Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/VZ4v5Zl_fSWlCJddoFWAprfwDEQ.roa
File: VZ4v5Zl_fSWlCJddoFWAprfwDEQ.roa (raw, json)
Hash identifier: HSIRCE/846JiI6ro7JECbGIyt/cQkLU+ZkGrpS5afGk=
Subject key identifier: 55:9E:2F:E5:99:7F:7D:25:A5:08:97:5D:A0:55:80:A6:B7:F0:0C:44
Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial: 01942521B918C7F05F92303BBB56759A0039
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/VZ4v5Zl_fSWlCJddoFWAprfwDEQ.roa
Signing time: Thu 02 Jan 2025 03:49:14 +0000
ROA not before: Thu 02 Jan 2025 03:49:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30058
IP address blocks: 91.213.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:b9:18:c7:f0:5f:92:30:3b:bb:56:75:9a:00:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Validity
Not Before: Jan 2 03:49:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=559e2fe5997f7d25a508975da05580a6b7f00c44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:be:24:2e:53:79:0f:33:30:15:f1:b5:27:41:
2e:58:17:ba:ba:35:0c:69:2b:48:d5:c8:95:06:bc:
84:f3:f0:0a:5c:3e:5c:a2:91:09:bf:b5:97:fa:fa:
bb:59:60:9f:17:2f:44:04:3b:cb:0b:f0:a8:de:00:
7c:c5:05:b3:c7:3e:99:67:42:72:83:8d:b3:03:be:
ce:1d:54:e3:e0:cc:f8:ce:87:88:15:09:13:f0:da:
bf:9c:20:08:d7:77:a0:fc:45:fe:cf:99:93:d3:dc:
1f:22:f3:29:ff:72:9f:31:a8:2a:fb:ca:36:4d:aa:
bc:90:03:bd:ae:79:fc:89:42:43:c2:49:7f:92:bf:
46:0f:2d:96:12:0f:a6:2d:c9:43:1a:d7:c8:27:b0:
9a:31:f0:8a:5d:2a:17:29:38:c7:e2:f4:b6:67:ea:
b4:6b:6d:b9:2a:ca:50:20:ee:ec:ab:b4:c0:e9:be:
a7:a3:1d:5c:d7:a3:d8:4d:a3:c2:a5:fa:45:4d:9e:
a5:95:11:d4:e4:cf:24:c4:27:43:dc:c3:8c:ed:05:
88:de:81:35:87:4d:33:8a:60:12:8c:12:db:4d:6a:
9b:41:e0:b1:92:60:fe:86:62:13:2f:09:16:60:e6:
b4:05:61:05:b4:3a:f1:8e:e7:02:9e:96:29:d1:96:
32:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:9E:2F:E5:99:7F:7D:25:A5:08:97:5D:A0:55:80:A6:B7:F0:0C:44
X509v3 Authority Key Identifier:
keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/VZ4v5Zl_fSWlCJddoFWAprfwDEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.174.0/24
Signature Algorithm: sha256WithRSAEncryption
90:c9:88:56:bc:b8:17:cd:12:7a:c1:57:34:c7:e9:5b:76:46:
7f:27:36:75:34:49:3c:61:bf:b3:47:9c:cd:79:2d:50:e9:9a:
c9:1e:d7:2a:f9:4a:4a:a5:d9:6d:95:22:c6:9b:60:7b:fc:4d:
80:43:5f:43:ea:ab:38:f9:de:9e:2c:b8:5b:84:51:85:0e:a6:
24:67:6d:80:d5:7e:ea:9d:cd:56:e9:52:77:28:df:0a:4d:98:
5f:48:ac:6f:02:e0:41:8c:db:87:d4:66:98:5a:fb:1f:8e:ea:
f5:5d:53:b5:53:04:f6:b0:fc:9d:11:59:86:1c:10:84:bd:bb:
1e:ec:d5:81:22:f2:16:ed:7b:57:8d:d9:d6:5e:84:d1:67:96:
26:bb:7f:df:e9:66:1b:b3:9f:11:34:6e:b0:e0:1b:10:7e:1a:
5a:43:b4:7e:29:4c:1a:82:ca:95:6f:2a:a0:cf:54:4c:08:5a:
ea:3f:13:bc:83:79:a8:31:aa:67:90:5d:46:fa:ff:5f:15:7c:
83:81:82:d8:40:97:0c:c1:92:a1:25:63:e4:2d:cb:2b:fe:3b:
25:5d:ac:4f:c0:1d:17:df:4c:0d:b5:0b:13:81:2c:fb:35:d5:
da:09:c9:65:9c:9f:a3:e2:65:7c:0f:d4:7c:82:05:ec:2b:34:
59:66:02:37
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlIbkYx/BfkjA7u1Z1mgA5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmNDczODM4OWNiM2I5OThlYzRmYTZkNDI3MmY4ZGQ3OTlm
YmM0YTkwHhcNMjUwMTAyMDM0OTE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NTllMmZlNTk5N2Y3ZDI1YTUwODk3NWRhMDU1ODBhNmI3ZjAwYzQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAob4kLlN5DzMwFfG1J0EuWBe6ujUM
aStI1ciVBryE8/AKXD5copEJv7WX+vq7WWCfFy9EBDvLC/Co3gB8xQWzxz6ZZ0Jy
g42zA77OHVTj4Mz4zoeIFQkT8Nq/nCAI13eg/EX+z5mT09wfIvMp/3KfMagq+8o2
Taq8kAO9rnn8iUJDwkl/kr9GDy2WEg+mLclDGtfIJ7CaMfCKXSoXKTjH4vS2Z+q0
a225KspQIO7sq7TA6b6nox1c16PYTaPCpfpFTZ6llRHU5M8kxCdD3MOM7QWI3oE1
h00zimASjBLbTWqbQeCxkmD+hmITLwkWYOa0BWEFtDrxjucCnpYp0ZYydwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFWeL+WZf30lpQiXXaBVgKa38AxEMB8GA1UdIwQY
MBaAFB9HODics7mY7E+m1CcvjdeZ+8SpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS81MTc2OTQtYzhhMS00NThiLTljZjIt
NmM3ZTU2ODU4OTBjLzEvVlo0djVabF9mU1dsQ0pkZG9GV0FwcmZ3REVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS81MTc2OTQtYzhhMS00NThiLTljZjItNmM3ZTU2ODU4OTBj
LzEvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9WuMA0G
CSqGSIb3DQEBCwUAA4IBAQCQyYhWvLgXzRJ6wVc0x+lbdkZ/JzZ1NEk8Yb+zR5zN
eS1Q6ZrJHtcq+UpKpdltlSLGm2B7/E2AQ19D6qs4+d6eLLhbhFGFDqYkZ22A1X7q
nc1W6VJ3KN8KTZhfSKxvAuBBjNuH1GaYWvsfjur1XVO1UwT2sPydEVmGHBCEvbse
7NWBIvIW7XtXjdnWXoTRZ5Ymu3/f6WYbs58RNG6w4BsQfhpaQ7R+KUwagsqVbyqg
z1RMCFrqPxO8g3moMapnkF1G+v9fFXyDgYLYQJcMwZKhJWPkLcsr/jslXaxPwB0X
30wNtQsTgSz7NdXaCcllnJ+j4mV8D9R8ggXsKzRZZgI3
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:09:46 2025 by rpki-client