Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/vcFQuTudFkbQMpadRl12YKxFR1E.roa
File: vcFQuTudFkbQMpadRl12YKxFR1E.roa (raw, json)
Hash identifier: 6PZgCoakl58NRNcc9W98u6IplwPPIvwKHuNaPBjb3Ws=
Subject key identifier: BD:C1:50:B9:3B:9D:16:46:D0:32:96:9D:46:5D:76:60:AC:45:47:51
Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial: 01942521BD1D03A5B311E6C447DB945F4B85
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/vcFQuTudFkbQMpadRl12YKxFR1E.roa
Signing time: Thu 02 Jan 2025 03:49:15 +0000
ROA not before: Thu 02 Jan 2025 03:49:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 139659
IP address blocks: 91.208.236.0/24 maxlen: 24
91.208.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:bd:1d:03:a5:b3:11:e6:c4:47:db:94:5f:4b:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Validity
Not Before: Jan 2 03:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bdc150b93b9d1646d032969d465d7660ac454751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a8:ae:5c:db:72:6c:13:f8:a9:e0:cf:22:75:
61:37:8b:7e:46:92:16:05:8e:13:f3:48:f1:4b:54:
e8:98:5a:32:bb:0e:52:bb:ea:87:cd:f1:ab:f5:07:
88:9a:8a:ef:cc:40:96:8c:21:ca:e2:7d:ab:c0:bb:
aa:c4:91:47:a3:50:52:9a:e9:33:de:e0:60:ae:e8:
47:02:c8:95:e2:71:fc:99:ca:6f:0a:da:ea:1a:85:
06:e2:27:42:47:be:ed:87:40:be:3a:06:88:57:3b:
5c:83:3a:12:ba:6c:5e:e3:a2:a7:0e:bb:87:a4:45:
61:1b:92:65:62:ed:3e:28:97:a4:12:13:4a:92:5e:
00:6f:f2:f6:a1:65:ec:05:7c:c7:ed:0e:03:7d:bc:
8f:7a:4b:6e:07:66:d2:f2:1c:bb:64:af:c9:7e:ab:
1a:3c:69:51:a6:9f:a0:52:b0:77:bf:4b:79:87:94:
0e:d8:14:46:13:f9:3e:b5:23:23:c4:58:93:9b:f8:
2a:19:0c:9f:53:0a:28:28:c7:f3:99:43:1a:78:4d:
20:44:9e:97:89:10:82:b5:80:d1:45:96:b5:5d:33:
5d:ab:21:31:f8:cd:23:95:ad:ad:24:65:dc:e9:1c:
85:97:c2:6d:25:bc:42:88:ee:7d:4f:72:eb:97:c1:
cb:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C1:50:B9:3B:9D:16:46:D0:32:96:9D:46:5D:76:60:AC:45:47:51
X509v3 Authority Key Identifier:
keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/vcFQuTudFkbQMpadRl12YKxFR1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.236.0/24
91.208.240.0/24
Signature Algorithm: sha256WithRSAEncryption
91:a3:8f:07:b2:3c:61:81:37:f3:92:86:b2:ee:2f:4a:d3:4b:
54:04:30:5f:23:46:fd:e9:ec:40:d2:a6:d5:50:96:a3:54:10:
99:0b:04:ac:46:b4:03:3e:e4:33:a0:c0:fb:51:90:6e:5f:ea:
b7:ec:54:02:df:e0:6b:5f:3e:fe:8a:01:0c:2b:26:69:c9:9e:
61:00:5e:cf:9a:4b:53:b5:03:07:12:5e:5e:46:4d:a9:e2:cf:
fd:6d:7d:61:54:7c:e9:15:8f:b6:69:b7:0c:83:3d:18:c6:15:
ac:ba:50:5f:1f:d1:7c:cf:91:61:c9:95:7a:a6:c1:04:90:66:
db:a3:29:94:ed:b7:eb:9a:6d:f6:b4:06:6b:76:17:3f:03:b3:
09:cc:c0:fb:f1:85:da:bc:a3:a7:52:6e:92:32:09:a1:da:61:
fa:5c:de:e5:16:c6:26:27:69:3d:b6:fb:a5:4e:f6:c9:65:f9:
fb:9f:df:5f:6f:47:b1:c6:02:a2:c0:6b:dd:99:11:cc:ce:03:
67:a0:c5:76:36:dc:e6:60:ec:c3:b1:01:b2:97:dd:b4:e6:6a:
e9:15:6f:25:b7:6a:07:8a:ab:40:eb:36:9f:d8:31:6a:08:42:
9f:a9:91:5f:08:84:b1:df:04:ab:ed:85:21:0d:8d:3d:43:67:
9a:c5:c7:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:31:20 2025 by rpki-client