Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/V_zRflL0KZDNpxZcJ7tiPsNmDII.roa
File: V_zRflL0KZDNpxZcJ7tiPsNmDII.roa (raw, json)
Hash identifier: /vhw+Rs+7Jmj2e48jcnIVVRwLec1kgYz7IvJfuhj+8U=
Subject key identifier: 57:FC:D1:7E:52:F4:29:90:CD:A7:16:5C:27:BB:62:3E:C3:66:0C:82
Certificate issuer: /CN=a19b2d70233e0e5bdef6dbfbda91886d27b6a5ae
Certificate serial: 0195C2FA2B8200AB4FC539F7E98D6E45D8CE
Authority key identifier: A1:9B:2D:70:23:3E:0E:5B:DE:F6:DB:FB:DA:91:88:6D:27:B6:A5:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/V_zRflL0KZDNpxZcJ7tiPsNmDII.roa
Signing time: Sun 23 Mar 2025 12:28:49 +0000
ROA not before: Sun 23 Mar 2025 12:28:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8767
IP address blocks: 185.174.104.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c2:fa:2b:82:00:ab:4f:c5:39:f7:e9:8d:6e:45:d8:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a19b2d70233e0e5bdef6dbfbda91886d27b6a5ae
Validity
Not Before: Mar 23 12:28:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=57fcd17e52f42990cda7165c27bb623ec3660c82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a7:a8:5f:4e:51:03:2d:e3:b2:c3:02:1e:72:
1d:df:ba:19:9b:6c:e4:fb:5a:b3:f9:0a:e8:75:4c:
bf:0e:11:c8:75:7a:69:a2:c1:35:18:91:80:aa:b8:
e9:69:05:89:ec:b0:5c:09:34:01:93:3e:68:0d:5c:
29:1e:20:99:3d:e2:5a:7d:05:dc:4f:7e:ca:07:c6:
b2:cb:b2:22:33:5c:4d:98:34:83:c5:c3:57:ce:a1:
da:2b:92:71:32:aa:fc:14:72:c6:15:6a:d3:5f:db:
74:64:8a:57:86:b6:8f:01:84:ce:72:0a:40:c8:19:
f4:03:15:0f:63:45:25:12:98:4b:b2:6b:3b:e3:d8:
e8:bf:8a:af:db:8d:2a:b9:7d:92:d1:ac:cf:0e:e8:
22:8c:21:38:35:85:47:fc:80:d3:7d:8a:51:6d:19:
51:33:47:12:40:57:ca:06:49:d8:cb:46:e7:c9:22:
2a:0b:86:47:bb:a9:06:89:42:91:c5:f2:23:dd:1d:
8b:37:b5:dd:9b:58:0d:18:c2:01:11:f6:93:05:83:
0a:7c:89:c9:d5:51:3d:17:15:cf:aa:cf:c9:76:f6:
3e:28:50:87:da:84:44:43:a9:2b:05:ca:d0:2c:50:
e1:70:34:f5:2d:c5:58:04:03:d4:be:86:8a:e1:ea:
da:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:FC:D1:7E:52:F4:29:90:CD:A7:16:5C:27:BB:62:3E:C3:66:0C:82
X509v3 Authority Key Identifier:
keyid:A1:9B:2D:70:23:3E:0E:5B:DE:F6:DB:FB:DA:91:88:6D:27:B6:A5:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/V_zRflL0KZDNpxZcJ7tiPsNmDII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.174.104.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:d6:f2:f0:6e:a1:36:8b:02:09:07:33:69:02:17:6d:51:9b:
1d:8e:4b:c3:3d:65:5d:67:4a:1c:3a:6c:a2:ee:36:58:f8:39:
86:33:56:96:e8:31:00:71:ef:33:38:fb:7f:b2:0b:7e:2c:1c:
98:ef:30:3c:c3:e8:e6:62:58:7a:0f:7a:ae:c1:47:84:db:6d:
15:0e:64:7d:04:cf:e8:54:66:02:8f:dd:31:96:96:7b:57:5e:
a1:66:35:91:fa:26:b6:09:be:db:4c:19:db:30:c4:4c:80:1b:
62:10:f0:4d:40:c2:d7:34:c2:0e:eb:0a:2b:c5:56:36:1b:12:
39:84:2f:34:98:12:24:9e:90:4b:9e:30:6d:b2:ee:3b:64:4b:
c6:c6:e4:2f:72:30:85:11:1c:67:83:6b:91:d9:b6:b0:db:d9:
f2:eb:73:ec:7a:5c:fb:59:52:18:47:2f:86:af:db:15:4e:5e:
c8:97:c2:9f:08:51:09:79:cd:1b:9c:a8:3d:2f:83:d3:43:14:
6c:33:33:8c:08:08:8b:2a:03:9c:4d:ce:67:60:60:96:f3:74:
e4:b7:b3:0d:b4:4d:ee:37:52:e8:57:d9:22:64:41:4f:8b:14:
21:b0:d4:b4:9f:04:1a:9d:d0:42:b9:bf:4d:e3:ad:9e:ab:61:
45:84:e9:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 00:20:32 2025 by rpki-client on console.sobornost.net