Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/565aed-610a-44ab-91c8-7dd5ed0e70d6/1/VjXoMSHMetWe5Ymqil2sdFxl2hE.roa
File: VjXoMSHMetWe5Ymqil2sdFxl2hE.roa (raw, json)
Hash identifier: wuwUeX+wJMF1EgKKOb8LDdNTMtynWrUANRMsZJK+2JU=
Subject key identifier: 56:35:E8:31:21:CC:7A:D5:9E:E5:89:AA:8A:5D:AC:74:5C:65:DA:11
Certificate issuer: /CN=947e4676545658de09aa778f8b00e9a4fda0d00f
Certificate serial: 018CC6B78643C82941934C29E706A5D9B70F
Authority key identifier: 94:7E:46:76:54:56:58:DE:09:AA:77:8F:8B:00:E9:A4:FD:A0:D0:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lH5GdlRWWN4JqnePiwDppP2g0A8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/565aed-610a-44ab-91c8-7dd5ed0e70d6/1/VjXoMSHMetWe5Ymqil2sdFxl2hE.roa
Signing time: Mon 01 Jan 2024 20:29:25 +0000
ROA not before: Mon 01 Jan 2024 20:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58061
IP address blocks: 195.93.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:86:43:c8:29:41:93:4c:29:e7:06:a5:d9:b7:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=947e4676545658de09aa778f8b00e9a4fda0d00f
Validity
Not Before: Jan 1 20:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5635e83121cc7ad59ee589aa8a5dac745c65da11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:d6:0f:ca:56:25:9f:9d:6d:a0:56:c6:69:be:
ee:75:d1:aa:51:bb:2d:84:d4:82:c4:70:20:83:64:
cb:21:e6:c3:0e:ab:1f:0c:55:a4:54:f8:27:72:ca:
b8:be:41:ae:c5:36:6c:de:d0:7a:7b:83:39:e5:80:
17:11:f6:89:e0:04:e6:d6:7a:ce:f5:5b:97:25:2e:
82:09:6a:cd:dd:59:a3:e9:b7:67:7e:42:31:7f:37:
93:ab:45:c1:0f:b2:9d:de:c4:bd:ae:4e:04:75:9d:
16:76:18:42:d4:3a:e6:0c:0f:15:a7:0d:29:7d:9f:
0b:ab:fc:85:55:64:96:48:ea:ad:9d:28:50:c2:81:
48:de:f7:42:c4:ff:6d:9d:1f:86:dc:f0:02:18:2e:
69:40:2a:f0:f0:47:fb:27:28:6a:f5:3d:a8:c7:52:
84:92:e1:35:29:e6:31:54:cb:c8:f4:59:d0:26:64:
1c:1d:4b:6a:0d:78:de:ac:ac:06:89:a1:f5:ad:8f:
2a:20:11:5b:6d:0f:70:ce:d2:35:e8:ef:6c:90:d4:
65:16:d8:89:55:f5:a0:7c:ac:a7:d8:ce:57:ed:14:
44:05:8c:42:2e:f6:32:a8:72:c7:ed:80:b5:a8:c8:
d5:4f:c1:fd:9a:31:27:2c:cc:96:ac:97:63:f8:21:
6c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:35:E8:31:21:CC:7A:D5:9E:E5:89:AA:8A:5D:AC:74:5C:65:DA:11
X509v3 Authority Key Identifier:
keyid:94:7E:46:76:54:56:58:DE:09:AA:77:8F:8B:00:E9:A4:FD:A0:D0:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lH5GdlRWWN4JqnePiwDppP2g0A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/565aed-610a-44ab-91c8-7dd5ed0e70d6/1/VjXoMSHMetWe5Ymqil2sdFxl2hE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/565aed-610a-44ab-91c8-7dd5ed0e70d6/1/lH5GdlRWWN4JqnePiwDppP2g0A8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.93.249.0/24
Signature Algorithm: sha256WithRSAEncryption
76:c3:6a:e6:14:56:b5:34:5a:b5:35:6f:8b:f7:88:69:0d:16:
f6:ff:12:da:91:66:05:24:d6:7a:c0:c1:68:44:26:0a:27:0a:
26:47:9a:06:bd:67:ee:4d:3d:d4:21:9a:f1:46:ad:db:99:8f:
8e:2c:7b:5a:a4:f7:98:77:dc:df:90:df:86:07:59:be:d1:42:
50:16:be:88:79:14:2b:73:e1:d2:f6:8d:ff:8e:73:5a:5a:d6:
0e:82:2d:96:65:c3:42:8e:d6:3a:57:2d:13:95:f2:1f:68:f2:
7e:d4:fd:f1:83:79:15:41:36:45:fa:a8:bc:eb:6a:b4:66:16:
ec:57:d5:2a:60:8b:05:ad:ce:36:d1:a2:fb:2f:8c:74:26:74:
c8:00:0b:d6:63:8d:2e:2e:c5:7b:1a:4f:ee:12:11:0e:cd:06:
33:f0:89:8e:31:b6:4c:c4:69:7d:e3:59:9e:b4:0e:77:14:7b:
ed:ff:77:60:21:91:d8:8a:29:69:d7:7d:a6:a7:09:09:7f:f7:
01:9c:fc:05:c1:ff:17:bf:59:b8:fc:04:b1:93:d0:d1:d8:a9:
1a:5d:1b:cb:9b:b2:46:40:64:71:50:7e:73:39:44:38:13:4b:
2b:e5:ef:e7:f3:c2:df:f0:d7:30:ae:52:94:e0:fd:1d:6a:45:
d0:42:04:f7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGt4ZDyClBk0wp5wal2bcPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0N2U0Njc2NTQ1NjU4ZGUwOWFhNzc4ZjhiMDBlOWE0ZmRh
MGQwMGYwHhcNMjQwMTAxMjAyOTI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NjM1ZTgzMTIxY2M3YWQ1OWVlNTg5YWE4YTVkYWM3NDVjNjVkYTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9YPylYln51toFbGab7uddGqUbst
hNSCxHAgg2TLIebDDqsfDFWkVPgncsq4vkGuxTZs3tB6e4M55YAXEfaJ4ATm1nrO
9VuXJS6CCWrN3Vmj6bdnfkIxfzeTq0XBD7Kd3sS9rk4EdZ0WdhhC1DrmDA8Vpw0p
fZ8Lq/yFVWSWSOqtnShQwoFI3vdCxP9tnR+G3PACGC5pQCrw8Ef7Jyhq9T2ox1KE
kuE1KeYxVMvI9FnQJmQcHUtqDXjerKwGiaH1rY8qIBFbbQ9wztI16O9skNRlFtiJ
VfWgfKyn2M5X7RREBYxCLvYyqHLH7YC1qMjVT8H9mjEnLMyWrJdj+CFshwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFY16DEhzHrVnuWJqopdrHRcZdoRMB8GA1UdIwQY
MBaAFJR+RnZUVljeCap3j4sA6aT9oNAPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEg1R2RsUldXTjRKcW5lUGl3RHBwUDJnMEE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy81NjVhZWQtNjEwYS00NGFiLTkxYzgt
N2RkNWVkMGU3MGQ2LzEvVmpYb01TSE1ldFdlNVltcWlsMnNkRnhsMmhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy81NjVhZWQtNjEwYS00NGFiLTkxYzgtN2RkNWVkMGU3MGQ2
LzEvbEg1R2RsUldXTjRKcW5lUGl3RHBwUDJnMEE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw135MA0G
CSqGSIb3DQEBCwUAA4IBAQB2w2rmFFa1NFq1NW+L94hpDRb2/xLakWYFJNZ6wMFo
RCYKJwomR5oGvWfuTT3UIZrxRq3bmY+OLHtapPeYd9zfkN+GB1m+0UJQFr6IeRQr
c+HS9o3/jnNaWtYOgi2WZcNCjtY6Vy0TlfIfaPJ+1P3xg3kVQTZF+qi862q0Zhbs
V9UqYIsFrc420aL7L4x0JnTIAAvWY40uLsV7Gk/uEhEOzQYz8ImOMbZMxGl941me
tA53FHvt/3dgIZHYiilp132mpwkJf/cBnPwFwf8Xv1m4/ASxk9DR2KkaXRvLm7JG
QGRxUH5zOUQ4E0sr5e/n88Lf8NcwrlKU4P0dakXQQgT3
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:52:41 2025 by rpki-client