Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/VUn0IK5awoygtLgJ8MTocrnL2sk.roa
File: VUn0IK5awoygtLgJ8MTocrnL2sk.roa (raw, json)
Hash identifier: nOS3lMR+IXY4O5Jrt6uBnebG5/3BXdEcJvfDwe6u5rM=
Subject key identifier: 55:49:F4:20:AE:5A:C2:8C:A0:B4:B8:09:F0:C4:E8:72:B9:CB:DA:C9
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 0194B705A0A68D32035F22CEA4714E4CC229
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/VUn0IK5awoygtLgJ8MTocrnL2sk.roa
Signing time: Thu 30 Jan 2025 11:43:06 +0000
ROA not before: Thu 30 Jan 2025 11:43:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39640
IP address blocks: 167.160.31.0/24 maxlen: 24
178.19.32.0/23 maxlen: 23
201.49.188.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b7:05:a0:a6:8d:32:03:5f:22:ce:a4:71:4e:4c:c2:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 30 11:43:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5549f420ae5ac28ca0b4b809f0c4e872b9cbdac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b5:da:da:6d:84:dd:b7:1e:e9:54:bf:76:5f:
2a:de:a8:65:3b:be:41:e6:fc:fe:d2:0e:21:52:8e:
cf:35:5c:84:54:39:38:28:58:4a:83:f3:d5:33:bb:
c4:d0:84:61:8e:17:fb:29:1b:a8:4f:1b:77:c1:28:
30:c9:a5:2a:87:31:dc:58:31:f6:5d:46:78:bb:4d:
c6:36:b9:14:3a:dd:85:19:fa:2d:41:57:20:78:c1:
73:33:b1:a3:c3:1a:0f:69:6e:c5:16:45:e5:5d:a6:
54:c1:27:de:31:65:d0:c4:5f:e5:72:65:8c:01:a0:
99:86:7a:14:20:4a:0e:ec:c9:44:72:15:5c:d7:c2:
43:ef:5b:6b:3b:f3:99:68:d3:69:80:89:ab:8b:00:
05:73:57:e1:b7:9c:0e:04:96:12:20:28:3e:5a:c6:
70:6e:e8:cc:a2:ef:5a:83:9b:2a:f0:bb:73:6a:f6:
f0:87:b4:62:e3:57:fc:cb:0d:35:c7:e6:4a:e6:b0:
96:57:49:05:76:e4:88:0e:87:7b:73:43:98:3e:81:
09:29:09:09:d9:d1:0e:1c:f6:07:31:b8:d6:91:b0:
2a:d4:c4:bb:26:e1:d3:03:f1:df:44:4a:49:3a:e8:
dc:80:30:b8:9e:cf:ac:08:53:76:ff:43:ab:1f:fd:
4f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:49:F4:20:AE:5A:C2:8C:A0:B4:B8:09:F0:C4:E8:72:B9:CB:DA:C9
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/VUn0IK5awoygtLgJ8MTocrnL2sk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.160.31.0/24
178.19.32.0/23
201.49.188.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:d6:bb:9d:d5:76:13:7c:bd:5c:49:8e:f6:45:d6:47:c9:5d:
b1:6f:b2:cf:a5:76:8b:c1:4f:75:af:bf:fe:3a:e1:50:eb:30:
48:fe:a3:ac:ce:2b:03:3a:63:3c:58:3f:ee:5c:fc:d1:10:99:
a9:14:2e:a1:9e:7e:33:34:79:a9:eb:fe:27:bb:24:a0:43:af:
40:38:7f:55:17:d8:ea:21:e3:a8:e6:20:1e:4b:ca:c2:07:70:
62:ab:cc:16:6a:77:9a:cb:de:ab:8e:6b:a5:07:ca:36:7e:1a:
66:03:c6:cc:36:36:52:eb:dc:6c:b0:98:7f:78:79:bd:b5:98:
a6:aa:f4:71:c1:ad:a6:84:61:26:2e:4c:ee:39:0e:7b:63:17:
e7:e7:7a:60:55:b8:75:9e:02:43:45:6c:81:48:43:a0:b4:ba:
f8:03:c9:2c:90:f6:b2:27:5d:0d:4f:1e:74:04:c4:e6:cb:64:
b7:2f:72:dd:68:ae:29:dc:bf:de:a1:b3:6d:52:64:6f:c1:a3:
34:43:a7:0b:e2:ca:8a:37:52:ae:36:39:c7:27:6e:57:93:9d:
c5:70:ca:ab:0b:ec:5c:3f:66:5e:6c:d5:ba:9d:57:1d:3c:47:
0c:47:df:68:1b:cc:fc:d6:28:6b:81:da:62:ba:bd:4f:1d:f8:
ab:42:7e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:49:25 2025 by rpki-client on console.sobornost.net