Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/1a9e14-7fb4-489b-90be-465d223b232e/1/Vrgx7vIvsF8zYOaGSae4akirA8E.roa
File: Vrgx7vIvsF8zYOaGSae4akirA8E.roa (raw, json)
Hash identifier: ui7bIuQdVcdRVDf8eIFg2mfVrPzlEX+6v4UZ3XVxNiQ=
Subject key identifier: 56:B8:31:EE:F2:2F:B0:5F:33:60:E6:86:49:A7:B8:6A:48:AB:03:C1
Certificate issuer: /CN=ebf385ced090dbf1d044734e12a270ee6b841c96
Certificate serial: 01941FFA30E191F50DBEBEE206E1A8DF06F8
Authority key identifier: EB:F3:85:CE:D0:90:DB:F1:D0:44:73:4E:12:A2:70:EE:6B:84:1C:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6_OFztCQ2_HQRHNOEqJw7muEHJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/1a9e14-7fb4-489b-90be-465d223b232e/1/Vrgx7vIvsF8zYOaGSae4akirA8E.roa
Signing time: Wed 01 Jan 2025 03:47:57 +0000
ROA not before: Wed 01 Jan 2025 03:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396982
IP address blocks: 45.141.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:30:e1:91:f5:0d:be:be:e2:06:e1:a8:df:06:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebf385ced090dbf1d044734e12a270ee6b841c96
Validity
Not Before: Jan 1 03:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=56b831eef22fb05f3360e68649a7b86a48ab03c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:55:75:42:6c:57:1e:17:fb:51:26:a0:6e:73:
a8:4a:be:f9:a1:a6:f5:04:8d:8e:3d:70:9a:51:20:
74:79:4b:0b:1a:91:93:60:bf:e1:11:3b:0f:8a:8f:
d3:f3:32:f9:b3:51:4f:c1:ae:06:ad:7d:40:fe:d1:
d8:b4:e9:54:e6:73:54:ee:c9:47:bb:4c:10:d9:5d:
55:5c:b6:be:4a:db:e0:f6:ea:ef:15:03:5f:c1:64:
3e:33:1a:00:14:61:6a:30:73:d7:fb:27:d4:97:31:
52:31:24:f5:69:a1:68:1d:64:4a:e3:76:fa:dc:00:
cf:fa:0e:03:40:1c:27:ad:02:d8:5f:de:42:38:89:
a5:06:46:18:56:7a:4b:b0:26:d0:f6:c5:c1:f3:5c:
b4:1d:24:ce:53:12:99:d7:35:f9:c5:de:21:b7:aa:
23:e2:c7:27:03:d8:e5:21:21:ef:78:22:b5:c3:4f:
1b:ed:1c:5e:08:68:47:07:1b:2c:17:6a:42:77:1e:
18:1e:ad:ff:f0:63:35:66:36:27:a2:11:a8:b6:55:
62:2c:e9:88:0c:4e:1c:c2:68:05:c3:c7:c3:8f:b0:
a3:d7:68:14:b9:06:4f:da:fb:df:de:87:2e:4c:62:
c5:14:0e:91:98:ab:e1:3c:01:90:f7:84:e9:40:c0:
19:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:B8:31:EE:F2:2F:B0:5F:33:60:E6:86:49:A7:B8:6A:48:AB:03:C1
X509v3 Authority Key Identifier:
keyid:EB:F3:85:CE:D0:90:DB:F1:D0:44:73:4E:12:A2:70:EE:6B:84:1C:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_OFztCQ2_HQRHNOEqJw7muEHJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1a9e14-7fb4-489b-90be-465d223b232e/1/Vrgx7vIvsF8zYOaGSae4akirA8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1a9e14-7fb4-489b-90be-465d223b232e/1/6_OFztCQ2_HQRHNOEqJw7muEHJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.91.0/24
Signature Algorithm: sha256WithRSAEncryption
05:4e:85:ee:5f:89:a0:79:7d:66:f9:8c:99:d6:d1:cc:01:4e:
49:2b:4c:c5:1d:04:b1:60:bb:15:ac:af:1c:27:ab:d5:c9:3c:
de:1d:c7:ab:cc:23:cd:09:78:41:cb:95:3f:b0:b3:ac:a0:5c:
38:3a:db:3e:fd:68:64:a2:e7:7c:82:e4:e3:26:e1:ee:eb:39:
97:06:7f:de:c8:d9:03:e1:23:97:22:d8:b8:60:61:9f:c6:0a:
a1:52:68:92:87:0f:2d:52:82:3b:e8:23:0f:a4:6e:0f:d1:d7:
74:3e:fc:9c:f6:f5:d7:48:ae:2d:6e:ff:27:2d:f7:30:12:ce:
91:2f:fe:3b:7d:5b:3c:f6:a3:91:59:a4:38:d6:13:53:c2:fb:
32:d9:2d:ad:6b:9c:51:8a:1e:9b:ad:cc:98:3a:c0:ca:de:67:
3f:89:27:2e:f1:2e:fd:12:80:61:ae:75:1e:bc:cc:12:5e:36:
2a:cd:44:cb:ba:15:a5:0a:83:3f:30:99:18:cc:52:8e:6b:cb:
9e:ab:a4:ba:92:6d:5e:37:6f:99:4b:2e:2c:4d:1e:42:80:de:
94:22:61:fc:c4:ef:1d:cb:fe:d3:68:ff:5f:c5:d8:95:f4:be:
03:fa:bb:51:49:a2:cc:08:55:1f:17:13:a7:29:ec:cd:7f:a9:
f3:a1:1a:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:49:44 2025 by rpki-client