Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/VLHCV6lr7BNgR2Fd1tKMBJvuTRQ.roa
File: VLHCV6lr7BNgR2Fd1tKMBJvuTRQ.roa (raw, json)
Hash identifier: 0Btvt5ZHp2+JecRDRpyauwV1daoZIgA2l6uCdIeBx0Q=
Subject key identifier: 54:B1:C2:57:A9:6B:EC:13:60:47:61:5D:D6:D2:8C:04:9B:EE:4D:14
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 019422FB749002626DED767748ACA609184A
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/VLHCV6lr7BNgR2Fd1tKMBJvuTRQ.roa
Signing time: Wed 01 Jan 2025 17:48:12 +0000
ROA not before: Wed 01 Jan 2025 17:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47122
IP address blocks: 91.214.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:74:90:02:62:6d:ed:76:77:48:ac:a6:09:18:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Jan 1 17:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=54b1c257a96bec136047615dd6d28c049bee4d14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:9c:3e:bf:5f:28:6d:0e:a2:36:77:df:6a:22:
5c:1f:8b:bf:90:91:54:7e:b0:87:7e:28:a4:a6:6c:
6e:1f:2e:e1:d6:51:0b:1b:87:dc:70:c5:c1:f2:d5:
a1:95:59:a3:97:05:d0:e0:f1:3d:7d:d4:ac:0c:12:
fa:7d:3d:4f:1a:c6:bc:06:cf:9b:9e:42:da:18:0d:
f3:b4:39:09:db:1d:86:5c:95:ec:2d:56:60:d8:51:
56:65:d7:60:75:03:3b:40:96:c0:09:11:bf:36:34:
56:13:25:2e:3f:61:50:1b:1b:18:d5:63:ff:82:48:
bf:78:c6:2d:77:a6:e7:af:4a:8c:f0:9a:ee:5e:14:
48:cb:43:18:dc:94:9f:1f:3c:59:66:05:bf:9c:8b:
cb:a1:ba:b6:a9:f5:b4:72:a6:b0:3e:b2:16:fe:2b:
73:3d:b2:3d:a5:6e:b4:dc:48:10:b0:29:68:e1:03:
a2:04:74:91:58:e7:82:91:3b:59:3a:6e:5b:fe:ee:
a4:78:c4:83:64:7e:46:67:a1:88:ff:79:e8:90:da:
99:9e:23:10:2f:0d:9e:67:db:94:69:02:c2:9f:01:
35:39:db:f3:77:14:9e:ed:52:54:73:60:7e:61:46:
76:32:0a:33:af:14:30:6a:60:4a:f2:6b:8a:a3:d7:
91:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:B1:C2:57:A9:6B:EC:13:60:47:61:5D:D6:D2:8C:04:9B:EE:4D:14
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/VLHCV6lr7BNgR2Fd1tKMBJvuTRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.214.119.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:39:ac:de:c6:1e:b6:71:89:e1:24:64:61:05:e9:ee:1c:8f:
f6:9f:86:29:c6:42:f7:6e:0f:c7:11:b3:42:c9:15:3c:9a:db:
f0:26:07:11:13:dd:1a:58:cb:41:03:d0:d4:4d:e5:62:8a:04:
72:a7:06:d0:3f:c0:2b:d0:64:67:39:54:61:ed:91:92:2d:81:
4a:5d:a6:d2:41:6b:86:b6:7d:3c:be:01:56:af:df:13:a9:3d:
67:00:3c:e7:b9:55:ea:e1:b9:dc:29:6c:86:66:03:3d:94:e9:
b7:d5:0b:2c:ef:a5:4a:d1:74:e9:3c:c7:07:47:99:cb:47:33:
ea:8c:52:1e:56:60:b5:33:c6:8c:c9:41:6d:a0:c8:10:a9:5e:
e8:8f:f9:4e:ad:95:e9:e9:ad:db:8c:9c:d7:d6:67:aa:18:e3:
f6:37:9c:c9:c3:0e:82:77:e8:41:02:dc:1d:12:85:01:81:98:
41:2a:8b:f7:dd:7b:06:63:11:15:6f:2c:4e:ef:7d:65:5a:84:
c2:41:a0:c2:6e:16:89:75:f4:34:38:7c:e9:34:17:59:b3:70:
f1:b4:b8:2b:aa:d1:03:c5:d0:49:91:d0:25:75:24:24:d1:ab:
13:36:1c:cd:83:78:1a:a8:49:27:7f:1a:60:10:b9:cf:35:9c:
29:c3:bc:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:03:38 2025 by rpki-client