Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/vVp_ERdrnRIqLCUsItb5VjVaAYU.roa
File: vVp_ERdrnRIqLCUsItb5VjVaAYU.roa (raw, json)
Hash identifier: qquI+vjzguENR1gQyNKb61rrA2a/ZfrzpGtiqom6A+8=
Subject key identifier: BD:5A:7F:11:17:6B:9D:12:2A:2C:25:2C:22:D6:F9:56:35:5A:01:85
Certificate issuer: /CN=a0a22fcb54a091d6913ffe9fafb983c57a4ac22c
Certificate serial: 019423D6F582759667394F425FBA6636CF3C
Authority key identifier: A0:A2:2F:CB:54:A0:91:D6:91:3F:FE:9F:AF:B9:83:C5:7A:4A:C2:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKIvy1SgkdaRP_6fr7mDxXpKwiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/vVp_ERdrnRIqLCUsItb5VjVaAYU.roa
Signing time: Wed 01 Jan 2025 21:47:57 +0000
ROA not before: Wed 01 Jan 2025 21:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30870
IP address blocks: 193.27.86.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:f5:82:75:96:67:39:4f:42:5f:ba:66:36:cf:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a22fcb54a091d6913ffe9fafb983c57a4ac22c
Validity
Not Before: Jan 1 21:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bd5a7f11176b9d122a2c252c22d6f956355a0185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:16:25:da:92:08:39:2c:1b:b3:f4:85:32:9e:
d9:16:cf:fc:fe:7a:dc:db:3c:b0:5b:6d:a1:39:10:
82:b9:cb:84:5f:93:63:10:fe:fd:b9:26:2c:d3:18:
82:32:34:07:32:d2:5b:dc:c9:7c:65:0e:c5:80:16:
8f:3f:fc:d8:e4:93:43:f9:35:32:82:ef:4a:b1:98:
9b:7b:3b:1c:34:84:c9:08:76:1e:2b:d3:06:81:78:
d4:7a:ee:fd:26:83:a2:ad:08:b5:76:a7:27:93:a1:
71:1c:49:41:40:3a:16:3d:00:b3:71:d6:6f:1c:92:
82:55:a0:f0:00:4e:db:83:db:74:e0:b5:f3:9c:01:
a1:8c:b4:64:90:2d:ae:22:68:84:ec:11:67:1f:46:
5d:35:33:b1:70:97:e7:e8:ac:40:5e:36:89:e7:8f:
ec:cb:0b:ba:e1:00:c4:82:6f:ea:b7:87:ac:10:a2:
83:5a:47:65:25:9d:a8:f3:cf:1b:8f:c2:61:3d:db:
d5:76:c9:d3:83:77:5c:a1:be:3a:a3:72:3d:63:ee:
ef:15:95:e0:52:e9:6a:d3:e5:38:f9:5b:68:30:bb:
2c:a0:53:d4:c8:36:1f:ab:70:68:72:cf:7a:43:f7:
41:44:f7:93:b5:42:cb:9c:32:90:e4:ba:78:58:65:
af:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:5A:7F:11:17:6B:9D:12:2A:2C:25:2C:22:D6:F9:56:35:5A:01:85
X509v3 Authority Key Identifier:
keyid:A0:A2:2F:CB:54:A0:91:D6:91:3F:FE:9F:AF:B9:83:C5:7A:4A:C2:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKIvy1SgkdaRP_6fr7mDxXpKwiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/vVp_ERdrnRIqLCUsItb5VjVaAYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.27.86.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:a4:16:71:37:04:a0:e7:db:5c:22:81:29:58:51:d2:88:65:
14:76:f9:1f:b8:32:aa:99:7c:79:25:20:2e:a9:5a:f3:70:73:
24:7e:38:40:0d:c0:ec:b3:81:d9:ac:c3:6d:5e:16:ff:d8:85:
ac:78:64:8e:7f:f6:5a:41:65:d0:43:d0:c6:52:7e:6e:d9:28:
73:99:6a:5a:3f:e7:3c:63:10:a9:48:47:d5:0c:5b:99:6c:15:
df:5d:4e:e0:cc:15:fb:12:f0:e8:51:c4:c9:f3:43:94:b7:dd:
ba:45:30:28:db:9c:af:7d:45:bd:c8:8f:c7:aa:43:a5:ea:84:
41:a7:14:22:46:10:8d:1f:15:73:f6:a6:da:9d:7b:61:9f:a7:
33:07:bf:23:ff:5b:6e:ad:40:e4:93:6e:f3:a3:cb:d2:44:53:
07:99:92:4d:04:7b:2c:43:07:40:e4:8d:f9:0a:77:96:5a:af:
1d:92:0d:12:c8:72:ae:70:b8:ab:ff:dc:62:96:89:f9:41:80:
9f:b4:31:dd:e7:03:6a:9c:65:49:80:d0:e9:ae:10:85:20:8d:
0c:27:53:7d:9e:6c:51:cb:90:81:8a:79:4e:12:43:01:7e:4b:
c1:df:1d:2a:e8:a4:3a:e6:95:c2:9d:13:3c:b6:d3:3e:fb:7d:
62:75:6f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:25 2025 by rpki-client on console.sobornost.net