Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/vgSjBdnlNw4PtVl7ZUje8-cR03s.roa
File: vgSjBdnlNw4PtVl7ZUje8-cR03s.roa (raw, json)
Hash identifier: H3OQmYWity24ih078EAoQ3E84gh3OSk8WYJH295c1kc=
Subject key identifier: BE:04:A3:05:D9:E5:37:0E:0F:B5:59:7B:65:48:DE:F3:E7:11:D3:7B
Certificate issuer: /CN=e8f99cd884fb5cbab3f3b34e17a80a48adec3fe5
Certificate serial: 019421438E8FA2B0ABE733B4235D7E9C7E24
Authority key identifier: E8:F9:9C:D8:84:FB:5C:BA:B3:F3:B3:4E:17:A8:0A:48:AD:EC:3F:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Pmc2IT7XLqz87NOF6gKSK3sP-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/vgSjBdnlNw4PtVl7ZUje8-cR03s.roa
Signing time: Wed 01 Jan 2025 09:47:42 +0000
ROA not before: Wed 01 Jan 2025 09:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198268
IP address blocks: 178.175.182.0/23 maxlen: 23
178.175.182.0/24 maxlen: 24
178.175.183.0/24 maxlen: 24
2a14:2b40::/29 maxlen: 29
2a14:2b40::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:8e:8f:a2:b0:ab:e7:33:b4:23:5d:7e:9c:7e:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8f99cd884fb5cbab3f3b34e17a80a48adec3fe5
Validity
Not Before: Jan 1 09:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=be04a305d9e5370e0fb5597b6548def3e711d37b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:06:0b:f4:10:9b:1a:8a:e1:20:70:e5:06:6e:
d8:8c:4f:14:bb:de:cb:04:f9:e2:8d:37:dc:87:4e:
cc:8f:3f:a5:f6:64:af:0d:ac:b0:7e:da:0c:7a:2f:
ea:6f:8f:88:c9:de:3c:ce:cf:d1:7a:81:b3:09:e2:
21:f3:47:f7:20:a7:34:26:44:2f:ac:83:38:56:45:
ce:2a:6f:27:fd:07:78:d4:9a:b4:47:ec:a3:05:fe:
97:ab:50:e0:b4:d6:18:3a:d4:8c:31:6b:e0:fd:e1:
01:21:aa:7a:07:3c:79:b7:28:14:b4:c7:78:d2:b6:
a4:94:12:4d:76:91:37:ba:95:68:c6:6d:54:01:a5:
6c:ef:f7:f9:e2:70:f7:f8:b5:13:bd:25:10:66:7c:
98:bd:5f:39:bf:cb:7f:c8:42:c2:52:43:b5:2a:a4:
9a:51:da:c0:03:53:1b:8f:29:2a:7d:f5:0e:9c:e5:
7d:df:cd:69:43:b2:16:a0:db:8a:74:71:cc:58:47:
de:cd:bd:39:08:fd:dc:22:df:36:a3:17:9a:51:b8:
63:00:6b:88:a8:2b:91:0b:78:f3:16:05:d5:b2:80:
c3:5d:bc:93:00:04:a2:6f:4c:a1:61:bb:f3:06:7e:
bf:1e:91:c6:fe:98:32:09:8b:7e:3a:a8:f5:aa:94:
7d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:04:A3:05:D9:E5:37:0E:0F:B5:59:7B:65:48:DE:F3:E7:11:D3:7B
X509v3 Authority Key Identifier:
keyid:E8:F9:9C:D8:84:FB:5C:BA:B3:F3:B3:4E:17:A8:0A:48:AD:EC:3F:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Pmc2IT7XLqz87NOF6gKSK3sP-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/vgSjBdnlNw4PtVl7ZUje8-cR03s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/6Pmc2IT7XLqz87NOF6gKSK3sP-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.175.182.0/23
IPv6:
2a14:2b40::/29
Signature Algorithm: sha256WithRSAEncryption
0b:bb:59:7d:0d:0e:e1:c0:2a:92:cc:b5:a1:51:9f:e2:76:1f:
57:35:90:5b:94:d5:91:1c:34:b5:8e:b2:ca:18:b8:ce:2b:55:
6f:eb:33:57:68:70:cd:18:6e:f0:5b:9c:1e:6b:de:f0:95:0a:
1c:85:e1:0c:60:a7:04:8e:ad:32:ea:09:96:0f:98:88:d0:8b:
5c:41:8c:06:f8:5b:ad:10:57:8f:a8:34:e0:cd:a5:37:0c:45:
08:21:0d:78:15:0c:25:e3:bc:0f:3e:20:74:45:40:46:05:89:
61:76:d5:d2:cc:e4:d2:ff:bf:ca:38:de:c6:10:1f:fe:37:3c:
b8:c3:85:3b:db:8b:6d:8b:50:73:c1:43:7f:50:61:44:2a:65:
8c:b8:05:79:fe:2d:a2:2b:59:e4:b0:30:ed:11:5b:d5:b2:1c:
7c:4e:c7:ec:9f:6a:99:bd:87:94:38:62:37:ee:9f:f3:ec:7a:
18:3a:d7:61:6e:dd:18:c6:0b:60:17:a6:b1:48:94:ad:64:3c:
80:07:04:77:24:9d:22:9e:f2:8f:f0:b8:c8:3c:35:fe:b8:6c:
6d:49:a0:dd:80:d0:61:4f:96:a5:61:7a:84:9d:9a:bb:34:20:
84:31:2a:0a:dc:7a:a4:41:2e:b7:dc:e6:6f:85:e6:30:af:1b:
5b:6e:84:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:51 2025 by rpki-client on console.sobornost.net