Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/VCSX4HoRLi2RJt9iPlbL64l5NyA.roa
File: VCSX4HoRLi2RJt9iPlbL64l5NyA.roa (raw, json)
Hash identifier: /8/hrtFD25RCU+VM29gDYWYQUq646u3rhLhyRWhYzCc=
Subject key identifier: 54:24:97:E0:7A:11:2E:2D:91:26:DF:62:3E:56:CB:EB:89:79:37:20
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 01942144048D1833F856566DC5A65E0BF51D
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/VCSX4HoRLi2RJt9iPlbL64l5NyA.roa
Signing time: Wed 01 Jan 2025 09:48:13 +0000
ROA not before: Wed 01 Jan 2025 09:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49729
IP address blocks: 91.228.88.0/24 maxlen: 24
195.64.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:04:8d:18:33:f8:56:56:6d:c5:a6:5e:0b:f5:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jan 1 09:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=542497e07a112e2d9126df623e56cbeb89793720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:98:bf:b8:72:55:f5:1a:95:5d:7f:7e:76:d0:
8f:cc:b7:9b:22:6d:65:bc:7c:f5:f0:bc:19:d5:92:
cf:31:64:9a:e9:14:83:96:2f:22:9c:fd:bd:0a:eb:
46:e4:10:5a:06:d2:35:06:57:7a:2e:bd:49:47:0c:
5a:e3:12:47:dc:00:27:a8:c8:26:1b:3b:9b:60:d9:
ef:b7:85:4e:f6:17:b1:72:49:a3:6d:d1:21:fb:f3:
0b:59:f0:e0:e7:2a:df:a1:48:12:ec:79:82:6d:b9:
4d:97:6c:b3:d1:ee:90:09:55:f8:de:1d:34:93:6b:
d3:7f:2f:38:2b:be:26:ef:a5:08:c2:64:19:be:23:
93:da:6c:01:68:93:b4:c1:ca:f7:8d:9b:71:8b:42:
8f:1a:5c:f7:e9:ba:96:ad:ed:c2:01:f6:a4:0c:b7:
49:c7:2e:a7:8f:d7:5c:3a:a6:61:11:95:49:2d:0e:
da:95:b5:dd:d7:2a:2f:b0:04:07:fc:25:d2:40:84:
61:23:0d:c7:87:f1:09:70:01:6f:b5:0c:3e:45:16:
1d:43:ed:47:7e:3f:6b:88:1d:1b:71:32:1d:6d:a7:
04:a1:95:46:31:9d:24:3b:0a:6b:07:0f:13:ca:5b:
82:d4:87:e4:e8:b3:20:70:b8:86:9b:aa:13:0f:96:
ba:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:24:97:E0:7A:11:2E:2D:91:26:DF:62:3E:56:CB:EB:89:79:37:20
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/VCSX4HoRLi2RJt9iPlbL64l5NyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.88.0/24
195.64.126.0/24
Signature Algorithm: sha256WithRSAEncryption
25:f2:b2:40:d9:47:2a:bb:f4:22:46:25:10:a8:eb:23:f7:24:
91:fc:98:90:3c:14:eb:5d:9a:cf:a3:59:aa:66:73:77:00:9f:
b3:16:23:57:03:a2:af:0f:e9:4d:0f:78:3e:57:ec:ab:ed:bd:
8a:e0:c4:6f:ce:7b:ae:e5:bd:31:6b:7d:c4:4f:de:1d:ef:7f:
42:f7:01:d9:5d:5e:68:19:90:88:34:3f:2d:b9:20:63:bd:94:
d7:06:78:c8:27:2b:0f:0e:b6:a5:43:af:e7:05:07:6f:a0:00:
f8:57:76:ad:9f:08:7c:f1:31:87:2d:e4:d6:27:ae:74:48:c4:
13:74:56:37:9a:8d:d4:39:f5:d5:56:db:5a:bb:17:9e:0f:d4:
5a:15:13:48:52:a8:44:2f:44:24:09:6a:36:fd:8b:12:fa:7e:
a2:88:22:b1:2b:96:7e:4b:33:77:0f:67:e2:9d:d8:6b:d7:16:
f8:62:c8:2a:15:44:c8:88:d0:dd:75:6b:64:57:2e:47:c7:ec:
b4:60:e7:b5:12:32:8f:e1:1a:53:7f:97:fe:68:65:68:58:be:
33:23:04:19:68:b3:0c:e7:14:ac:66:9b:14:44:4b:62:53:15:
cb:9a:ca:d4:d5:2b:19:7e:0c:fb:d6:74:68:45:e4:33:27:31:
f8:6e:b2:87
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQhRASNGDP4VlZtxaZeC/UdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4
ZmNjNGMwHhcNMjUwMTAxMDk0ODEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NDI0OTdlMDdhMTEyZTJkOTEyNmRmNjIzZTU2Y2JlYjg5NzkzNzIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5i/uHJV9RqVXX9+dtCPzLebIm1l
vHz18LwZ1ZLPMWSa6RSDli8inP29CutG5BBaBtI1Bld6Lr1JRwxa4xJH3AAnqMgm
GzubYNnvt4VO9hexckmjbdEh+/MLWfDg5yrfoUgS7HmCbblNl2yz0e6QCVX43h00
k2vTfy84K74m76UIwmQZviOT2mwBaJO0wcr3jZtxi0KPGlz36bqWre3CAfakDLdJ
xy6nj9dcOqZhEZVJLQ7albXd1yovsAQH/CXSQIRhIw3Hh/EJcAFvtQw+RRYdQ+1H
fj9riB0bcTIdbacEoZVGMZ0kOwprBw8TyluC1Ifk6LMgcLiGm6oTD5a61QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFQkl+B6ES4tkSbfYj5Wy+uJeTcgMB8GA1UdIwQY
MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt
MjM5ZDJmZTM5OGIxLzEvVkNTWDRIb1JMaTJSSnQ5aVBsYkw2NGw1TnlBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx
LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW+RYAwQA
w0B+MA0GCSqGSIb3DQEBCwUAA4IBAQAl8rJA2Ucqu/QiRiUQqOsj9ySR/JiQPBTr
XZrPo1mqZnN3AJ+zFiNXA6KvD+lND3g+V+yr7b2K4MRvznuu5b0xa33ET94d739C
9wHZXV5oGZCIND8tuSBjvZTXBnjIJysPDralQ6/nBQdvoAD4V3atnwh88TGHLeTW
J650SMQTdFY3mo3UOfXVVttauxeeD9RaFRNIUqhEL0QkCWo2/YsS+n6iiCKxK5Z+
SzN3D2findhr1xb4YsgqFUTIiNDddWtkVy5Hx+y0YOe1EjKP4RpTf5f+aGVoWL4z
IwQZaLMM5xSsZpsUREtiUxXLmsrU1SsZfgz71nRoReQzJzH4brKH
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:43:30 2025 by rpki-client