json)
Hash identifier: 9RnN6DMvSlhiANvmEfSQmPpOdQWu1uJnmneABphJ2+0=
Subject key identifier: BD:D2:75:F8:ED:8F:15:5F:21:4B:1E:FA:D7:71:B8:E3:F9:1C:63:96
Certificate issuer: /CN=bb376d0c9bef6b098fa63140bcc40d83d76bd549
Certificate serial: 0328BE2A
Authority key identifier: BB:37:6D:0C:9B:EF:6B:09:8F:A6:31:40:BC:C4:0D:83:D7:6B:D5:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uzdtDJvvawmPpjFAvMQNg9dr1Uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/722fe6-5f0a-49e8-abdb-caa2ad0de122/1/vdJ1-O2PFV8hSx7613G44_kcY5Y.roa
Signing time: Thu 20 Jan 2022 07:52:42 +0000
ROA not before: Thu 20 Jan 2022 07:52:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211114
IP address blocks: 194.169.120.0/24 maxlen: 24
185.235.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53001770 (0x328be2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb376d0c9bef6b098fa63140bcc40d83d76bd549
Validity
Not Before: Jan 20 07:52:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bdd275f8ed8f155f214b1efad771b8e3f91c6396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:71:35:3d:b7:50:20:c1:b4:e1:28:3e:fd:07:
8e:15:b6:4d:15:96:1b:a8:90:9f:bf:6f:67:c6:60:
58:08:19:ee:94:fd:8c:6f:18:9f:cf:73:f5:91:36:
7b:5b:81:84:db:1c:9a:0e:4b:5f:13:e5:46:bf:92:
2b:d5:d5:05:42:9c:e8:6b:85:44:d7:4b:ec:73:8f:
60:69:b0:c9:2d:c9:36:35:26:df:2e:4f:9c:73:31:
68:a2:20:12:1e:f7:2b:36:20:28:7c:e5:27:69:13:
a0:97:45:ab:20:62:fd:c2:0a:41:a5:d8:b9:61:e5:
1e:7f:18:2a:85:b7:a0:30:c4:eb:c8:52:dc:c5:76:
1e:8a:55:c3:e4:1e:93:7e:79:1e:15:06:9f:b5:9f:
10:99:03:36:53:82:ab:f7:df:66:70:cb:3f:ef:c5:
f2:d4:2b:f1:fc:25:7d:31:e0:fc:8c:8e:46:d6:98:
ce:fd:a4:4c:dc:8b:e6:b7:ce:32:54:21:be:cc:ec:
2a:04:ef:05:6b:3f:c8:dd:2d:5e:70:d7:a2:91:29:
aa:a2:89:2d:36:b3:6c:c5:21:b3:63:fc:c3:bd:bf:
6f:7f:c6:21:e6:43:7b:d9:6b:6d:db:cc:9a:28:98:
4c:a2:cc:fd:84:da:7b:44:e8:d7:61:fc:fb:1f:07:
94:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:D2:75:F8:ED:8F:15:5F:21:4B:1E:FA:D7:71:B8:E3:F9:1C:63:96
X509v3 Authority Key Identifier:
keyid:BB:37:6D:0C:9B:EF:6B:09:8F:A6:31:40:BC:C4:0D:83:D7:6B:D5:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uzdtDJvvawmPpjFAvMQNg9dr1Uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/722fe6-5f0a-49e8-abdb-caa2ad0de122/1/vdJ1-O2PFV8hSx7613G44_kcY5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/722fe6-5f0a-49e8-abdb-caa2ad0de122/1/uzdtDJvvawmPpjFAvMQNg9dr1Uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.77.0/24
194.169.120.0/24
Signature Algorithm: sha256WithRSAEncryption
19:03:01:31:72:f2:70:47:71:11:29:07:34:1a:8f:85:e8:fb:
90:3f:35:52:c6:e7:41:90:e2:1a:75:a8:4a:fb:02:09:fa:2a:
f4:93:53:13:7d:0f:d2:65:5a:8f:f1:71:5e:4d:dc:1f:45:e4:
f9:6c:27:0e:03:52:53:92:95:bf:8e:fd:ed:b2:43:fe:8b:55:
0f:40:d8:d4:84:4e:79:d3:c6:3b:d5:b9:fa:4c:51:54:3b:cc:
ce:4e:fd:e0:9f:72:d2:54:77:90:bc:07:16:57:97:da:72:eb:
c0:6e:2a:5c:21:6d:c2:20:98:cf:02:65:ab:0c:1a:52:5a:2a:
a3:c6:37:d9:b2:5f:d6:39:d6:4f:00:10:01:b3:1e:d0:79:bc:
2c:6a:12:bf:ba:8b:64:49:10:bc:7e:d6:39:1a:bb:ae:23:cf:
b1:f4:9d:6e:67:1a:8c:2c:f6:80:77:35:41:c4:22:a3:cf:f2:
97:06:48:49:86:86:43:34:bb:53:9b:15:f8:ad:bd:0b:32:98:
c1:62:11:a8:01:51:c6:42:83:b3:81:f6:4f:9b:db:bc:fd:af:
86:b3:42:d9:1a:61:11:c1:f0:2e:d8:0c:64:22:4d:db:c0:af:
fc:90:4c:51:38:50:d8:04:58:0a:6d:48:9f:c7:3e:59:2d:4f:
8c:48:f6:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 01:52:19 2025 by rpki-client