Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/VUze8_1n74uVa_uD6F7A6AioYKM.roa
File: VUze8_1n74uVa_uD6F7A6AioYKM.roa (raw, json)
Hash identifier: ugq/e8QeF0wIWa9W8bf0Wvpu26TSdCjGX0yCM4f1o1k=
Subject key identifier: 55:4C:DE:F3:FD:67:EF:8B:95:6B:FB:83:E8:5E:C0:E8:08:A8:60:A3
Certificate issuer: /CN=ab54fe831b6a719f42e6c8486fd03b550be761fb
Certificate serial: 01942747953C7473969BC6412DE18F05A7F9
Authority key identifier: AB:54:FE:83:1B:6A:71:9F:42:E6:C8:48:6F:D0:3B:55:0B:E7:61:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/VUze8_1n74uVa_uD6F7A6AioYKM.roa
Signing time: Thu 02 Jan 2025 13:49:50 +0000
ROA not before: Thu 02 Jan 2025 13:49:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49178
IP address blocks: 213.162.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:95:3c:74:73:96:9b:c6:41:2d:e1:8f:05:a7:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab54fe831b6a719f42e6c8486fd03b550be761fb
Validity
Not Before: Jan 2 13:49:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=554cdef3fd67ef8b956bfb83e85ec0e808a860a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:6c:ec:83:cf:e0:65:0b:bc:74:2e:8e:69:21:
46:9b:c0:a6:cc:a1:dd:b5:11:07:e2:1f:52:f2:6d:
a1:aa:9e:29:12:b1:eb:0b:9f:0b:37:64:b2:45:bb:
68:04:6d:97:59:0d:37:40:77:8d:48:c0:f0:8e:42:
02:86:d6:96:e5:3c:16:2b:dd:b4:46:df:59:04:b9:
3f:0a:c5:4e:a8:43:88:a1:f9:d2:d9:4c:26:72:55:
42:9f:c0:fb:87:11:1d:31:ac:ef:c2:d2:2d:dd:fa:
a7:53:e4:ed:c9:c6:73:7c:59:1a:c2:61:a6:f7:9f:
d4:67:7a:3d:96:49:80:a6:1f:d9:95:ff:e8:c5:ea:
9f:02:5f:27:49:9d:2f:ca:fd:01:6e:f2:26:7f:f2:
c7:4a:46:96:4a:a5:a5:aa:e3:b5:e1:6d:47:e6:65:
fa:d1:51:3f:e2:a5:0e:1f:ec:b4:00:a6:1a:4e:f8:
d6:5e:c0:99:b0:49:f9:76:e8:c3:8c:95:a7:26:3f:
64:cd:36:9c:b5:a7:2a:6d:d3:22:04:28:31:66:00:
92:a9:ce:f6:84:cf:1a:73:a0:f1:09:6c:ff:6a:36:
84:be:27:34:76:56:2d:2f:cf:d3:f1:06:eb:b4:2f:
10:74:d4:1c:80:de:a5:c6:61:13:b7:8d:57:03:19:
dc:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:4C:DE:F3:FD:67:EF:8B:95:6B:FB:83:E8:5E:C0:E8:08:A8:60:A3
X509v3 Authority Key Identifier:
keyid:AB:54:FE:83:1B:6A:71:9F:42:E6:C8:48:6F:D0:3B:55:0B:E7:61:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/VUze8_1n74uVa_uD6F7A6AioYKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.162.204.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:d2:7f:b3:e8:57:46:e8:1a:bd:45:e5:a7:89:86:63:ab:3b:
50:95:a7:5d:67:cd:6c:b3:ae:ed:65:f5:49:1c:f6:15:7c:fc:
64:39:7f:91:7a:df:37:47:84:a6:a9:f2:29:57:8b:a8:da:d5:
37:02:00:61:75:d3:b3:ee:57:50:9f:3a:c3:ed:ca:ac:e4:23:
d5:56:b0:93:1e:5f:1e:4e:7b:ac:b8:c8:f7:52:7e:d3:fa:e5:
90:23:8a:b5:77:e2:d2:b1:67:7c:da:68:b7:f2:f5:0d:dc:1f:
53:82:fc:34:40:3f:44:13:36:b0:2b:72:66:32:c2:78:1b:44:
eb:25:02:36:ff:03:91:9a:b3:5d:fc:37:3a:65:c3:ad:cb:8f:
f2:28:31:b9:e0:63:81:69:38:c2:7c:fc:a6:35:2a:2b:4a:33:
2b:ef:5b:7f:1f:f9:1f:bd:79:11:b2:f5:4a:18:9d:67:ce:1c:
33:0e:04:03:96:45:ac:10:38:1c:8c:77:5a:25:0c:ca:6e:7a:
87:08:71:42:1a:ec:ca:90:c6:bd:1e:3c:ee:cd:af:f3:56:d3:
55:f1:2d:bc:46:b4:87:5c:71:c0:fd:08:c1:dc:cd:60:ed:4e:
91:ca:2c:9b:a4:f2:c9:b3:a1:f8:8c:d0:91:b5:97:dd:c0:38:
d2:98:06:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:16 2025 by rpki-client on console.sobornost.net