Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/VVIC_y0n2Zy8_Ut4N78uge2Uvhg.roa
File: VVIC_y0n2Zy8_Ut4N78uge2Uvhg.roa (raw, json)
Hash identifier: evHGst0fOqCkIX5cv5ZF9d3vrZo5I2cMlto+2nu5SF8=
Subject key identifier: 55:52:02:FF:2D:27:D9:9C:BC:FD:4B:78:37:BF:2E:81:ED:94:BE:18
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E1B6AB250BEEEAF5BBE0E66AFC3C5268D
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/VVIC_y0n2Zy8_Ut4N78uge2Uvhg.roa
Signing time: Fri 08 Mar 2024 00:16:01 +0000
ROA not before: Fri 08 Mar 2024 00:16:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:1b:6a:b2:50:be:ee:af:5b:be:0e:66:af:c3:c5:26:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 8 00:16:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=555202ff2d27d99cbcfd4b7837bf2e81ed94be18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:19:b5:e8:3b:a9:42:97:95:84:fe:d5:1f:54:
75:a4:35:1c:24:c4:47:b8:fd:34:f3:e9:14:0d:db:
30:a4:48:ea:ac:f4:4e:bf:6b:ca:18:ac:94:29:9b:
a8:a6:13:aa:73:08:16:b3:f1:8f:f4:28:07:52:bc:
92:53:b5:28:47:d9:c7:c5:0c:38:25:f5:fe:25:57:
9a:c2:10:33:29:77:d9:29:5f:2b:42:97:dc:11:b5:
93:15:af:1a:fd:e3:03:48:c7:3c:49:a6:91:eb:9d:
c1:1d:18:60:47:91:5f:49:bf:be:7a:24:76:0e:bc:
7d:de:1d:ef:42:99:1f:1d:23:18:9e:e5:de:57:fd:
b1:ef:ff:ec:bb:18:c5:48:d5:b9:19:a6:3f:6c:df:
42:56:c6:d8:6f:b8:68:1a:55:d9:e4:52:ae:74:59:
a8:6d:5d:e1:2f:98:6f:e6:49:5d:87:87:15:01:d9:
d5:6a:cc:8c:a0:f8:b8:ce:6d:ae:73:8d:ef:93:78:
67:b0:cc:71:ff:24:01:14:92:6a:fa:ad:f1:dc:11:
83:ba:fc:54:3f:87:ad:bc:e9:66:30:6c:2b:a8:3c:
7d:e4:3d:c5:54:fc:1b:68:4b:07:a5:93:0c:df:af:
0e:3b:57:f7:7c:c6:a0:0d:b5:a8:5c:82:d1:b7:09:
65:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:52:02:FF:2D:27:D9:9C:BC:FD:4B:78:37:BF:2E:81:ED:94:BE:18
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/VVIC_y0n2Zy8_Ut4N78uge2Uvhg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
54:14:bd:d3:9b:db:8f:bc:10:67:84:37:0f:23:bc:51:54:b1:
6e:35:9a:e9:fc:4d:e5:f4:1e:c0:e0:ff:c4:ee:d1:17:9c:22:
20:04:12:03:6a:0c:63:d5:2b:9c:a4:57:e7:a6:c9:59:b6:dd:
58:0e:9e:5e:c8:09:53:3c:41:a7:ae:7a:db:0a:14:6b:44:73:
8a:62:95:38:c2:7c:14:df:ac:c4:e5:4a:14:61:dc:87:72:4c:
c2:2d:9d:63:64:24:28:07:b0:46:ee:f0:34:15:16:f9:2f:9f:
9a:69:11:39:40:bb:6b:ac:e5:ba:7a:04:aa:c2:8e:c2:f3:ab:
0c:67:7e:9e:e4:ad:58:a1:4f:f7:ec:b8:e5:ef:8f:ca:1a:98:
11:11:d7:71:f3:b5:cd:3a:9d:03:63:67:4a:80:4b:f0:05:c4:
1d:c9:5f:02:70:85:e9:b4:42:76:34:93:c2:ca:ae:de:8e:e7:
5c:08:fd:b5:15:c2:cc:f1:70:f3:95:3d:ee:0d:f3:13:e0:4c:
3e:ad:80:69:9f:ab:a6:46:1f:99:76:b1:8d:eb:d7:94:2c:fd:
ea:43:de:43:5f:bf:6e:d8:97:c4:13:43:7c:6f:62:57:c2:fd:
df:fc:6e:cb:4b:62:7f:5f:81:cb:82:cc:fd:fb:1f:52:d3:b0:
af:14:3d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:50:13 2025 by rpki-client