Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/VBkUSdd8HhC9ylebW4iiyCK4E-Q.roa
File: VBkUSdd8HhC9ylebW4iiyCK4E-Q.roa (raw, json)
Hash identifier: /Z8ymu6jIj7elvCMahyZD4nXriuKXl4fYbvc0S8rJdE=
Subject key identifier: 54:19:14:49:D7:7C:1E:10:BD:CA:57:9B:5B:88:A2:C8:22:B8:13:E4
Certificate issuer: /CN=e0238e22877f7303964007ce3e3406f5fad94962
Certificate serial: 019423691C6127196C5D257F8DE51D9E25A7
Authority key identifier: E0:23:8E:22:87:7F:73:03:96:40:07:CE:3E:34:06:F5:FA:D9:49:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4COOIod_cwOWQAfOPjQG9frZSWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/VBkUSdd8HhC9ylebW4iiyCK4E-Q.roa
Signing time: Wed 01 Jan 2025 19:47:58 +0000
ROA not before: Wed 01 Jan 2025 19:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202670
IP address blocks: 185.151.4.0/23 maxlen: 23
185.151.6.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:1c:61:27:19:6c:5d:25:7f:8d:e5:1d:9e:25:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0238e22877f7303964007ce3e3406f5fad94962
Validity
Not Before: Jan 1 19:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=54191449d77c1e10bdca579b5b88a2c822b813e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2a:0d:94:d9:ee:c8:4a:02:bc:53:76:ad:09:
ee:47:16:f7:51:d5:81:64:a1:97:fd:1e:34:cb:15:
41:e7:de:e8:9b:52:30:8d:cb:01:b9:b9:09:af:43:
cc:6a:36:d1:8f:05:03:12:8b:87:5d:0a:d9:28:ba:
41:9a:f5:79:e4:1f:98:a9:1e:c3:d0:4f:c8:86:40:
58:16:ff:e5:1d:93:05:9b:ef:92:f6:a8:09:15:49:
50:bd:45:87:46:45:65:f5:0c:44:9d:26:d0:18:29:
3e:9b:75:25:ce:ec:8b:4e:14:09:4f:5d:1e:b5:f8:
74:93:c0:c8:40:56:74:60:2c:e3:29:22:fa:4c:65:
23:5d:90:6a:b4:f5:e3:d5:c3:4a:f3:1a:7d:46:c7:
e6:11:dc:e7:96:e2:a6:1c:c6:1a:31:9d:69:21:4d:
9d:76:85:bb:35:b6:d4:82:c8:3c:89:67:72:58:c0:
ce:1f:a4:42:90:a3:b8:58:da:95:75:d8:0a:58:b9:
99:95:46:56:f5:88:d4:af:02:97:b0:a4:46:65:d6:
2b:f9:0f:e6:2a:4f:a1:da:2c:e0:2e:ae:a6:1e:c1:
91:73:f2:05:49:8d:9b:18:cd:1a:1e:1d:2b:b9:4a:
cd:6d:74:de:af:ca:73:99:e0:c4:f9:6c:47:52:51:
9a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:19:14:49:D7:7C:1E:10:BD:CA:57:9B:5B:88:A2:C8:22:B8:13:E4
X509v3 Authority Key Identifier:
keyid:E0:23:8E:22:87:7F:73:03:96:40:07:CE:3E:34:06:F5:FA:D9:49:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4COOIod_cwOWQAfOPjQG9frZSWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/VBkUSdd8HhC9ylebW4iiyCK4E-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.151.4.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:c0:21:dc:f6:06:26:cd:d7:91:99:d3:9e:82:cf:6d:69:9e:
1d:60:dc:29:bd:49:43:19:81:89:01:6f:b6:3b:43:40:df:d2:
5b:3b:34:75:4f:27:7d:68:a4:aa:05:99:56:3e:c7:fd:10:3c:
c8:19:4c:b7:bb:3d:ff:ed:93:45:75:e2:6e:fb:17:de:33:e6:
04:78:4b:be:be:21:48:45:f0:17:62:1d:77:17:ae:b7:3f:72:
b4:bc:39:8c:3d:24:72:47:0c:1c:3f:e7:2f:c7:07:c0:75:1d:
a1:e0:bb:4e:b3:85:19:f4:dd:bd:27:d8:61:ce:3c:3c:8c:78:
d0:96:47:87:2d:18:b0:b4:fe:67:44:6d:d4:ed:07:62:8c:db:
c1:ee:55:a0:b7:17:51:4b:2e:48:ef:c5:af:bd:bd:32:66:26:
10:5f:a9:b5:18:e0:d3:30:86:6b:28:58:8b:10:7b:1d:0a:15:
c4:ae:c6:40:30:cc:93:d0:e3:5b:bd:0d:f3:3a:8b:83:a9:86:
29:80:2e:37:a8:d8:11:39:dd:15:09:17:1f:45:96:b8:97:6e:
a1:00:ae:34:5b:be:0d:40:3a:89:ce:15:d7:6f:7a:2e:d3:22:
54:55:d0:bd:63:b6:b6:be:fa:5d:9e:a2:7e:23:b5:51:47:f2:
de:a2:4c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:34 2025 by rpki-client on console.sobornost.net