Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/VmIiz7Cnwt8QdQZXsSuJ63A6JhE.roa
File: VmIiz7Cnwt8QdQZXsSuJ63A6JhE.roa (raw, json)
Hash identifier: VRDLvebsgzN2IopaBRSitbLUQukOe2HbgDWn6E5mzfg=
Subject key identifier: 56:62:22:CF:B0:A7:C2:DF:10:75:06:57:B1:2B:89:EB:70:3A:26:11
Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Certificate serial: 0195AE680E3BD0A4D1B1DEEE62D20270968E
Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/VmIiz7Cnwt8QdQZXsSuJ63A6JhE.roa
Signing time: Wed 19 Mar 2025 12:36:49 +0000
ROA not before: Wed 19 Mar 2025 12:36:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62553
IP address blocks: 5.56.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ae:68:0e:3b:d0:a4:d1:b1:de:ee:62:d2:02:70:96:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Validity
Not Before: Mar 19 12:36:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=566222cfb0a7c2df10750657b12b89eb703a2611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:cd:6e:ce:a9:05:6a:7d:ca:b1:d5:6a:4c:f8:
37:c3:2c:57:94:4c:f1:65:74:ff:36:5e:57:2c:e9:
40:22:9a:a6:f5:5a:c1:88:d7:12:fb:e6:84:aa:f6:
43:8f:24:58:19:89:e3:8c:92:46:6f:96:c0:56:ca:
aa:fa:ca:96:92:b0:0d:47:e4:29:65:12:ad:bf:cd:
b6:fa:da:b3:b2:65:a5:ad:bf:4f:f3:e5:5e:5d:e8:
49:4a:ad:41:20:71:8a:c0:6a:d9:cf:5c:bd:f4:24:
6e:19:64:c0:c2:19:45:8e:99:80:e4:3c:72:1f:a6:
42:59:a7:21:f0:d5:b7:40:21:01:26:32:af:93:3c:
48:62:4d:ff:4f:71:de:e6:bc:a3:75:cf:90:f1:a5:
f8:4e:a7:7e:3b:05:42:46:17:61:c8:60:d5:53:72:
96:a0:31:58:7a:c5:38:10:cb:ab:46:6c:dc:d1:bb:
68:31:09:12:6d:be:73:ca:43:16:82:9d:df:f9:53:
aa:26:0f:a6:42:c3:62:c2:43:9b:2e:8c:64:5c:ba:
03:64:c6:bd:61:7d:0a:25:ad:79:76:ba:5b:3a:1f:
2a:81:fb:18:f4:26:3e:15:14:a8:4c:08:f0:3e:78:
a8:d5:2e:5f:40:9d:98:39:bb:a5:5b:9b:61:f1:58:
88:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:62:22:CF:B0:A7:C2:DF:10:75:06:57:B1:2B:89:EB:70:3A:26:11
X509v3 Authority Key Identifier:
keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/VmIiz7Cnwt8QdQZXsSuJ63A6JhE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.24.0/24
Signature Algorithm: sha256WithRSAEncryption
13:22:64:74:23:89:5e:b9:b5:b6:7d:ed:18:3b:8b:9a:7a:37:
4c:3e:e1:15:07:a1:c2:98:4b:6d:04:08:55:a0:a6:79:61:fe:
b0:cd:37:c3:af:f2:e2:de:a8:0f:a7:78:4d:14:ee:15:f3:97:
67:7a:54:02:ca:b9:20:80:79:5c:f6:31:d6:d1:7d:7e:85:a9:
28:59:33:b2:d9:23:68:eb:ec:0c:0b:b1:d4:26:0b:cf:46:b9:
50:a5:94:17:01:e4:6f:dd:f5:0a:2b:46:49:0b:73:ed:c1:99:
19:7b:b2:27:53:78:8d:cb:f4:8e:48:e2:c9:67:47:90:e6:04:
8e:38:7a:b7:4d:d3:98:2c:34:fb:54:f0:83:11:08:26:cd:32:
41:64:17:fd:fe:23:2b:f8:2b:aa:ba:9a:28:9d:79:a0:f9:fa:
e5:e0:1d:6d:db:43:25:9e:3c:dc:0b:e4:75:97:b8:d0:81:e6:
13:b9:39:5d:3b:5a:4b:81:dc:54:14:e7:a8:89:cc:31:81:eb:
4e:f1:7b:7a:cd:e5:f2:0f:59:af:a6:c3:02:cb:18:87:bf:e6:
70:43:39:0e:1c:74:0e:7a:cb:64:1e:ee:79:45:6d:de:e7:e8:
a5:19:2f:57:38:bd:d0:6c:1b:f2:08:f4:da:b4:48:94:07:49:
10:38:62:2f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZWuaA470KTRsd7uYtICcJaOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViMzQ5YWYyYWYxMTEzNjFiMjlmY2ZlZjJlMDQzZDViZTc1
ZTNmOTgwHhcNMjUwMzE5MTIzNjQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NjYyMjJjZmIwYTdjMmRmMTA3NTA2NTdiMTJiODllYjcwM2EyNjExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA881uzqkFan3KsdVqTPg3wyxXlEzx
ZXT/Nl5XLOlAIpqm9VrBiNcS++aEqvZDjyRYGYnjjJJGb5bAVsqq+sqWkrANR+Qp
ZRKtv822+tqzsmWlrb9P8+VeXehJSq1BIHGKwGrZz1y99CRuGWTAwhlFjpmA5Dxy
H6ZCWach8NW3QCEBJjKvkzxIYk3/T3He5ryjdc+Q8aX4Tqd+OwVCRhdhyGDVU3KW
oDFYesU4EMurRmzc0btoMQkSbb5zykMWgp3f+VOqJg+mQsNiwkObLoxkXLoDZMa9
YX0KJa15drpbOh8qgfsY9CY+FRSoTAjwPnio1S5fQJ2YObulW5th8ViIlwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFZiIs+wp8LfEHUGV7ErietwOiYRMB8GA1UdIwQY
MBaAFOs0mvKvERNhsp/P7y4EPVvnXj+YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnpTYThxOFJFMkd5bjhfdkxnUTlXLWRlUDVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8zY2IxNDctYTdjMy00NGU5LWFkYzgt
OWNkNjYyYmM4MzIwLzEvVm1JaXo3Q253dDhRZFFaWHNTdUo2M0E2SmhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8zY2IxNDctYTdjMy00NGU5LWFkYzgtOWNkNjYyYmM4MzIw
LzEvNnpTYThxOFJFMkd5bjhfdkxnUTlXLWRlUDVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABTgYMA0G
CSqGSIb3DQEBCwUAA4IBAQATImR0I4leubW2fe0YO4uaejdMPuEVB6HCmEttBAhV
oKZ5Yf6wzTfDr/Li3qgPp3hNFO4V85dnelQCyrkggHlc9jHW0X1+hakoWTOy2SNo
6+wMC7HUJgvPRrlQpZQXAeRv3fUKK0ZJC3PtwZkZe7InU3iNy/SOSOLJZ0eQ5gSO
OHq3TdOYLDT7VPCDEQgmzTJBZBf9/iMr+CuqupoonXmg+frl4B1t20MlnjzcC+R1
l7jQgeYTuTldO1pLgdxUFOeoicwxgetO8Xt6zeXyD1mvpsMCyxiHv+ZwQzkOHHQO
estkHu55RW3e5+ilGS9XOL3QbBvyCPTatEiUB0kQOGIv
-----END CERTIFICATE-----
Generated at Thu Apr 10 05:42:47 2025 by rpki-client