Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/VuwmrfCYeX-5-G3EACirZwyCtzg.roa
File: VuwmrfCYeX-5-G3EACirZwyCtzg.roa (raw, json)
Hash identifier: 1HbLhGjSO6WtBBMMxb8oy/0MhfWurHjl8dezIem0SBE=
Subject key identifier: 56:EC:26:AD:F0:98:79:7F:B9:F8:6D:C4:00:28:AB:67:0C:82:B7:38
Certificate issuer: /CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Certificate serial: 019420D636E770B6BD0319DD40910903A030
Authority key identifier: 8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/VuwmrfCYeX-5-G3EACirZwyCtzg.roa
Signing time: Wed 01 Jan 2025 07:48:17 +0000
ROA not before: Wed 01 Jan 2025 07:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47377
IP address blocks: 91.242.245.0/24 maxlen: 24
176.126.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:36:e7:70:b6:bd:03:19:dd:40:91:09:03:a0:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Validity
Not Before: Jan 1 07:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=56ec26adf098797fb9f86dc40028ab670c82b738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:69:4f:6d:b6:c1:7f:66:2a:a7:85:68:cd:2a:
0b:1a:fc:33:95:04:57:58:f0:be:92:64:5c:85:9a:
89:53:4d:7e:b6:20:b9:85:a6:6a:2f:64:f8:ac:a2:
bb:a0:29:04:ca:da:95:4a:0e:b4:04:bf:3d:55:09:
88:52:0d:0a:9d:bf:11:0e:f4:ea:d3:5c:8f:c6:0d:
f3:d8:e0:4c:74:32:39:66:ef:e5:53:d3:71:6f:ee:
c6:6f:bd:bc:03:2b:82:ac:b7:33:4c:9f:e3:2b:e7:
69:9f:de:fb:28:0a:75:04:c1:49:7b:6e:96:47:88:
88:6d:95:20:97:7a:dc:90:a0:81:2e:cf:2e:20:e0:
96:4f:7e:18:cb:a3:74:72:fa:f8:88:4d:9e:eb:5d:
ce:d7:af:5b:ce:17:bc:cc:7b:13:99:95:f3:eb:27:
7a:8a:32:70:37:b5:21:cf:26:e7:fe:54:5a:4b:aa:
40:cf:5f:ae:93:c8:50:10:39:02:2f:82:2b:95:41:
39:b4:f9:89:9c:20:6c:b7:e7:2e:d2:3d:c2:68:db:
e7:b2:f5:ac:65:99:5a:05:e0:6d:32:d7:a1:4f:02:
b5:e8:b4:44:4b:a8:c5:e2:c9:00:40:ca:98:63:10:
ef:ca:50:b9:19:dd:bb:2f:58:f1:9c:27:4b:89:94:
d2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:EC:26:AD:F0:98:79:7F:B9:F8:6D:C4:00:28:AB:67:0C:82:B7:38
X509v3 Authority Key Identifier:
keyid:8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/VuwmrfCYeX-5-G3EACirZwyCtzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.245.0/24
176.126.100.0/24
Signature Algorithm: sha256WithRSAEncryption
17:05:c2:e7:00:d7:d7:80:b1:03:b8:f9:03:7f:e3:2e:a1:b7:
92:10:bf:c7:6c:b5:dc:37:0e:7c:8c:0e:e9:35:b7:cf:d0:9e:
dc:e2:ad:8c:5f:90:c2:a6:40:11:e1:ec:7b:48:46:af:5e:51:
a9:2e:2b:a1:d8:e4:ad:99:86:da:7a:df:fd:77:49:e5:5c:9a:
22:8b:73:43:c6:94:5d:c6:bf:b6:8a:c2:44:d5:88:4a:21:0b:
95:66:b9:86:49:a5:42:b9:26:2b:23:f7:db:5b:db:8e:af:3d:
6c:e7:9d:fe:a8:e1:9e:2c:d9:6b:cc:fb:f0:db:ef:c1:07:d2:
ad:52:40:06:5f:5c:b9:e3:29:5e:47:f9:67:7c:03:ca:8e:ff:
d7:d0:12:fa:7b:98:bd:a7:6a:04:f5:e0:1e:ca:2d:3d:e4:da:
da:b2:81:5d:47:99:a3:a2:d4:30:d4:85:55:0f:6f:5f:ff:cf:
2c:e1:29:d7:70:ce:79:0f:f1:f5:1c:bc:3d:f4:79:76:58:de:
7e:5e:86:61:e9:74:64:5d:9a:79:34:2b:6a:d6:a1:79:af:96:
84:ee:37:6d:51:e7:ce:11:db:55:e3:30:06:a9:44:3e:60:9f:
7b:ac:ab:7c:8c:38:b8:b2:54:b5:aa:0e:3c:5a:09:e0:ec:e6:
01:dc:c2:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:09:53 2025 by rpki-client