Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/VPHKfI9Bl4Taeo5pgVvlMLcjFd8.roa
File: VPHKfI9Bl4Taeo5pgVvlMLcjFd8.roa (raw, json)
Hash identifier: zTYK8qWpp/Dt9m/Mxb0HNtRwtTGNwLiKpPx5D1urBUM=
Subject key identifier: 54:F1:CA:7C:8F:41:97:84:DA:7A:8E:69:81:5B:E5:30:B7:23:15:DF
Certificate issuer: /CN=b3b6d9026372cfce8fde823c3ef9c9f790aae14f
Certificate serial: 01942521C0ADB54FF943FF00050141493B2C
Authority key identifier: B3:B6:D9:02:63:72:CF:CE:8F:DE:82:3C:3E:F9:C9:F7:90:AA:E1:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7bZAmNyz86P3oI8PvnJ95Cq4U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/VPHKfI9Bl4Taeo5pgVvlMLcjFd8.roa
Signing time: Thu 02 Jan 2025 03:49:16 +0000
ROA not before: Thu 02 Jan 2025 03:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206706
IP address blocks: 92.119.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:c0:ad:b5:4f:f9:43:ff:00:05:01:41:49:3b:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3b6d9026372cfce8fde823c3ef9c9f790aae14f
Validity
Not Before: Jan 2 03:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=54f1ca7c8f419784da7a8e69815be530b72315df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:79:55:1f:51:0f:fa:73:3b:bc:fe:b4:63:25:
47:de:a3:41:8e:18:c6:4e:9c:8a:44:31:18:e8:a6:
bc:f6:66:ed:9e:9c:ab:d8:ad:98:8f:17:bc:69:42:
3a:fa:74:5e:28:ed:8d:dd:10:e0:13:05:b1:af:b2:
ed:d1:91:8a:eb:36:83:92:17:ae:38:7e:2c:7c:9a:
fb:73:d3:9a:6b:e1:e6:f8:b1:c9:d8:b1:34:2a:f8:
c1:bc:fc:b3:cc:5b:fb:41:4e:af:0b:71:e2:4f:e4:
52:ff:af:e6:fb:fc:e3:47:26:b6:df:34:97:23:75:
01:1c:57:2d:cb:60:de:02:3e:1a:03:20:b2:46:56:
83:d3:51:10:29:0a:10:ed:8b:2c:f9:ce:a6:e5:d6:
f9:7b:f9:36:7a:43:54:ce:11:71:ef:37:99:bf:4c:
f5:c7:e3:63:7d:0a:28:64:b1:32:86:ca:7d:77:c9:
94:96:38:fe:82:be:5f:37:96:10:5d:d3:01:84:f0:
4b:eb:80:82:4d:9a:e0:a4:aa:c2:b0:a7:37:5d:f2:
e1:ed:90:c6:18:a0:24:e7:31:8c:dd:91:89:d0:cd:
c4:fc:bb:b6:4b:dd:e4:9e:ef:de:c9:2f:1c:ee:c0:
44:80:0f:5e:52:7d:9b:f1:3d:cd:54:14:f9:08:e4:
bd:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:F1:CA:7C:8F:41:97:84:DA:7A:8E:69:81:5B:E5:30:B7:23:15:DF
X509v3 Authority Key Identifier:
keyid:B3:B6:D9:02:63:72:CF:CE:8F:DE:82:3C:3E:F9:C9:F7:90:AA:E1:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7bZAmNyz86P3oI8PvnJ95Cq4U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/VPHKfI9Bl4Taeo5pgVvlMLcjFd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.60.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:9e:75:1a:6d:44:68:79:ac:14:b0:da:7b:74:5e:d1:4d:7f:
5d:19:b6:cc:6d:c3:20:13:9e:55:97:7e:b0:d8:d5:9c:b3:fb:
e7:14:b1:74:8f:4e:9c:08:f1:bd:c3:74:55:c0:24:fa:29:da:
40:17:c9:e5:58:8f:78:6f:e2:fb:63:c6:4f:da:b7:ef:2b:4a:
a3:8c:20:f8:ba:10:8b:a5:11:70:23:d0:09:ba:ac:23:09:38:
bb:04:5a:a5:a3:0f:c6:c3:c6:87:78:f1:2c:7e:13:be:60:2b:
5d:47:89:da:3a:a6:81:c1:cf:68:66:b5:f6:e3:2d:09:e4:0e:
a2:79:4f:a4:d3:50:0e:01:dd:99:63:44:bf:96:d5:48:be:16:
30:63:38:fd:43:4c:ec:a2:5a:c9:1a:47:eb:f2:f3:ea:0e:d2:
63:79:ad:56:44:92:4e:ad:ef:c6:2a:6c:6a:5e:7f:06:5f:98:
c2:cc:27:36:5c:80:a6:a2:fe:83:0c:14:a0:2a:73:2e:22:25:
78:49:ac:4d:80:eb:de:f0:d1:10:fa:3e:95:52:c0:6c:66:2b:
24:92:68:f3:65:b1:94:25:4e:3b:2f:ed:23:13:90:08:94:30:
fb:93:7e:d4:ed:a4:44:67:87:d5:f2:fd:91:7a:11:cb:6c:59:
87:78:98:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:02 2025 by rpki-client on console.sobornost.net