Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Vfwc7dqdnyEFhVXD4lG5ipAkOso.roa
File: Vfwc7dqdnyEFhVXD4lG5ipAkOso.roa (raw, json)
Hash identifier: +wfpJg5UNiZUJThuFXEFXZLmEW0ojoI+l5B83/VCSJo=
Subject key identifier: 55:FC:1C:ED:DA:9D:9F:21:05:85:55:C3:E2:51:B9:8A:90:24:3A:CA
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01942824876272A30CE8471E60AB9AAA8291
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Vfwc7dqdnyEFhVXD4lG5ipAkOso.roa
Signing time: Thu 02 Jan 2025 17:51:10 +0000
ROA not before: Thu 02 Jan 2025 17:51:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49981
IP address blocks: 81.161.229.0/24 maxlen: 24
147.78.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:87:62:72:a3:0c:e8:47:1e:60:ab:9a:aa:82:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=55fc1cedda9d9f21058555c3e251b98a90243aca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:63:58:0a:27:c9:e5:74:47:77:e4:d5:b9:66:
07:28:13:4c:7f:6c:d3:b0:0e:1b:45:5d:12:c6:d2:
d8:12:d4:de:21:a7:ff:38:5c:ab:d6:03:ef:d2:a1:
3c:fb:64:45:ff:c8:5d:2b:66:6e:3c:a9:42:96:68:
db:80:6e:22:c4:4f:1e:81:21:11:55:05:be:6b:63:
83:e4:aa:36:37:ff:d9:c6:91:0c:53:35:62:2d:6b:
a2:e1:93:4f:96:4f:45:47:27:bd:bb:8e:dd:4a:51:
79:e0:e4:10:35:b8:c1:ca:8e:29:ef:ac:15:b1:aa:
b9:0e:22:fe:f2:4f:67:4d:46:b5:2f:c3:77:40:ba:
cf:1f:2f:3d:e9:26:f4:a0:7e:e2:0e:e7:f9:2c:c0:
79:30:93:44:48:03:9c:24:c9:2a:c2:89:bb:c8:a8:
25:6e:11:c0:25:68:0c:45:a6:78:49:44:7f:d7:61:
cf:fa:28:54:4a:15:c1:5c:4a:ec:e8:28:fd:40:fe:
99:04:23:08:9d:0d:f1:06:9d:9a:a5:2b:13:e8:a0:
37:6b:63:ce:9d:64:7a:39:97:e9:3f:46:9f:b4:39:
fc:65:a1:70:30:a3:61:84:c9:cc:fb:c4:77:d6:e1:
cb:16:6e:c5:d6:f2:f8:2f:75:c4:86:c7:1f:6f:6e:
b8:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:FC:1C:ED:DA:9D:9F:21:05:85:55:C3:E2:51:B9:8A:90:24:3A:CA
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Vfwc7dqdnyEFhVXD4lG5ipAkOso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.161.229.0/24
147.78.101.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:40:c3:f8:05:6f:b0:c7:b0:e5:d5:e5:08:12:cc:b3:ba:83:
9c:ca:de:3b:29:ed:af:60:0c:0c:25:73:dd:29:d9:b9:99:67:
bc:88:4b:4f:b7:14:83:c6:20:44:b4:57:27:30:14:d4:96:a7:
4b:59:35:b1:f5:7b:6b:9e:80:19:ec:3e:f0:ad:93:96:0d:39:
49:86:cd:88:7d:9d:2d:49:e0:da:86:49:ee:1d:2d:6e:d7:e0:
74:b9:5e:a0:a6:db:88:ce:ac:b4:ab:12:72:d8:7d:5a:78:d8:
16:55:69:7c:0c:da:d7:b0:e7:1a:2b:6d:ea:83:b8:e5:6a:cb:
47:32:42:31:6d:85:74:6a:29:38:66:91:90:27:d1:83:73:e5:
40:ac:6f:43:f6:e3:96:7a:c5:d0:c1:69:c0:00:20:0f:52:2a:
3a:af:c7:f0:8e:51:ee:9a:cc:f2:31:32:38:12:94:3e:6e:03:
8f:b6:42:ea:81:e9:ee:6b:3c:0a:20:ba:30:e9:66:88:a6:ff:
a2:d6:75:ed:9d:bb:de:32:dd:fe:af:f7:98:85:b0:0b:36:ea:
26:cb:42:24:a3:0f:eb:57:1d:ec:37:ba:72:16:0f:dc:c1:99:
b8:2d:3e:ac:94:e3:f8:92:60:6d:b7:91:96:0b:b3:35:22:c3:
4c:d8:7c:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:53:31 2025 by rpki-client