Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/VoolzUwqWdjT_6ym6OldKRkJu08.roa
File: VoolzUwqWdjT_6ym6OldKRkJu08.roa (raw, json)
Hash identifier: P83IslquU55GgGeVulsKAXE7c1EVmhXTqnamoFvTaus=
Subject key identifier: 56:8A:25:CD:4C:2A:59:D8:D3:FF:AC:A6:E8:E9:5D:29:19:09:BB:4F
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 0194266C2D6E38E2E475D2E6F34B6CE17EC7
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/VoolzUwqWdjT_6ym6OldKRkJu08.roa
Signing time: Thu 02 Jan 2025 09:50:11 +0000
ROA not before: Thu 02 Jan 2025 09:50:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205463
IP address blocks: 5.178.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:2d:6e:38:e2:e4:75:d2:e6:f3:4b:6c:e1:7e:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Jan 2 09:50:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=568a25cd4c2a59d8d3ffaca6e8e95d291909bb4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:95:0c:eb:6f:34:56:3a:57:b9:dc:a3:66:19:
f5:52:3a:95:31:39:77:a7:6a:b5:d8:b6:c7:9a:c0:
d4:4b:69:ff:71:7b:dc:a8:d9:72:ac:a2:91:af:04:
51:25:55:28:7a:dc:b3:41:4d:c7:52:cc:b1:d3:f4:
4c:a7:4a:c4:ca:6a:d3:a3:21:30:77:77:0e:ca:e4:
d2:23:c7:0b:68:aa:84:4c:e6:45:b5:7e:fe:29:0e:
a6:3f:d2:a7:69:15:50:b4:76:87:48:ba:b2:49:4d:
ee:55:21:1f:96:32:da:1b:04:af:e2:d1:22:10:32:
64:86:33:9b:c0:ab:46:78:db:98:8a:8d:39:bc:20:
cb:79:2b:66:06:59:34:84:03:8b:06:e6:89:d4:07:
45:6f:c3:22:82:51:4f:7c:3d:0d:18:7d:df:5b:fd:
7e:f9:3f:88:c2:06:b5:9d:24:7b:53:e1:84:94:17:
4f:0a:f4:1f:89:07:74:78:4a:80:cb:1b:4c:ca:f5:
ba:6a:f5:be:84:cf:51:70:6b:8a:f2:59:08:61:d5:
1e:92:5b:3d:be:1a:e6:ed:ff:6d:f5:8d:74:cf:e7:
8c:30:df:4d:64:04:c2:92:de:46:f1:fc:8d:6f:ba:
28:3f:70:5d:6a:1e:73:5f:4d:bf:83:bc:d2:00:2e:
2a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:8A:25:CD:4C:2A:59:D8:D3:FF:AC:A6:E8:E9:5D:29:19:09:BB:4F
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/VoolzUwqWdjT_6ym6OldKRkJu08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.103.0/24
Signature Algorithm: sha256WithRSAEncryption
91:eb:f8:7c:53:61:1d:dd:13:a6:fe:ed:2f:d8:d4:db:c6:56:
d7:92:35:85:68:b4:91:1e:c0:a8:86:ff:31:c1:3c:ec:4a:2a:
5e:b1:16:22:80:c8:b7:84:63:e4:d0:54:b6:64:51:e9:81:64:
bd:97:b3:e0:1e:88:e9:58:0a:2a:3d:60:d3:1c:3c:3d:72:9c:
58:a8:c2:37:64:09:b9:34:0a:d1:0e:d7:78:c2:73:4c:4b:e8:
d2:7b:cb:4c:1f:f9:37:85:15:88:ab:c2:2e:55:84:a8:d2:f4:
a6:4a:fc:ba:c1:19:39:c2:b9:41:22:5b:8c:0e:fd:27:d5:3e:
45:fb:29:0c:d9:db:c9:91:64:2e:4b:3c:0c:3c:7a:52:b6:ab:
c1:de:26:30:91:9a:23:e6:a8:54:19:4b:11:5b:90:51:86:0d:
59:2a:b9:24:88:8f:93:f0:a8:b9:c5:09:a5:15:8b:48:37:8a:
9b:1e:38:ba:b3:c8:1c:29:93:93:4f:0b:b5:ec:d1:7d:d1:13:
24:c9:3e:bc:ed:9f:e7:d4:a7:cb:aa:9d:11:5a:ae:aa:40:b1:
86:46:3c:07:e2:94:2c:ed:4a:c4:df:f4:fb:46:47:58:ad:ea:
96:ee:ff:d4:13:ce:57:6a:de:0f:22:94:74:39:c0:15:91:6a:
e4:d6:2e:57
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQmbC1uOOLkddLm80ts4X7HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzMTg4MTczMmEzZTI0NWE5NTliYzY3OWUwNDU4YzM5Zjg5
M2U0NmIwHhcNMjUwMTAyMDk1MDExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NjhhMjVjZDRjMmE1OWQ4ZDNmZmFjYTZlOGU5NWQyOTE5MDliYjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJUM6280VjpXudyjZhn1UjqVMTl3
p2q12LbHmsDUS2n/cXvcqNlyrKKRrwRRJVUoetyzQU3HUsyx0/RMp0rEymrToyEw
d3cOyuTSI8cLaKqETOZFtX7+KQ6mP9KnaRVQtHaHSLqySU3uVSEfljLaGwSv4tEi
EDJkhjObwKtGeNuYio05vCDLeStmBlk0hAOLBuaJ1AdFb8MiglFPfD0NGH3fW/1+
+T+Iwga1nSR7U+GElBdPCvQfiQd0eEqAyxtMyvW6avW+hM9RcGuK8lkIYdUekls9
vhrm7f9t9Y10z+eMMN9NZATCkt5G8fyNb7ooP3Bdah5zX02/g7zSAC4qMwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFaKJc1MKlnY0/+spujpXSkZCbtPMB8GA1UdIwQY
MBaAFBMYgXMqPiRalZvGeeBFjDn4k+RrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXhpQmN5by1KRnFWbThaNTRFV01PZmlUNUdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS84OWYwNzEtNTYzMS00NWRiLWE3ZTUt
Y2Q2MTUyMjYxYzZmLzEvVm9vbHpVd3FXZGpUXzZ5bTZPbGRLUmtKdTA4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS84OWYwNzEtNTYzMS00NWRiLWE3ZTUtY2Q2MTUyMjYxYzZm
LzEvRXhpQmN5by1KRnFWbThaNTRFV01PZmlUNUdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABbJnMA0G
CSqGSIb3DQEBCwUAA4IBAQCR6/h8U2Ed3ROm/u0v2NTbxlbXkjWFaLSRHsCohv8x
wTzsSipesRYigMi3hGPk0FS2ZFHpgWS9l7PgHojpWAoqPWDTHDw9cpxYqMI3ZAm5
NArRDtd4wnNMS+jSe8tMH/k3hRWIq8IuVYSo0vSmSvy6wRk5wrlBIluMDv0n1T5F
+ykM2dvJkWQuSzwMPHpStqvB3iYwkZoj5qhUGUsRW5BRhg1ZKrkkiI+T8Ki5xQml
FYtIN4qbHji6s8gcKZOTTwu17NF90RMkyT687Z/n1KfLqp0RWq6qQLGGRjwH4pQs
7UrE3/T7RkdYreqW7v/UE85Xat4PIpR0OcAVkWrk1i5X
-----END CERTIFICATE-----
Generated at Sun Apr 6 04:37:44 2025 by rpki-client