Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/vruFuJg_AdTL64I46Qn9zUapfHc.roa
File: vruFuJg_AdTL64I46Qn9zUapfHc.roa (raw, json)
Hash identifier: 2ik+M3jQbMVv2fm7elD3KaYMSfF8U+EPEMKwgOwSRLw=
Subject key identifier: BE:BB:85:B8:98:3F:01:D4:CB:EB:82:38:E9:09:FD:CD:46:A9:7C:77
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 0195A8EF4CC50A6A6CE6C340BF503025F2E5
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/vruFuJg_AdTL64I46Qn9zUapfHc.roa
Signing time: Tue 18 Mar 2025 11:06:49 +0000
ROA not before: Tue 18 Mar 2025 11:06:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 22653
IP address blocks: 64.137.54.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a8:ef:4c:c5:0a:6a:6c:e6:c3:40:bf:50:30:25:f2:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Mar 18 11:06:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bebb85b8983f01d4cbeb8238e909fdcd46a97c77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ed:41:1d:96:dc:28:04:2e:fa:d0:ad:32:3a:
35:eb:e0:44:54:62:37:aa:5e:e6:54:61:0a:9e:60:
2d:55:29:50:72:d7:65:f8:ba:6b:32:70:96:bf:59:
73:10:60:d3:12:7c:f3:1e:01:83:f9:03:1e:5a:e2:
a0:b1:e7:df:f7:be:33:14:a9:f4:99:94:3c:53:ee:
c6:51:e0:0d:5d:8a:0e:53:f7:5b:83:57:69:16:50:
d6:94:6b:dc:97:1b:e1:db:c7:25:25:4a:67:5f:a7:
cf:07:64:13:ef:62:af:7d:50:e2:30:f3:c3:99:4e:
4d:97:05:46:08:43:e5:5b:7f:f8:76:08:d0:aa:c2:
fa:d1:8b:ff:cc:b5:2f:23:8b:70:64:fb:9e:21:b9:
f3:6d:ca:78:61:07:71:a4:da:be:47:a4:bb:39:9a:
7d:d9:cc:6c:d3:57:32:b0:45:6e:95:68:b3:c2:8b:
94:dd:8e:07:13:3d:6a:3d:13:c6:56:c0:2c:0a:3e:
27:62:61:4a:cb:e1:5a:10:9f:b3:0d:e8:a9:2b:87:
b6:9a:41:4d:7b:86:f0:e3:51:1a:46:f0:ee:8e:80:
92:1d:e8:30:b1:1c:3d:30:94:28:cb:29:4a:3a:fd:
d0:77:25:ca:a4:a9:35:b2:38:33:6d:c6:39:e7:af:
b8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:BB:85:B8:98:3F:01:D4:CB:EB:82:38:E9:09:FD:CD:46:A9:7C:77
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/vruFuJg_AdTL64I46Qn9zUapfHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.137.54.0/24
Signature Algorithm: sha256WithRSAEncryption
64:b6:ef:4f:bd:9e:3c:5b:1e:9e:46:a9:56:43:12:1e:66:da:
0b:2c:78:f4:9f:28:ea:db:dc:d2:5b:dc:9a:de:5c:9f:2d:4c:
7c:96:9a:79:b2:6b:c7:8d:22:c5:b7:e1:e8:84:7b:2a:bf:80:
e8:ba:52:61:40:71:99:51:e0:1c:6f:86:17:83:7b:2a:e2:c5:
c8:7c:17:6d:59:73:14:df:b5:a0:12:42:4b:ba:f2:d3:4f:64:
6a:1c:8b:d5:f6:d3:99:fb:95:fb:1e:00:1a:eb:e8:19:45:ff:
1e:7f:96:5b:d0:22:0e:e9:c5:57:af:4c:c1:41:7a:41:58:e7:
82:3e:49:d1:a4:58:c2:69:f6:24:bb:a6:26:f7:2e:d9:c7:7c:
22:8b:ea:99:f8:38:50:37:eb:a8:9a:a6:75:f6:03:92:a8:89:
12:d0:e6:71:97:5c:5c:9e:4e:63:19:98:0a:43:dd:45:2b:fe:
33:ef:73:4e:3d:3e:16:f3:8c:1e:99:90:d1:d4:ba:4c:8c:c6:
c9:18:0e:ac:78:ff:cc:8c:81:62:cf:49:13:65:eb:46:54:3f:
9b:24:c2:ef:5a:87:f5:4f:6a:5d:dc:27:28:3c:32:5a:1f:89:
c4:e9:10:89:94:2e:c4:44:e2:0c:9a:d1:f7:41:9f:16:6d:49:
30:b6:da:9d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZWo70zFCmps5sNAv1AwJfLlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNTgxZTY3M2Q4MGY3NDc0OTM2YjIxMzM3ZWFmY2MxYmRj
Mzg1ZTkwHhcNMjUwMzE4MTEwNjQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZWJiODViODk4M2YwMWQ0Y2JlYjgyMzhlOTA5ZmRjZDQ2YTk3Yzc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAke1BHZbcKAQu+tCtMjo16+BEVGI3
ql7mVGEKnmAtVSlQctdl+LprMnCWv1lzEGDTEnzzHgGD+QMeWuKgseff974zFKn0
mZQ8U+7GUeANXYoOU/dbg1dpFlDWlGvclxvh28clJUpnX6fPB2QT72KvfVDiMPPD
mU5NlwVGCEPlW3/4dgjQqsL60Yv/zLUvI4twZPueIbnzbcp4YQdxpNq+R6S7OZp9
2cxs01cysEVulWizwouU3Y4HEz1qPRPGVsAsCj4nYmFKy+FaEJ+zDeipK4e2mkFN
e4bw41EaRvDujoCSHegwsRw9MJQoyylKOv3QdyXKpKk1sjgzbcY556+4DQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL67hbiYPwHUy+uCOOkJ/c1GqXx3MB8GA1UdIwQY
MBaAFGBYHmc9gPdHSTayEzfq/MG9w4XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYt
ZmIwNzk1NWYzYWFhLzEvdnJ1RnVKZ19BZFRMNjRJNDZRbjl6VWFwZkhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYtZmIwNzk1NWYzYWFh
LzEvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQIk2MA0G
CSqGSIb3DQEBCwUAA4IBAQBktu9PvZ48Wx6eRqlWQxIeZtoLLHj0nyjq29zSW9ya
3lyfLUx8lpp5smvHjSLFt+HohHsqv4DoulJhQHGZUeAcb4YXg3sq4sXIfBdtWXMU
37WgEkJLuvLTT2RqHIvV9tOZ+5X7HgAa6+gZRf8ef5Zb0CIO6cVXr0zBQXpBWOeC
PknRpFjCafYku6Ym9y7Zx3wii+qZ+DhQN+uomqZ19gOSqIkS0OZxl1xcnk5jGZgK
Q91FK/4z73NOPT4W84wemZDR1LpMjMbJGA6seP/MjIFiz0kTZetGVD+bJMLvWof1
T2pd3CcoPDJaH4nE6RCJlC7EROIMmtH3QZ8WbUkwttqd
-----END CERTIFICATE-----
Generated at Sun Apr 6 06:01:06 2025 by rpki-client