Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/Vl4-1Y5QnMxXeb8Ux6oMHZHD4uM.roa
File: Vl4-1Y5QnMxXeb8Ux6oMHZHD4uM.roa (raw, json)
Hash identifier: U+fPZyhr/WfWEB/lCPa7RbywJB7YzK5Ff1NgjRWLMzs=
Subject key identifier: 56:5E:3E:D5:8E:50:9C:CC:57:79:BF:14:C7:AA:0C:1D:91:C3:E2:E3
Certificate issuer: /CN=2cbd76688b87c03914ae2a2e1490c2f1e9141661
Certificate serial: 0194228E2B87F37D9769FE406FFB42606319
Authority key identifier: 2C:BD:76:68:8B:87:C0:39:14:AE:2A:2E:14:90:C2:F1:E9:14:16:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LL12aIuHwDkUriouFJDC8ekUFmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/Vl4-1Y5QnMxXeb8Ux6oMHZHD4uM.roa
Signing time: Wed 01 Jan 2025 15:48:50 +0000
ROA not before: Wed 01 Jan 2025 15:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52059
IP address blocks: 185.47.180.0/24 maxlen: 24
185.47.181.0/24 maxlen: 24
185.47.182.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:2b:87:f3:7d:97:69:fe:40:6f:fb:42:60:63:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cbd76688b87c03914ae2a2e1490c2f1e9141661
Validity
Not Before: Jan 1 15:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=565e3ed58e509ccc5779bf14c7aa0c1d91c3e2e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:2c:92:8f:7d:5f:93:3a:52:f0:68:5b:c7:62:
1b:d3:e6:75:13:cf:98:73:e3:2a:df:96:a1:da:32:
ca:7b:56:53:2d:e2:54:bc:7f:cb:c6:e6:75:4d:dd:
5c:8f:b0:0c:38:25:93:c6:44:45:fc:86:c2:08:60:
cc:d7:1f:b7:cd:49:40:97:d1:f1:09:04:e2:9b:ae:
54:64:07:7a:3a:7c:29:e5:40:4c:14:1a:8b:94:56:
00:99:fa:5d:29:17:28:c1:a4:b8:7b:00:36:49:b6:
9d:be:6a:fe:66:21:8b:63:12:d6:47:28:53:95:55:
19:55:cc:c5:62:67:9b:c9:fe:f8:13:b0:88:fd:fd:
5b:e9:b6:2c:12:4b:3b:11:2b:73:5e:a3:61:fd:31:
c8:f1:bb:12:65:88:de:14:cd:bd:b3:95:62:89:22:
45:eb:86:e9:e1:d8:48:43:22:bf:73:cd:91:ec:d5:
e5:70:69:50:78:17:16:bd:cd:d5:1e:24:8e:30:b7:
8c:1c:9d:72:de:3e:6b:a7:1b:3c:3f:3d:89:bd:80:
1e:22:6a:a8:18:2e:0c:16:64:eb:8c:e9:0f:6b:90:
79:cd:06:6e:30:af:1f:35:11:b2:18:ab:76:77:49:
88:6d:2b:2c:cd:3f:ea:ea:da:da:50:ce:9f:a0:6e:
e2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:5E:3E:D5:8E:50:9C:CC:57:79:BF:14:C7:AA:0C:1D:91:C3:E2:E3
X509v3 Authority Key Identifier:
keyid:2C:BD:76:68:8B:87:C0:39:14:AE:2A:2E:14:90:C2:F1:E9:14:16:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LL12aIuHwDkUriouFJDC8ekUFmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/Vl4-1Y5QnMxXeb8Ux6oMHZHD4uM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.47.180.0-185.47.182.255
Signature Algorithm: sha256WithRSAEncryption
2f:ee:25:ae:a1:57:03:f7:a5:f1:ad:a1:83:58:18:4b:11:4d:
95:3f:52:40:46:1f:fc:c0:ac:62:3a:d3:40:83:cf:1d:ec:7a:
a0:68:6b:db:b6:55:81:9f:89:e9:80:c4:54:fa:c0:91:e0:33:
49:ec:e6:1f:b4:31:67:52:1d:89:67:43:f8:95:0a:0f:1b:99:
1c:58:8c:09:ae:f3:dd:c8:3a:03:ce:0a:48:16:c4:da:e5:13:
e4:90:1b:1d:dc:1d:25:4e:1f:6e:30:b0:65:2a:5f:8f:b1:e3:
e4:63:78:7b:96:eb:cd:a7:5e:ff:66:85:a3:21:64:7c:cf:8f:
75:19:1e:98:45:44:be:08:3f:73:6b:54:15:7a:a5:59:6c:89:
18:62:ae:5e:3e:01:4d:23:32:91:57:e2:e8:53:03:43:f0:61:
ad:01:d6:25:7c:3f:89:dd:b3:c2:0c:d2:df:ee:b7:c9:36:a8:
a9:17:a9:f7:ca:d2:af:98:7f:b1:28:31:7e:36:16:f6:a5:c3:
c2:79:79:c9:81:8c:6a:28:ad:58:57:1d:ff:67:af:7a:e0:6d:
1a:a8:3b:62:27:15:51:83:18:3e:76:09:49:89:fd:49:c9:38:
d0:2f:5b:90:d3:f9:e4:22:fb:39:d9:fc:21:12:73:3d:22:f8:
a0:1e:08:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:10:55 2025 by rpki-client