Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/vt15ABy3zJP47x5DikC4lY7LNe4.roa
File: vt15ABy3zJP47x5DikC4lY7LNe4.roa (raw, json)
Hash identifier: IdpTO09MEQGHcGdgBzndMJHenkqW9uYtr/gnL2zPkrU=
Subject key identifier: BE:DD:79:00:1C:B7:CC:93:F8:EF:1E:43:8A:40:B8:95:8E:CB:35:EE
Certificate issuer: /CN=5949698bbcd24fc9e1a9f5f41486c31af19a4bc8
Certificate serial: 0194228D415254686B84F821AA6C3E97A27F
Authority key identifier: 59:49:69:8B:BC:D2:4F:C9:E1:A9:F5:F4:14:86:C3:1A:F1:9A:4B:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WUlpi7zST8nhqfX0FIbDGvGaS8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/vt15ABy3zJP47x5DikC4lY7LNe4.roa
Signing time: Wed 01 Jan 2025 15:47:50 +0000
ROA not before: Wed 01 Jan 2025 15:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49985
IP address blocks: 176.62.224.0/20 maxlen: 20
185.172.252.0/22 maxlen: 22
188.120.192.0/19 maxlen: 19
2a02:c60::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:41:52:54:68:6b:84:f8:21:aa:6c:3e:97:a2:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5949698bbcd24fc9e1a9f5f41486c31af19a4bc8
Validity
Not Before: Jan 1 15:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bedd79001cb7cc93f8ef1e438a40b8958ecb35ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:05:4a:a8:07:91:92:b3:36:eb:ad:76:35:ed:
03:52:f4:b7:dd:eb:48:ee:3a:1b:6d:19:1f:d6:8b:
f5:23:7b:d6:5d:0c:1b:7b:6a:93:44:80:15:06:42:
db:a2:05:8f:71:79:0c:a0:9c:07:ae:f5:34:1f:e2:
f8:02:53:3e:e8:2a:d7:0a:f6:0a:6f:84:64:58:f3:
25:70:d0:77:5e:af:ff:8c:ca:54:d1:cb:e6:a3:a3:
52:21:54:14:62:cf:25:d2:8c:5d:04:78:07:c5:8f:
ff:88:53:0f:a0:5c:5d:6b:4a:9c:13:00:3b:c1:52:
f6:e0:ac:39:66:cd:3c:b1:36:0d:60:fa:a8:e8:36:
b8:bf:1b:8b:22:e6:3e:02:de:a5:23:8b:10:de:0e:
6a:4e:fb:0c:4c:50:d0:f1:24:d7:63:ff:b6:49:67:
7a:1b:68:b7:47:c1:0e:4d:a2:52:d7:d1:93:1e:28:
0d:08:6d:25:a6:24:a8:e8:c0:40:c7:f1:bd:e7:bb:
5f:a6:59:91:36:73:52:51:e4:2b:81:85:0e:14:9e:
65:ff:ff:89:72:52:de:fc:e9:6a:64:3e:8d:45:6b:
f4:af:51:2a:a1:96:f3:35:39:1b:3b:5d:05:b9:41:
ea:90:f3:2b:65:07:f8:67:0d:6e:c9:e9:64:c8:e5:
26:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:DD:79:00:1C:B7:CC:93:F8:EF:1E:43:8A:40:B8:95:8E:CB:35:EE
X509v3 Authority Key Identifier:
keyid:59:49:69:8B:BC:D2:4F:C9:E1:A9:F5:F4:14:86:C3:1A:F1:9A:4B:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUlpi7zST8nhqfX0FIbDGvGaS8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/vt15ABy3zJP47x5DikC4lY7LNe4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.62.224.0/20
185.172.252.0/22
188.120.192.0/19
IPv6:
2a02:c60::/32
Signature Algorithm: sha256WithRSAEncryption
52:87:d2:01:be:91:3f:9d:16:27:f9:ea:d8:b1:5e:de:99:52:
38:75:40:47:64:e2:fc:4a:9b:cb:2e:bd:91:49:43:dc:db:86:
e3:fa:48:8d:cb:ae:5c:b5:8b:56:82:95:8f:45:92:48:b8:7e:
35:bc:78:dc:bc:71:88:d4:ed:bc:57:be:b4:5b:8b:5c:ec:a2:
c2:fd:f7:81:ca:e7:b2:b0:e5:86:3d:fb:8b:c4:41:51:56:ec:
d8:14:c8:8e:d2:b9:9d:e7:5f:84:2e:5f:d5:60:78:51:28:31:
fa:7c:88:d6:9d:88:22:26:b2:6e:76:9d:d1:38:10:c6:99:e2:
73:ec:67:58:a5:6c:96:9e:d9:8d:07:eb:a0:c5:18:b7:ce:e0:
f7:4e:ab:21:6f:73:47:17:dc:09:1b:f3:d9:ad:50:54:64:ee:
b9:e1:48:2f:80:79:22:54:61:5c:ea:2c:14:b1:85:ae:d7:99:
ce:67:9e:6b:23:02:16:7a:a6:ed:9c:ff:73:49:d2:af:e5:77:
7e:20:cb:4e:b2:0b:a2:b4:0f:72:46:de:8d:5b:3e:c3:22:5f:
f0:ff:0e:1d:e8:2a:f8:74:ca:20:10:34:0d:16:2a:3b:e8:75:
ab:b5:a5:a6:6f:9d:d8:48:d2:37:f9:da:fe:42:0d:6d:fd:97:
4a:bb:e1:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:07 2025 by rpki-client on console.sobornost.net