Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/rpVEI9UEI1-WJFYPN_yr9LMGvvc.roa
File: rpVEI9UEI1-WJFYPN_yr9LMGvvc.roa (raw, json)
Hash identifier: JaM6/GuUVucxk5DxvvEe7MfBQN9s9ZArtYnX5zZQ0E0=
Subject key identifier: AE:95:44:23:D5:04:23:5F:96:24:56:0F:37:FC:AB:F4:B3:06:BE:F7
Certificate issuer: /CN=b82e7b8068c4ae9ae4ca4c3a6b2096199a741ff2
Certificate serial: 01941F8C003BA4A9B7BFD4E528E429C0F69B
Authority key identifier: B8:2E:7B:80:68:C4:AE:9A:E4:CA:4C:3A:6B:20:96:19:9A:74:1F:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/rpVEI9UEI1-WJFYPN_yr9LMGvvc.roa
Signing time: Wed 01 Jan 2025 01:47:36 +0000
ROA not before: Wed 01 Jan 2025 01:47:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 26548
IP address blocks: 178.159.100.0/24 maxlen: 24
178.159.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:00:3b:a4:a9:b7:bf:d4:e5:28:e4:29:c0:f6:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b82e7b8068c4ae9ae4ca4c3a6b2096199a741ff2
Validity
Not Before: Jan 1 01:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ae954423d504235f9624560f37fcabf4b306bef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:09:3d:aa:d9:23:2e:91:73:45:93:64:9a:60:
bd:e6:0d:78:89:d5:94:e2:e0:b1:28:3b:cc:82:29:
99:d2:05:ef:4e:91:48:7a:d1:6e:7e:58:9f:6b:a6:
f2:6e:0c:ba:b5:47:25:f2:75:1f:e3:f9:f9:ad:19:
45:db:6f:8c:12:ae:1e:23:97:07:85:08:88:f6:66:
9b:8a:f4:36:91:66:1d:0a:93:48:de:66:38:e5:b0:
b8:16:71:9b:b9:4f:11:4e:42:31:8a:22:b0:9b:55:
5a:fa:86:8c:5f:87:c9:93:32:b3:1c:07:81:e1:1f:
0b:d4:82:8c:f2:4a:02:97:3c:8f:8a:a4:2b:97:20:
cf:43:11:70:e6:46:f4:58:35:e9:57:7d:12:45:7f:
01:ca:72:7c:48:98:8b:1a:d2:ab:5e:45:ee:13:b4:
ed:81:dd:95:0b:da:cf:be:84:3e:f8:2c:a4:a5:0f:
21:b6:b2:de:1b:e9:9d:51:92:99:86:60:49:26:2b:
47:35:32:2a:e2:49:b0:5a:a2:f8:fd:3d:b4:83:bc:
b0:4c:40:40:03:92:73:f0:55:aa:17:64:53:e8:28:
c3:6d:65:1e:4d:71:4b:76:0b:3b:15:92:e8:0d:5f:
36:f9:13:53:bd:4a:02:64:f3:4e:13:ea:a9:dc:02:
99:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:95:44:23:D5:04:23:5F:96:24:56:0F:37:FC:AB:F4:B3:06:BE:F7
X509v3 Authority Key Identifier:
keyid:B8:2E:7B:80:68:C4:AE:9A:E4:CA:4C:3A:6B:20:96:19:9A:74:1F:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/rpVEI9UEI1-WJFYPN_yr9LMGvvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.159.100.0/24
178.159.107.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:75:01:64:f4:49:fd:29:45:9c:99:c5:6a:ae:a1:44:bb:17:
47:f8:ac:1b:4e:83:38:4e:8a:3e:0d:84:cf:b8:a7:35:30:15:
4a:b6:8e:a4:9a:fb:a5:4e:7e:04:bd:85:e0:7e:9c:a2:37:36:
9c:a7:cd:98:10:95:0d:d2:bb:c5:ad:ba:99:3f:24:83:a7:b6:
bf:4b:99:1a:eb:c0:35:e4:cf:5d:32:ab:19:72:d9:05:f2:b3:
8d:21:cf:84:8f:a4:cf:3e:9e:51:fd:26:bf:02:9e:14:fd:33:
ef:28:e2:5d:00:82:43:bb:18:13:9f:4b:7d:60:a1:a2:c9:28:
bc:47:dc:45:f6:17:66:9b:81:eb:62:7f:8c:7d:3c:a3:8b:da:
82:15:14:1c:b3:28:c0:fb:25:41:e4:45:cc:b9:cf:4a:cb:e6:
76:51:f5:59:ef:39:82:69:ee:8d:76:ed:03:c9:1c:40:ff:8a:
43:12:4f:21:76:8a:90:ef:00:23:3f:60:c8:b0:3a:d7:1c:ee:
5a:19:d4:c4:ce:ea:20:32:e6:d0:93:dd:50:68:47:ea:e9:56:
7e:90:3d:cd:3d:3b:4d:4c:75:98:1d:62:54:42:0b:57:98:94:
80:1a:e5:52:d0:61:3d:74:cd:44:9e:ad:60:bf:6c:d9:72:a9:
73:4a:df:88
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQfjAA7pKm3v9TlKOQpwPabMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4MmU3YjgwNjhjNGFlOWFlNGNhNGMzYTZiMjA5NjE5OWE3
NDFmZjIwHhcNMjUwMTAxMDE0NzM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZTk1NDQyM2Q1MDQyMzVmOTYyNDU2MGYzN2ZjYWJmNGIzMDZiZWY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgk9qtkjLpFzRZNkmmC95g14idWU
4uCxKDvMgimZ0gXvTpFIetFuflifa6bybgy6tUcl8nUf4/n5rRlF22+MEq4eI5cH
hQiI9mabivQ2kWYdCpNI3mY45bC4FnGbuU8RTkIxiiKwm1Va+oaMX4fJkzKzHAeB
4R8L1IKM8koClzyPiqQrlyDPQxFw5kb0WDXpV30SRX8BynJ8SJiLGtKrXkXuE7Tt
gd2VC9rPvoQ++CykpQ8htrLeG+mdUZKZhmBJJitHNTIq4kmwWqL4/T20g7ywTEBA
A5Jz8FWqF2RT6CjDbWUeTXFLdgs7FZLoDV82+RNTvUoCZPNOE+qp3AKZuQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFK6VRCPVBCNfliRWDzf8q/SzBr73MB8GA1UdIwQY
MBaAFLgue4BoxK6a5MpMOmsglhmadB/yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUM1N2dHakVycHJreWt3NmF5Q1dHWnAwSF9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8yOWM5MTUtMmNiYy00NzY4LTg0MGMt
YWFkZmE5YzA2NzQyLzEvcnBWRUk5VUVJMS1XSkZZUE5feXI5TE1HdnZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny8yOWM5MTUtMmNiYy00NzY4LTg0MGMtYWFkZmE5YzA2NzQy
LzEvdUM1N2dHakVycHJreWt3NmF5Q1dHWnAwSF9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAsp9kAwQA
sp9rMA0GCSqGSIb3DQEBCwUAA4IBAQCOdQFk9En9KUWcmcVqrqFEuxdH+KwbToM4
Too+DYTPuKc1MBVKto6kmvulTn4EvYXgfpyiNzacp82YEJUN0rvFrbqZPySDp7a/
S5ka68A15M9dMqsZctkF8rONIc+Ej6TPPp5R/Sa/Ap4U/TPvKOJdAIJDuxgTn0t9
YKGiySi8R9xF9hdmm4HrYn+MfTyji9qCFRQcsyjA+yVB5EXMuc9Ky+Z2UfVZ7zmC
ae6Ndu0DyRxA/4pDEk8hdoqQ7wAjP2DIsDrXHO5aGdTEzuogMubQk91QaEfq6VZ+
kD3NPTtNTHWYHWJUQgtXmJSAGuVS0GE9dM1Enq1gv2zZcqlzSt+I
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:09:56 2025 by rpki-client