Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/VggHyCGAaBqT1YS8rDtl_KIKf0g.roa
File: VggHyCGAaBqT1YS8rDtl_KIKf0g.roa (raw, json)
Hash identifier: ViUcKTn2EWx6jkDRARIAQEFwd2YhU52ckTDp4ZosIG0=
Subject key identifier: 56:08:07:C8:21:80:68:1A:93:D5:84:BC:AC:3B:65:FC:A2:0A:7F:48
Certificate issuer: /CN=d721fd9d278b6458e9bf1cceba2c31a19fb96cfd
Certificate serial: 0194258F339B78B052D58053BC5AC46FE045
Authority key identifier: D7:21:FD:9D:27:8B:64:58:E9:BF:1C:CE:BA:2C:31:A1:9F:B9:6C:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/VggHyCGAaBqT1YS8rDtl_KIKf0g.roa
Signing time: Thu 02 Jan 2025 05:48:49 +0000
ROA not before: Thu 02 Jan 2025 05:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6453
IP address blocks: 91.208.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:33:9b:78:b0:52:d5:80:53:bc:5a:c4:6f:e0:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d721fd9d278b6458e9bf1cceba2c31a19fb96cfd
Validity
Not Before: Jan 2 05:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=560807c82180681a93d584bcac3b65fca20a7f48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:f2:32:c4:60:35:93:b4:75:23:9a:38:29:82:
72:d4:42:73:87:ab:24:69:85:30:b0:4f:4f:ed:e8:
e6:c2:8d:7d:22:22:74:4e:ba:16:3c:60:5b:bf:1d:
90:82:38:79:52:e9:b9:6b:3d:97:22:fe:bc:2c:d1:
fa:45:29:41:4f:ed:0a:d5:0f:31:9c:b1:78:38:85:
a8:35:7e:6a:86:5c:b9:f1:8b:63:8f:27:81:69:23:
79:b2:7e:41:54:db:41:75:c0:a0:3e:a3:02:56:9b:
fd:00:35:be:af:44:cb:7e:58:e5:66:c2:30:5a:d9:
9e:36:dd:79:e2:69:46:02:de:c8:3f:40:62:b2:d3:
11:c8:5f:71:fa:2e:07:6a:5d:1a:47:b5:a9:3f:2c:
d5:15:5c:ad:59:c9:62:fc:01:4c:a1:1b:38:56:64:
2d:96:35:0a:e9:20:b1:5e:cc:d5:ba:73:79:44:ce:
69:40:c3:0c:66:7d:e9:a1:fc:69:cf:e6:82:10:63:
f2:43:6b:5e:36:24:56:d0:ae:5b:8e:66:f4:31:96:
58:4d:7a:56:33:ae:1a:f9:ec:3f:e9:3c:98:1e:90:
87:7d:3d:bd:8d:3e:9c:79:91:f9:8e:66:32:cc:c9:
6a:c9:c3:c1:88:a4:b3:9a:7f:d5:54:20:2c:13:45:
8f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:08:07:C8:21:80:68:1A:93:D5:84:BC:AC:3B:65:FC:A2:0A:7F:48
X509v3 Authority Key Identifier:
keyid:D7:21:FD:9D:27:8B:64:58:E9:BF:1C:CE:BA:2C:31:A1:9F:B9:6C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/VggHyCGAaBqT1YS8rDtl_KIKf0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.4.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:7f:19:e7:33:7b:11:31:5c:cb:13:4f:71:ab:03:a0:44:2f:
1b:e3:a4:54:05:62:24:cd:3a:13:c4:62:4f:ae:49:37:d4:89:
8d:cd:bc:6b:2e:3b:e0:69:58:ff:b2:c7:8e:56:bf:b7:d1:57:
3a:1c:14:41:4b:b8:af:9a:82:47:52:4f:fb:1f:88:5e:c3:f2:
00:30:cb:a9:eb:c6:52:7d:d8:78:0f:f3:07:93:da:fa:2a:5b:
6c:9e:d8:0a:79:41:4e:bf:6c:0a:c1:a3:f3:44:6f:16:cb:5d:
38:3f:f2:e4:35:08:1b:73:60:11:85:f7:2b:51:5a:37:8c:9a:
9f:15:48:11:85:a8:13:d1:84:47:0f:f2:f9:25:c1:10:c3:d4:
a5:91:c2:61:33:3c:00:90:91:5f:c0:99:23:35:51:e8:63:ad:
f8:07:49:59:a5:5d:66:16:26:7d:32:6a:fe:6e:75:ca:4f:8c:
19:2e:6b:71:d0:f1:96:e2:95:fd:f4:3e:c3:48:b9:5b:ce:6f:
bc:a4:55:7a:43:45:e5:0f:84:44:40:12:ec:06:dc:ed:5e:10:
68:a7:cd:93:73:24:53:fd:86:dd:7a:60:64:8c:5a:67:fc:64:
d6:0d:3a:df:68:e3:a5:e5:c2:00:9c:d1:12:49:63:82:42:50:
e9:89:68:c4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQljzObeLBS1YBTvFrEb+BFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3MjFmZDlkMjc4YjY0NThlOWJmMWNjZWJhMmMzMWExOWZi
OTZjZmQwHhcNMjUwMTAyMDU0ODQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NjA4MDdjODIxODA2ODFhOTNkNTg0YmNhYzNiNjVmY2EyMGE3ZjQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvIyxGA1k7R1I5o4KYJy1EJzh6sk
aYUwsE9P7ejmwo19IiJ0TroWPGBbvx2Qgjh5Uum5az2XIv68LNH6RSlBT+0K1Q8x
nLF4OIWoNX5qhly58YtjjyeBaSN5sn5BVNtBdcCgPqMCVpv9ADW+r0TLfljlZsIw
WtmeNt154mlGAt7IP0BistMRyF9x+i4Hal0aR7WpPyzVFVytWcli/AFMoRs4VmQt
ljUK6SCxXszVunN5RM5pQMMMZn3pofxpz+aCEGPyQ2teNiRW0K5bjmb0MZZYTXpW
M64a+ew/6TyYHpCHfT29jT6ceZH5jmYyzMlqycPBiKSzmn/VVCAsE0WPgQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFYIB8ghgGgak9WEvKw7ZfyiCn9IMB8GA1UdIwQY
MBaAFNch/Z0ni2RY6b8czrosMaGfuWz9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXlIOW5TZUxaRmpwdnh6T3Vpd3hvWi01YlAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi82ZDc1MmEtNTljNS00N2EwLWIzY2Qt
OGY5NzliNjk5NDNmLzEvVmdnSHlDR0FhQnFUMVlTOHJEdGxfS0lLZjBnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi82ZDc1MmEtNTljNS00N2EwLWIzY2QtOGY5NzliNjk5NDNm
LzEvMXlIOW5TZUxaRmpwdnh6T3Vpd3hvWi01YlAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9AEMA0G
CSqGSIb3DQEBCwUAA4IBAQBcfxnnM3sRMVzLE09xqwOgRC8b46RUBWIkzToTxGJP
rkk31ImNzbxrLjvgaVj/sseOVr+30Vc6HBRBS7ivmoJHUk/7H4hew/IAMMup68ZS
fdh4D/MHk9r6KltsntgKeUFOv2wKwaPzRG8Wy104P/LkNQgbc2ARhfcrUVo3jJqf
FUgRhagT0YRHD/L5JcEQw9SlkcJhMzwAkJFfwJkjNVHoY634B0lZpV1mFiZ9Mmr+
bnXKT4wZLmtx0PGW4pX99D7DSLlbzm+8pFV6Q0XlD4REQBLsBtztXhBop82TcyRT
/YbdemBkjFpn/GTWDTrfaOOl5cIAnNESSWOCQlDpiWjE
-----END CERTIFICATE-----
Generated at Sat Apr 12 08:05:31 2025 by rpki-client