Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/cf59fc-653f-44eb-aca1-c5d1f27b532d/1/VAS-ixIhEs9yOXg-I00uf3W9Dyc.roa
File: VAS-ixIhEs9yOXg-I00uf3W9Dyc.roa (raw, json)
Hash identifier: rgn6aQ78etPEe0P1A6+vBLbLc3LHzbbmJXQA2ykbE8o=
Subject key identifier: 54:04:BE:8B:12:21:12:CF:72:39:78:3E:23:4D:2E:7F:75:BD:0F:27
Certificate issuer: /CN=fc18de6e57903c243ca2fd14154f55ebe61ce56a
Certificate serial: 01856CB844EB4C10EB8971022F1A3715BC7E
Authority key identifier: FC:18:DE:6E:57:90:3C:24:3C:A2:FD:14:15:4F:55:EB:E6:1C:E5:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_BjebleQPCQ8ov0UFU9V6-Yc5Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/cf59fc-653f-44eb-aca1-c5d1f27b532d/1/VAS-ixIhEs9yOXg-I00uf3W9Dyc.roa
Signing time: Sun 01 Jan 2023 09:44:53 +0000
ROA not before: Sun 01 Jan 2023 09:44:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1828
IP address blocks: 164.93.192.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:b8:44:eb:4c:10:eb:89:71:02:2f:1a:37:15:bc:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc18de6e57903c243ca2fd14154f55ebe61ce56a
Validity
Not Before: Jan 1 09:44:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5404be8b122112cf7239783e234d2e7f75bd0f27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4e:29:35:cb:e7:61:79:e2:ef:df:7a:70:6a:
6e:56:d5:f2:87:57:0a:48:06:40:0a:a5:93:b9:56:
9a:a6:fa:15:a9:e1:61:23:29:1c:26:41:6c:88:7a:
69:d1:95:2e:a3:4e:a5:c6:33:a5:ef:fe:81:29:86:
82:12:e8:72:a1:11:c4:dc:a7:5a:e4:6f:78:04:a6:
a3:8a:a4:c1:3d:90:c3:b4:f7:93:7e:55:ea:4d:b8:
bc:34:d7:1d:b5:5e:4d:91:73:46:6e:b9:c6:04:35:
c4:4b:8b:74:d3:8d:7c:ba:50:55:46:05:42:dc:9c:
00:2b:9d:a3:a0:48:0b:31:12:e0:15:8e:ce:1e:34:
22:88:27:7e:c5:1c:9d:a9:45:a5:d8:75:e3:f6:1a:
ad:df:bc:c5:9e:6c:7a:ed:32:79:6e:ef:5f:de:ff:
0e:2d:54:d5:1e:54:40:24:80:68:01:cc:ee:a9:36:
46:15:07:ae:b6:1e:a0:a1:8b:6c:02:fd:9d:1d:2b:
1b:2f:61:6f:15:dd:70:b3:f4:f9:90:3b:78:ba:58:
2f:0b:ac:c7:0a:63:04:8f:88:9b:da:37:7f:8e:35:
d2:72:13:c8:72:da:a3:4e:98:5c:85:46:3e:a0:33:
f7:59:5e:7b:9a:8f:c2:e2:4a:d1:f6:b0:63:4a:0b:
cf:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:04:BE:8B:12:21:12:CF:72:39:78:3E:23:4D:2E:7F:75:BD:0F:27
X509v3 Authority Key Identifier:
keyid:FC:18:DE:6E:57:90:3C:24:3C:A2:FD:14:15:4F:55:EB:E6:1C:E5:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BjebleQPCQ8ov0UFU9V6-Yc5Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/cf59fc-653f-44eb-aca1-c5d1f27b532d/1/VAS-ixIhEs9yOXg-I00uf3W9Dyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/cf59fc-653f-44eb-aca1-c5d1f27b532d/1/_BjebleQPCQ8ov0UFU9V6-Yc5Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.93.192.0/18
Signature Algorithm: sha256WithRSAEncryption
45:57:ff:ad:67:6e:5c:3b:5f:9b:58:81:0d:1b:69:99:bc:a3:
e0:42:44:72:0e:f2:49:1a:64:2b:02:f9:47:f0:c9:85:06:19:
d3:4e:9d:52:6d:f1:5f:0b:9a:d2:d5:ff:84:92:de:4e:71:1a:
b4:f5:1f:58:d6:70:e9:78:cb:fd:d1:69:c2:69:27:c9:c3:08:
e6:80:27:80:76:18:9e:35:ef:a0:b6:8a:63:53:b4:e9:85:a2:
bb:ad:ec:49:1a:bb:4c:a0:4c:19:1c:ea:e6:90:ff:b8:29:9c:
e7:52:f1:22:1c:9a:fe:74:6d:63:16:25:fb:bb:f5:71:60:d2:
91:90:4d:fc:22:fc:29:a2:11:15:e9:ae:71:58:a3:56:b8:1d:
ac:c1:66:05:e0:d9:fd:d0:73:ca:1d:a7:1d:95:2f:d3:9f:fb:
9a:bc:3e:3b:b6:c0:c4:7f:6b:a4:27:18:42:25:36:93:a3:ab:
09:54:28:4d:bd:2b:3b:d8:78:11:35:67:18:1e:ae:c4:10:57:
d3:6d:67:95:a4:4a:cd:23:d6:dc:2f:f6:ad:92:1e:92:7c:e4:
1f:dc:5b:3b:fc:0b:21:ce:f1:6e:ae:75:ca:5f:51:bd:bb:f4:
83:ad:d6:3b:48:8f:d3:dd:c7:a4:32:67:38:f4:8d:0b:5d:c5:
29:45:55:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:17 2024 by rpki-client on console-fra.rpki-client.org