Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/VEkecCYWX-3eJbHzfXRPqIguSrU.roa
File: VEkecCYWX-3eJbHzfXRPqIguSrU.roa (raw, json)
Hash identifier: y+HxKa51lXccWcF8YAwZEEpBtkvi4YQc9qp84HUBYjU=
Subject key identifier: 54:49:1E:70:26:16:5F:ED:DE:25:B1:F3:7D:74:4F:A8:88:2E:4A:B5
Certificate issuer: /CN=ab8c6c58b607ff23ae7175a61682c75480f1e214
Certificate serial: 0194244588760A67A967C293E64B5C543BDB
Authority key identifier: AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/VEkecCYWX-3eJbHzfXRPqIguSrU.roa
Signing time: Wed 01 Jan 2025 23:48:44 +0000
ROA not before: Wed 01 Jan 2025 23:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50515
IP address blocks: 92.55.144.0/24 maxlen: 24
92.55.147.0/24 maxlen: 24
188.247.130.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:88:76:0a:67:a9:67:c2:93:e6:4b:5c:54:3b:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab8c6c58b607ff23ae7175a61682c75480f1e214
Validity
Not Before: Jan 1 23:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=54491e7026165fedde25b1f37d744fa8882e4ab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:87:48:17:e8:28:89:5f:33:3b:81:ae:22:e4:
2e:b7:be:57:75:55:17:3a:12:08:a8:62:47:7b:87:
55:21:b0:5a:6b:3c:5c:80:4c:59:8d:42:a4:64:f2:
2c:70:59:97:8a:31:98:84:ff:f7:bc:19:13:99:59:
6f:1f:94:a9:30:5e:21:1f:75:84:0e:70:0b:b7:25:
85:9b:75:b8:f9:6c:a5:19:ed:e3:11:f2:6e:43:66:
4b:1e:c7:d3:7d:bf:55:9d:2e:c1:37:42:d4:b5:e3:
e9:42:8d:9a:b4:78:7d:a6:cb:90:27:a0:ca:11:02:
4f:1a:e3:ba:be:ed:b7:ba:86:84:27:46:01:5d:3d:
00:fc:9e:5b:f2:79:af:6a:27:80:ab:ee:d3:7e:3f:
a5:51:7a:da:7b:2b:8c:54:0a:a4:8f:a3:87:1b:d0:
42:4c:0a:c6:7b:6e:7e:80:cb:40:13:b6:b7:78:48:
ef:9a:89:71:b0:f5:9c:25:cf:e0:8a:6c:20:26:e0:
ef:6a:fc:1c:58:12:a8:f7:ba:c1:e3:f7:bc:ce:5f:
ea:cb:41:9e:53:1c:dc:9f:6e:d6:39:01:b0:0d:ad:
99:d0:86:42:f0:cb:05:3e:99:fd:ad:05:a4:e1:44:
a8:1b:c5:9a:69:ac:7c:b0:3c:25:b7:4d:d4:6a:da:
3f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:49:1E:70:26:16:5F:ED:DE:25:B1:F3:7D:74:4F:A8:88:2E:4A:B5
X509v3 Authority Key Identifier:
keyid:AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/VEkecCYWX-3eJbHzfXRPqIguSrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.55.144.0/24
92.55.147.0/24
188.247.130.0/24
Signature Algorithm: sha256WithRSAEncryption
01:ef:e7:d0:60:fc:f0:5e:e2:6f:50:54:89:9e:96:7b:25:d7:
a9:f1:db:66:12:97:db:e6:ae:70:c2:0f:5f:09:4c:f8:9d:d1:
0a:23:af:1f:16:76:15:01:11:3f:a3:2e:de:54:2e:a9:ac:1f:
96:18:3c:a5:37:73:5e:34:bd:36:53:9b:fe:90:cc:65:14:b3:
d6:7a:68:41:1f:fc:66:15:cb:41:05:17:7d:cc:5f:1c:88:36:
d9:2f:5e:10:81:f8:0b:f8:ae:9c:4e:f4:4c:18:54:88:20:e5:
2e:c6:3b:93:9d:fe:e5:7c:e1:37:cf:ce:f7:49:e4:ab:26:fb:
f5:71:d2:ed:64:b7:a5:3e:61:aa:b7:af:3d:20:e1:3c:b1:e9:
60:c0:18:2e:ff:92:00:20:0e:62:5e:46:98:c2:1d:da:a9:20:
0a:ce:77:91:b4:4d:7b:12:21:f4:b3:01:5c:b1:d6:04:6e:25:
c3:bf:b3:6a:20:f1:df:5d:db:47:bc:7c:51:9a:4e:76:0d:63:
5b:29:34:38:0d:c4:d8:8a:e0:6d:fb:09:19:b1:a4:21:b6:8e:
7e:da:a3:49:e8:35:b7:36:0f:94:78:af:1b:6b:05:d8:f0:28:
ad:31:a2:eb:47:35:7f:53:8e:b2:ac:2c:cf:f9:ca:01:c2:bc:
60:1b:22:14
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQkRYh2CmepZ8KT5ktcVDvbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiOGM2YzU4YjYwN2ZmMjNhZTcxNzVhNjE2ODJjNzU0ODBm
MWUyMTQwHhcNMjUwMTAxMjM0ODQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NDQ5MWU3MDI2MTY1ZmVkZGUyNWIxZjM3ZDc0NGZhODg4MmU0YWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIdIF+goiV8zO4GuIuQut75XdVUX
OhIIqGJHe4dVIbBaazxcgExZjUKkZPIscFmXijGYhP/3vBkTmVlvH5SpMF4hH3WE
DnALtyWFm3W4+WylGe3jEfJuQ2ZLHsfTfb9VnS7BN0LUtePpQo2atHh9psuQJ6DK
EQJPGuO6vu23uoaEJ0YBXT0A/J5b8nmvaieAq+7Tfj+lUXraeyuMVAqkj6OHG9BC
TArGe25+gMtAE7a3eEjvmolxsPWcJc/gimwgJuDvavwcWBKo97rB4/e8zl/qy0Ge
Uxzcn27WOQGwDa2Z0IZC8MsFPpn9rQWk4USoG8Waaax8sDwlt03Uato/IQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFFRJHnAmFl/t3iWx8310T6iILkq1MB8GA1UdIwQY
MBaAFKuMbFi2B/8jrnF1phaCx1SA8eIUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTR4c1dMWUhfeU91Y1hXbUZvTEhWSUR4NGhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9lZmI4ZWUtYzVjNC00NDY3LWEwY2Mt
ODhhM2M0MWZhZWUyLzEvVkVrZWNDWVdYLTNlSmJIemZYUlBxSWd1U3JVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9lZmI4ZWUtYzVjNC00NDY3LWEwY2MtODhhM2M0MWZhZWUy
LzEvcTR4c1dMWUhfeU91Y1hXbUZvTEhWSUR4NGhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAXDeQAwQA
XDeTAwQAvPeCMA0GCSqGSIb3DQEBCwUAA4IBAQAB7+fQYPzwXuJvUFSJnpZ7Jdep
8dtmEpfb5q5wwg9fCUz4ndEKI68fFnYVARE/oy7eVC6prB+WGDylN3NeNL02U5v+
kMxlFLPWemhBH/xmFctBBRd9zF8ciDbZL14QgfgL+K6cTvRMGFSIIOUuxjuTnf7l
fOE3z873SeSrJvv1cdLtZLelPmGqt689IOE8selgwBgu/5IAIA5iXkaYwh3aqSAK
zneRtE17EiH0swFcsdYEbiXDv7NqIPHfXdtHvHxRmk52DWNbKTQ4DcTYiuBt+wkZ
saQhto5+2qNJ6DW3Ng+UeK8bawXY8CitMaLrRzV/U46yrCzP+coBwrxgGyIU
-----END CERTIFICATE-----
Generated at Tue Apr 8 10:58:41 2025 by rpki-client