Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/fVp3g-s19I4wph98MiqmHy9dJ8Q.roa
File: fVp3g-s19I4wph98MiqmHy9dJ8Q.roa (raw, json)
Hash identifier: 1ttOZ6t4S7bYciANzsJmcpLu3G2yq0AKNa7bw1gtrgY=
Subject key identifier: 7D:5A:77:83:EB:35:F4:8E:30:A6:1F:7C:32:2A:A6:1F:2F:5D:27:C4
Certificate issuer: /CN=62beaa57c67aeb5bafd99793ab4846850a796c28
Certificate serial: 019424B26661E3D322D5D668D5352ABF72FA
Authority key identifier: 62:BE:AA:57:C6:7A:EB:5B:AF:D9:97:93:AB:48:46:85:0A:79:6C:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/fVp3g-s19I4wph98MiqmHy9dJ8Q.roa
Signing time: Thu 02 Jan 2025 01:47:38 +0000
ROA not before: Thu 02 Jan 2025 01:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52209
IP address blocks: 91.239.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:66:61:e3:d3:22:d5:d6:68:d5:35:2a:bf:72:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62beaa57c67aeb5bafd99793ab4846850a796c28
Validity
Not Before: Jan 2 01:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d5a7783eb35f48e30a61f7c322aa61f2f5d27c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:23:5e:19:56:94:91:d0:fd:32:a0:13:2d:7d:
60:1f:dd:4a:b3:0e:b5:ad:1f:f1:ed:1f:15:16:0c:
a3:46:85:cb:8b:44:fe:ad:22:28:5d:c0:13:ec:6b:
42:49:b6:ea:df:92:4c:6b:d7:67:ba:86:0a:2b:96:
9e:42:13:36:55:85:57:26:b4:94:41:31:3e:6b:47:
85:5e:b7:13:ef:0d:3a:83:bb:dc:aa:7d:3c:81:7b:
df:92:a6:2b:af:2c:5a:bc:44:86:96:b8:60:92:67:
80:d6:62:b3:f9:12:25:28:82:30:d3:3f:9a:fa:f4:
c2:36:df:aa:a4:63:78:47:37:97:01:24:13:da:79:
a7:e0:68:96:ff:a8:db:ae:6b:58:0c:c8:d5:ac:1a:
75:45:b3:bc:29:a4:07:98:b1:e0:39:ca:60:20:27:
a6:0a:b3:3f:14:b3:4c:fb:e6:ac:e5:e6:8a:27:2d:
6e:7c:e1:a7:41:d4:a4:87:76:23:aa:2d:d4:68:ab:
6d:1a:8e:db:8b:4c:ce:0b:55:30:12:b2:3a:9a:fc:
1a:d6:5f:1e:43:0c:00:6f:c9:7e:19:17:f1:a5:51:
6a:dd:3e:a6:d3:2f:f8:a6:78:fe:e7:60:ac:4e:2a:
0d:d7:e0:11:46:48:b2:07:03:77:90:c5:cb:e9:32:
13:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:5A:77:83:EB:35:F4:8E:30:A6:1F:7C:32:2A:A6:1F:2F:5D:27:C4
X509v3 Authority Key Identifier:
keyid:62:BE:AA:57:C6:7A:EB:5B:AF:D9:97:93:AB:48:46:85:0A:79:6C:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/fVp3g-s19I4wph98MiqmHy9dJ8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.189.0/24
Signature Algorithm: sha256WithRSAEncryption
57:2b:12:ee:06:dd:c3:dc:e8:37:99:67:c8:09:8c:45:39:d4:
19:36:56:44:5f:c6:97:44:1c:2d:02:de:9a:cb:d3:2d:09:c6:
52:25:02:6e:51:3e:d8:fe:a0:72:ba:01:39:f9:12:0b:44:46:
5c:ff:63:4c:13:8a:e2:53:12:72:da:c9:aa:8b:a2:19:77:d3:
da:e5:3c:68:14:a4:d8:b8:8a:0e:d3:39:e7:40:f1:92:42:9f:
13:d1:22:92:0b:6f:30:35:5d:ce:49:69:3f:ce:8a:06:e8:6c:
76:11:ab:a4:cb:e9:73:2f:c2:e8:73:ac:6f:8e:5a:32:3d:6f:
42:2f:f0:55:60:55:a4:d3:7d:0b:a1:ed:a9:f7:a9:5a:aa:68:
c9:c6:8e:de:45:1a:38:d9:8b:59:9d:e6:ac:72:07:46:87:ee:
49:7a:71:a6:ba:ac:fe:88:5a:aa:46:cf:d1:f9:d5:77:57:ee:
a3:61:fe:dd:69:4f:f7:2d:c1:f6:de:15:37:f6:0a:9f:30:5c:
87:74:02:7f:6f:1b:0b:2d:d0:ab:70:64:73:af:44:18:09:90:
ab:45:72:24:42:53:d5:79:56:81:73:34:54:6f:26:04:9c:1a:
bf:4a:f6:48:ec:90:56:d1:7e:7c:5d:b6:ea:0f:11:cb:ca:41:
95:e0:65:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:33:31 2025 by rpki-client