Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/vK5h-o0ZiTjYgr7TtTUx7l9N3_U.roa
File: vK5h-o0ZiTjYgr7TtTUx7l9N3_U.roa (raw, json)
Hash identifier: GzoVl428O56Z6DSR6RbFH+KhA2k4PkQR1ShOytMGxs8=
Subject key identifier: BC:AE:61:FA:8D:19:89:38:D8:82:BE:D3:B5:35:31:EE:5F:4D:DF:F5
Certificate issuer: /CN=5e3a62f1347c1742e5b6e3740244d398b53a513c
Certificate serial: 0194266B876AA2818440E923FC06CA8F6B69
Authority key identifier: 5E:3A:62:F1:34:7C:17:42:E5:B6:E3:74:02:44:D3:98:B5:3A:51:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xjpi8TR8F0LltuN0AkTTmLU6UTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/vK5h-o0ZiTjYgr7TtTUx7l9N3_U.roa
Signing time: Thu 02 Jan 2025 09:49:28 +0000
ROA not before: Thu 02 Jan 2025 09:49:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31463
IP address blocks: 91.232.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:87:6a:a2:81:84:40:e9:23:fc:06:ca:8f:6b:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e3a62f1347c1742e5b6e3740244d398b53a513c
Validity
Not Before: Jan 2 09:49:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bcae61fa8d198938d882bed3b53531ee5f4ddff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1e:16:34:a4:d9:c9:59:d7:fb:96:91:b8:e0:
0f:f3:89:05:53:53:a5:25:06:33:b9:88:08:39:29:
57:e8:74:3b:72:89:d7:9c:48:b8:70:da:55:64:ed:
bb:97:26:81:2b:fa:52:cb:d8:79:e6:75:c8:0f:66:
e8:e2:12:da:b9:9d:84:59:73:38:8d:b9:49:38:53:
ee:93:b2:85:d5:57:74:2e:d3:3b:ba:3e:3e:4c:44:
75:4f:e0:24:35:4e:51:0b:41:4f:74:c1:c0:8b:e0:
76:f1:6d:ac:14:92:27:d5:95:40:ad:1a:60:f9:f6:
23:5b:d7:ec:ca:8b:42:f2:76:45:fc:98:e0:81:10:
0a:c0:f0:c1:b1:22:5d:c0:21:9f:0e:74:a8:25:70:
65:25:9d:e4:43:6b:69:cc:cb:ad:8e:a4:d1:5a:86:
9c:90:f1:ca:a6:ce:91:ad:c6:38:c5:4f:41:70:6f:
fa:80:3a:d4:0e:fe:4c:89:d9:ea:74:f1:dc:25:7b:
cd:36:7c:4f:ca:82:e3:d8:1c:ab:a0:d2:af:0c:59:
9f:90:05:8b:7b:9a:fa:5d:af:1e:a8:5b:ea:46:aa:
e3:c3:4d:fa:f9:d7:37:cf:eb:6a:51:dd:8c:36:46:
a3:12:f6:57:c9:dc:73:d7:62:3f:e2:f4:18:83:45:
e3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:AE:61:FA:8D:19:89:38:D8:82:BE:D3:B5:35:31:EE:5F:4D:DF:F5
X509v3 Authority Key Identifier:
keyid:5E:3A:62:F1:34:7C:17:42:E5:B6:E3:74:02:44:D3:98:B5:3A:51:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xjpi8TR8F0LltuN0AkTTmLU6UTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/vK5h-o0ZiTjYgr7TtTUx7l9N3_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.232.104.0/24
Signature Algorithm: sha256WithRSAEncryption
21:ab:da:34:2b:2b:58:67:32:bd:52:ed:d2:b4:e8:ef:93:17:
f7:84:f9:93:c6:b0:d3:05:27:c7:79:0d:1a:14:fa:f8:04:e5:
e6:ce:61:7d:3b:5a:68:81:07:97:46:51:32:3d:e2:7d:50:fb:
61:8b:d9:f4:9d:7c:85:93:cc:7d:cc:7d:75:63:6f:2d:36:46:
f8:6c:6e:f1:22:68:4c:63:b3:83:27:5e:3f:fe:d0:a5:16:d6:
fe:40:9d:72:58:a4:5b:aa:57:e7:f5:36:37:7e:13:97:96:ff:
15:c5:18:d2:93:03:ce:3d:b0:96:6b:44:29:66:3f:22:a1:24:
1b:43:06:91:43:36:16:f9:9b:f5:07:a6:56:5e:b9:4b:ab:f0:
93:69:95:b4:15:4c:18:08:a2:ef:27:4a:69:bb:28:a2:e7:2a:
8b:a0:51:1b:e0:f9:d9:fa:15:da:ae:26:05:5a:36:16:58:5b:
70:21:2d:a7:59:2e:f5:cd:13:db:1e:e4:fc:a4:9b:15:a5:ab:
1e:bc:f1:3d:a2:f5:8c:44:53:56:90:b3:a7:01:a3:bb:79:17:
2c:d1:82:ca:bc:59:d4:05:4c:16:62:5a:9a:c4:62:c8:f7:8b:
f8:29:20:66:8a:59:a8:56:8a:6c:d6:47:a4:69:13:a2:08:f5:
ed:1f:3d:4c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQma4dqooGEQOkj/AbKj2tpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlM2E2MmYxMzQ3YzE3NDJlNWI2ZTM3NDAyNDRkMzk4YjUz
YTUxM2MwHhcNMjUwMTAyMDk0OTI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiY2FlNjFmYThkMTk4OTM4ZDg4MmJlZDNiNTM1MzFlZTVmNGRkZmY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArR4WNKTZyVnX+5aRuOAP84kFU1Ol
JQYzuYgIOSlX6HQ7conXnEi4cNpVZO27lyaBK/pSy9h55nXID2bo4hLauZ2EWXM4
jblJOFPuk7KF1Vd0LtM7uj4+TER1T+AkNU5RC0FPdMHAi+B28W2sFJIn1ZVArRpg
+fYjW9fsyotC8nZF/JjggRAKwPDBsSJdwCGfDnSoJXBlJZ3kQ2tpzMutjqTRWoac
kPHKps6RrcY4xU9BcG/6gDrUDv5MidnqdPHcJXvNNnxPyoLj2ByroNKvDFmfkAWL
e5r6Xa8eqFvqRqrjw036+dc3z+tqUd2MNkajEvZXydxz12I/4vQYg0Xj0QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLyuYfqNGYk42IK+07U1Me5fTd/1MB8GA1UdIwQY
MBaAFF46YvE0fBdC5bbjdAJE05i1OlE8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGpwaThUUjhGMExsdHVOMEFrVFRtTFU2VVR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS80MjVjYzEtNTAxNC00OTc5LTg0ZWIt
MDI1NTQwYWZmMTVkLzEvdks1aC1vMFppVGpZZ3I3VHRUVXg3bDlOM19VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS80MjVjYzEtNTAxNC00OTc5LTg0ZWItMDI1NTQwYWZmMTVk
LzEvWGpwaThUUjhGMExsdHVOMEFrVFRtTFU2VVR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+hoMA0G
CSqGSIb3DQEBCwUAA4IBAQAhq9o0KytYZzK9Uu3StOjvkxf3hPmTxrDTBSfHeQ0a
FPr4BOXmzmF9O1pogQeXRlEyPeJ9UPthi9n0nXyFk8x9zH11Y28tNkb4bG7xImhM
Y7ODJ14//tClFtb+QJ1yWKRbqlfn9TY3fhOXlv8VxRjSkwPOPbCWa0QpZj8ioSQb
QwaRQzYW+Zv1B6ZWXrlLq/CTaZW0FUwYCKLvJ0ppuyii5yqLoFEb4PnZ+hXariYF
WjYWWFtwIS2nWS71zRPbHuT8pJsVpasevPE9ovWMRFNWkLOnAaO7eRcs0YLKvFnU
BUwWYlqaxGLI94v4KSBmilmoVops1kekaROiCPXtHz1M
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:29:35 2025 by rpki-client