Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/VGUGvG0qTS8iHMPUrj4OcoPN-CY.roa
File: VGUGvG0qTS8iHMPUrj4OcoPN-CY.roa (raw, json)
Hash identifier: qbRjkxT58X4PO0MBrv3/oQ9QbRzJ3JABLm/z75dpcoQ=
Subject key identifier: 54:65:06:BC:6D:2A:4D:2F:22:1C:C3:D4:AE:3E:0E:72:83:CD:F8:26
Certificate issuer: /CN=8e747481f2c98fbb70dca8d65c23de4fca37583d
Certificate serial: 0185F01380485357DB4E5393E8CB25717A22
Authority key identifier: 8E:74:74:81:F2:C9:8F:BB:70:DC:A8:D6:5C:23:DE:4F:CA:37:58:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnR0gfLJj7tw3KjWXCPeT8o3WD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/VGUGvG0qTS8iHMPUrj4OcoPN-CY.roa
Signing time: Thu 26 Jan 2023 21:54:47 +0000
ROA not before: Thu 26 Jan 2023 21:54:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 54339
IP address blocks: 194.53.188.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:f0:13:80:48:53:57:db:4e:53:93:e8:cb:25:71:7a:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e747481f2c98fbb70dca8d65c23de4fca37583d
Validity
Not Before: Jan 26 21:54:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=546506bc6d2a4d2f221cc3d4ae3e0e7283cdf826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:df:e0:cf:1b:29:c5:8c:bd:98:17:6c:f9:df:
92:07:ca:62:05:86:30:ab:57:08:1a:18:7c:e4:ba:
30:28:5f:75:a3:3c:42:93:e0:fa:00:8b:5c:5e:f2:
15:47:56:fa:c4:a7:1c:8d:41:d8:07:81:21:6c:c4:
05:6f:70:9f:ee:0e:6b:05:84:17:b0:f9:01:b1:05:
64:5c:c9:6c:a3:25:eb:cb:87:f3:fb:32:8c:27:3b:
5c:18:96:62:d2:ea:de:9e:b2:16:2a:dc:46:59:2a:
79:f3:e2:95:33:e2:aa:38:27:36:de:ce:27:01:86:
ad:26:96:c6:d1:03:95:f6:fa:25:58:21:c7:d7:04:
fd:a9:d0:69:a6:f0:3c:c5:a5:88:3b:69:10:67:01:
b7:84:7c:ce:bc:07:3a:c1:0f:1f:48:c9:02:53:76:
02:b7:5c:7d:e0:91:8b:ce:b2:53:84:fd:01:8f:86:
56:6b:c1:ee:a3:66:92:58:0d:2e:27:7b:25:f3:af:
2b:09:67:5a:85:c4:f8:c5:fb:6c:43:a6:10:af:db:
6a:f3:87:c6:0d:fb:5b:b9:ca:29:ab:af:65:ef:71:
f4:75:5a:b1:d2:07:22:52:96:e7:40:a9:7c:dd:d7:
1d:16:d3:f7:70:e1:8f:67:dc:fd:2c:ac:a8:79:e8:
b6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:65:06:BC:6D:2A:4D:2F:22:1C:C3:D4:AE:3E:0E:72:83:CD:F8:26
X509v3 Authority Key Identifier:
keyid:8E:74:74:81:F2:C9:8F:BB:70:DC:A8:D6:5C:23:DE:4F:CA:37:58:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnR0gfLJj7tw3KjWXCPeT8o3WD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/VGUGvG0qTS8iHMPUrj4OcoPN-CY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/jnR0gfLJj7tw3KjWXCPeT8o3WD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.53.188.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:80:dc:ab:8e:70:ee:11:30:09:12:fd:eb:a9:12:d9:e3:71:
58:79:44:85:12:d7:32:1f:bf:93:94:32:df:99:b1:57:33:33:
69:e8:7b:a7:79:0b:4e:3c:77:ea:57:73:9c:d5:b2:e7:51:ba:
a6:f0:af:25:de:53:ba:8a:8a:9b:f2:91:44:79:24:ea:8c:c1:
d2:80:dc:51:d5:8e:49:9c:49:b9:23:bb:f7:07:b8:71:1d:60:
14:96:fc:9a:d2:77:b4:5f:cf:15:d6:38:7b:12:75:40:2c:fd:
0e:44:30:d6:fc:17:89:d7:6d:69:df:09:a5:48:74:d0:c4:09:
8d:38:04:5d:45:a2:35:43:81:6a:71:c6:68:d2:71:2c:fd:d7:
ed:97:7a:e3:20:a3:5e:6a:eb:1d:5f:f9:b9:de:95:77:e2:76:
c8:78:60:0b:95:e6:50:a0:e5:1a:f9:c2:53:a3:20:c1:08:44:
2f:0d:1b:00:5d:6e:e5:fb:01:88:b4:e3:a2:10:57:66:d4:ae:
d7:c4:66:9e:95:2a:92:cf:16:d3:80:0f:ac:1f:57:0b:7b:f5:
98:23:00:82:66:f4:86:15:73:55:43:95:9b:18:87:a4:c5:37:
81:d0:94:76:2b:2e:9d:53:4c:d7:34:37:ea:e3:6e:fd:0c:d4:
f7:1e:03:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 21:21:13 2025 by rpki-client