Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/vYFd8PA0YadUvoZOf5GnUFTlGKg.roa
File: vYFd8PA0YadUvoZOf5GnUFTlGKg.roa (raw, json)
Hash identifier: LwvSvFPd1tZvuor2quDZg75Xtv6mx5QL0g9reG8ijGQ=
Subject key identifier: BD:81:5D:F0:F0:34:61:A7:54:BE:86:4E:7F:91:A7:50:54:E5:18:A8
Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Certificate serial: 0195CED091D94DD18E07CC51D7C67D210643
Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/vYFd8PA0YadUvoZOf5GnUFTlGKg.roa
Signing time: Tue 25 Mar 2025 19:38:49 +0000
ROA not before: Tue 25 Mar 2025 19:38:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5511
IP address blocks: 5.56.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ce:d0:91:d9:4d:d1:8e:07:cc:51:d7:c6:7d:21:06:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Validity
Not Before: Mar 25 19:38:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bd815df0f03461a754be864e7f91a75054e518a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:01:e1:8c:9d:a7:1e:c5:8c:bd:73:8e:39:47:
d5:52:d9:ca:f3:ed:6a:52:29:eb:7c:19:d6:31:c7:
46:b4:4d:3a:73:22:dd:bc:e7:7b:2e:88:d3:ac:23:
fa:92:cc:39:c3:d9:fa:e4:5f:1c:96:9b:65:0c:4a:
18:25:60:08:6c:ac:c2:5a:f6:09:cf:92:ad:f0:b7:
52:10:ee:1f:c8:51:1d:9e:f2:e5:64:94:a2:c0:9b:
6f:46:9f:17:3a:8d:a8:60:d2:43:fb:92:5d:c4:32:
81:23:25:aa:86:2c:7a:28:a9:32:2c:cc:81:f3:67:
40:c8:95:85:7f:8d:f1:51:67:bf:79:bd:ac:5e:71:
49:d4:ca:07:e7:e6:98:b6:54:10:84:e2:4a:6a:99:
a5:41:01:dc:58:e6:9e:80:06:89:cb:ea:6c:8a:03:
6d:47:e7:6b:de:c4:e5:8e:3a:c8:21:57:d0:69:f4:
18:ac:a7:c6:14:f5:ec:a7:50:3d:97:27:e3:fd:0a:
6d:73:70:44:1e:77:f8:47:13:23:a7:a5:6c:de:7c:
59:30:ad:8f:4f:e6:ec:18:32:28:cd:34:87:c3:66:
4f:28:15:50:5e:ee:ad:e7:c9:7a:8c:29:16:25:47:
12:5e:98:de:0e:d5:6b:2e:ab:e3:b3:39:ac:6c:30:
2d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:81:5D:F0:F0:34:61:A7:54:BE:86:4E:7F:91:A7:50:54:E5:18:A8
X509v3 Authority Key Identifier:
keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/vYFd8PA0YadUvoZOf5GnUFTlGKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.31.0/24
Signature Algorithm: sha256WithRSAEncryption
91:88:02:a5:50:af:75:5b:44:5c:b8:ec:44:b5:57:53:59:bb:
6a:32:28:4f:55:c5:b6:81:f0:61:ab:76:02:ae:5d:e0:88:b8:
d5:27:ec:0c:08:42:16:fe:59:de:f2:89:3e:47:f5:1c:c4:d6:
22:fa:38:97:68:96:eb:a8:db:2e:47:b8:5b:5a:77:11:82:84:
33:de:cd:09:db:cc:7e:e5:83:bc:08:10:fb:42:83:0e:a0:e7:
b8:b8:59:5b:28:26:29:55:e2:ac:d0:72:91:bd:2c:3c:5b:e0:
8a:9b:ad:e3:54:1c:89:50:53:91:31:75:af:c1:71:ed:57:db:
4b:e0:ae:b1:52:e5:b8:99:b5:1f:39:b0:18:df:a3:62:ec:04:
32:e6:c6:56:f4:f2:4a:4f:ff:01:37:b6:2e:2d:a5:fe:15:e6:
01:08:58:a0:36:4b:32:29:44:72:dc:29:66:b2:f4:44:5f:90:
8d:68:91:f0:be:0c:f1:04:83:a4:e7:44:84:29:a4:ff:9c:53:
98:62:72:59:ed:ea:8b:34:76:ad:b7:ea:77:60:1e:b2:44:5e:
d4:eb:c5:2a:99:13:ff:86:7a:42:df:c3:9f:03:3d:a6:f1:a6:
57:2b:23:67:8c:be:41:8e:33:f6:f3:3a:c1:e4:a1:4a:9e:85:
fc:14:7f:c7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZXO0JHZTdGOB8xR18Z9IQZDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViMzQ5YWYyYWYxMTEzNjFiMjlmY2ZlZjJlMDQzZDViZTc1
ZTNmOTgwHhcNMjUwMzI1MTkzODQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZDgxNWRmMGYwMzQ2MWE3NTRiZTg2NGU3ZjkxYTc1MDU0ZTUxOGE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQHhjJ2nHsWMvXOOOUfVUtnK8+1q
UinrfBnWMcdGtE06cyLdvOd7LojTrCP6ksw5w9n65F8clptlDEoYJWAIbKzCWvYJ
z5Kt8LdSEO4fyFEdnvLlZJSiwJtvRp8XOo2oYNJD+5JdxDKBIyWqhix6KKkyLMyB
82dAyJWFf43xUWe/eb2sXnFJ1MoH5+aYtlQQhOJKapmlQQHcWOaegAaJy+psigNt
R+dr3sTljjrIIVfQafQYrKfGFPXsp1A9lyfj/Qptc3BEHnf4RxMjp6Vs3nxZMK2P
T+bsGDIozTSHw2ZPKBVQXu6t58l6jCkWJUcSXpjeDtVrLqvjszmsbDAtJwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL2BXfDwNGGnVL6GTn+Rp1BU5RioMB8GA1UdIwQY
MBaAFOs0mvKvERNhsp/P7y4EPVvnXj+YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnpTYThxOFJFMkd5bjhfdkxnUTlXLWRlUDVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8zY2IxNDctYTdjMy00NGU5LWFkYzgt
OWNkNjYyYmM4MzIwLzEvdllGZDhQQTBZYWRVdm9aT2Y1R25VRlRsR0tnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8zY2IxNDctYTdjMy00NGU5LWFkYzgtOWNkNjYyYmM4MzIw
LzEvNnpTYThxOFJFMkd5bjhfdkxnUTlXLWRlUDVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABTgfMA0G
CSqGSIb3DQEBCwUAA4IBAQCRiAKlUK91W0RcuOxEtVdTWbtqMihPVcW2gfBhq3YC
rl3giLjVJ+wMCEIW/lne8ok+R/UcxNYi+jiXaJbrqNsuR7hbWncRgoQz3s0J28x+
5YO8CBD7QoMOoOe4uFlbKCYpVeKs0HKRvSw8W+CKm63jVByJUFORMXWvwXHtV9tL
4K6xUuW4mbUfObAY36Ni7AQy5sZW9PJKT/8BN7YuLaX+FeYBCFigNksyKURy3Clm
svREX5CNaJHwvgzxBIOk50SEKaT/nFOYYnJZ7eqLNHatt+p3YB6yRF7U68UqmRP/
hnpC38OfAz2m8aZXKyNnjL5BjjP28zrB5KFKnoX8FH/H
-----END CERTIFICATE-----
Generated at Sat Apr 5 18:24:38 2025 by rpki-client