Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f5b954-65b9-437a-b499-9c28e1cd197e/1/VU3dGwemsKecI5vJIXEp3jBRIfM.roa
File: VU3dGwemsKecI5vJIXEp3jBRIfM.roa (raw, json)
Hash identifier: CHlwZGhPx7VEDG5pg3egTmMfsGDVaMx2w7r9zh+yYz0=
Subject key identifier: 55:4D:DD:1B:07:A6:B0:A7:9C:23:9B:C9:21:71:29:DE:30:51:21:F3
Certificate issuer: /CN=3d3257a4cc2d989b3126d8b2cfdbbc2015e08bb4
Certificate serial: 06EFCBCC
Authority key identifier: 3D:32:57:A4:CC:2D:98:9B:31:26:D8:B2:CF:DB:BC:20:15:E0:8B:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PTJXpMwtmJsxJtiyz9u8IBXgi7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f5b954-65b9-437a-b499-9c28e1cd197e/1/VU3dGwemsKecI5vJIXEp3jBRIfM.roa
Signing time: Sat 01 Jan 2022 01:53:01 +0000
ROA not before: Sat 01 Jan 2022 01:53:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 91.230.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116378572 (0x6efcbcc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d3257a4cc2d989b3126d8b2cfdbbc2015e08bb4
Validity
Not Before: Jan 1 01:53:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=554ddd1b07a6b0a79c239bc9217129de305121f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b5:0e:39:b5:19:e0:57:f8:55:57:9f:20:7f:
3a:1b:40:54:4f:70:97:77:76:a5:31:ce:2a:28:cd:
1d:13:45:55:7f:8a:91:66:05:87:b9:26:e7:53:b5:
21:a3:18:11:33:2a:5b:a6:81:40:60:ec:dc:a8:56:
8b:c5:a7:1e:dd:87:fe:e7:fd:5b:1f:a6:44:22:8c:
38:57:02:2e:68:1c:1a:25:5f:a5:08:5c:d7:4b:f3:
5a:d9:1f:96:d9:09:9f:44:5e:08:41:03:de:e8:36:
22:88:35:0c:6c:ce:7c:e6:9d:cc:7e:75:4f:02:16:
b8:d0:bb:3e:96:af:c4:bd:04:a1:85:c8:cc:f5:53:
bb:bc:78:8f:b5:9b:d9:1f:10:fb:0a:79:76:28:e1:
0b:6d:87:78:84:4f:41:cf:87:d5:71:28:fe:42:f7:
96:a5:32:9c:07:98:8c:2e:f8:81:23:0f:43:98:36:
f0:18:a4:e1:18:70:c7:e8:dd:6a:bf:8b:a3:ef:69:
e4:fc:bc:1e:b1:4b:da:4c:d6:1c:c3:6f:a9:49:80:
94:42:da:4c:fa:15:69:18:4a:74:66:b8:72:1a:95:
3c:c5:72:e1:71:9b:e4:31:25:50:dc:4a:5f:05:06:
b7:bd:c2:60:2b:0a:d6:d1:93:3a:99:f5:03:35:1d:
b4:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:4D:DD:1B:07:A6:B0:A7:9C:23:9B:C9:21:71:29:DE:30:51:21:F3
X509v3 Authority Key Identifier:
keyid:3D:32:57:A4:CC:2D:98:9B:31:26:D8:B2:CF:DB:BC:20:15:E0:8B:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PTJXpMwtmJsxJtiyz9u8IBXgi7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f5b954-65b9-437a-b499-9c28e1cd197e/1/VU3dGwemsKecI5vJIXEp3jBRIfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f5b954-65b9-437a-b499-9c28e1cd197e/1/PTJXpMwtmJsxJtiyz9u8IBXgi7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.237.0/24
Signature Algorithm: sha256WithRSAEncryption
29:76:37:00:20:95:e9:17:32:2c:48:32:58:81:ac:30:6d:bb:
5a:52:95:8e:38:36:34:b4:d0:cf:31:4e:f2:90:f5:70:ee:d9:
55:e3:b3:78:c6:d2:a9:4d:52:fc:2c:3b:16:0e:65:e8:b4:96:
6c:19:b5:1e:3e:cf:a6:80:76:79:4a:39:95:f3:61:64:d0:44:
28:1d:49:cd:18:5a:64:c2:e6:e2:96:56:a8:8b:8e:42:72:cf:
d3:a9:7f:19:b0:fb:61:63:29:3a:e1:01:4b:3f:20:6c:4c:7c:
0b:65:0d:18:d7:4e:ff:85:48:a0:cf:bb:e9:12:0e:97:25:17:
8d:9c:4b:47:3c:83:14:a1:f0:67:05:4c:1a:4c:f3:e4:af:03:
92:d6:ec:7f:55:41:5c:44:fc:d7:d1:62:19:0e:2e:36:4d:fd:
40:3b:37:15:f4:85:36:df:cb:49:a2:9d:4e:30:44:62:67:fb:
dd:90:22:e1:e7:62:4e:68:2c:b9:d9:8d:d6:fd:e3:3a:12:ab:
f3:cb:2a:60:9d:cf:32:1a:45:52:43:4d:4f:c1:06:23:05:c3:
39:b0:50:f9:37:87:c6:e0:cc:23:e4:b2:23:af:99:2a:30:c8:
e8:58:7f:43:f7:ae:c4:6b:f4:47:e4:f2:eb:4a:4d:e4:82:50:
db:a7:83:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:43:12 2025 by rpki-client