Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/799f28-5270-4929-990a-0909b41f55f1/1/vps3y16TcEQ3wJXlXsfXG8Wz5Xc.roa
File: vps3y16TcEQ3wJXlXsfXG8Wz5Xc.roa (raw, json)
Hash identifier: /eoXJ3hoew5Kp5PXaOWnz6y71wP4y/W9AbKhbmnO/Q0=
Subject key identifier: BE:9B:37:CB:5E:93:70:44:37:C0:95:E5:5E:C7:D7:1B:C5:B3:E5:77
Certificate issuer: /CN=c556a6c781cba4ce5bcb142fb42afd881a9fa667
Certificate serial: 07827D90
Authority key identifier: C5:56:A6:C7:81:CB:A4:CE:5B:CB:14:2F:B4:2A:FD:88:1A:9F:A6:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVamx4HLpM5byxQvtCr9iBqfpmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/799f28-5270-4929-990a-0909b41f55f1/1/vps3y16TcEQ3wJXlXsfXG8Wz5Xc.roa
Signing time: Sat 01 Jan 2022 00:58:56 +0000
ROA not before: Sat 01 Jan 2022 00:58:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29024
IP address blocks: 185.3.48.0/22 maxlen: 22
91.189.40.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125992336 (0x7827d90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c556a6c781cba4ce5bcb142fb42afd881a9fa667
Validity
Not Before: Jan 1 00:58:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=be9b37cb5e93704437c095e55ec7d71bc5b3e577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1f:cc:cb:df:81:f5:c3:fb:fd:51:e6:3d:33:
cc:3d:1e:16:7b:90:c3:b7:40:75:3b:b5:f2:8e:81:
9e:cd:45:98:b9:dd:4a:fc:c2:9b:72:29:32:13:7c:
78:c7:41:81:55:67:21:6a:5a:ea:3c:ac:87:ca:cd:
32:de:72:80:34:06:5a:64:8d:5a:f6:bc:8c:64:66:
3e:49:82:52:aa:d2:2e:29:7f:7b:65:d3:94:3c:d7:
1e:99:c3:24:a5:8d:25:79:bc:68:56:98:dd:d4:a7:
ee:3b:12:d2:49:c3:66:a5:ab:e4:a0:d7:0a:b4:00:
34:18:b6:48:98:c4:d0:ef:8e:19:85:03:3b:1e:40:
6b:ed:b2:d9:f3:1f:72:3c:d2:65:17:cc:85:1d:9c:
0b:eb:90:a4:0b:a2:02:9b:82:3a:99:8e:65:7f:fc:
72:aa:f9:7c:5f:ad:ca:0d:67:7d:96:ed:0a:38:9d:
d3:15:95:31:bd:12:2f:d7:cd:b7:d6:67:a7:50:e0:
37:ec:f1:06:30:a2:8e:a0:41:03:9b:02:28:ae:87:
0c:02:ed:1a:da:7d:d2:5d:ca:c9:28:fd:ca:7f:f2:
59:fb:ba:04:f1:10:4e:7a:37:3c:58:c9:5c:3b:91:
61:b4:e9:b2:85:38:f8:0f:04:98:76:65:20:f2:9a:
00:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:9B:37:CB:5E:93:70:44:37:C0:95:E5:5E:C7:D7:1B:C5:B3:E5:77
X509v3 Authority Key Identifier:
keyid:C5:56:A6:C7:81:CB:A4:CE:5B:CB:14:2F:B4:2A:FD:88:1A:9F:A6:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVamx4HLpM5byxQvtCr9iBqfpmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/799f28-5270-4929-990a-0909b41f55f1/1/vps3y16TcEQ3wJXlXsfXG8Wz5Xc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/799f28-5270-4929-990a-0909b41f55f1/1/xVamx4HLpM5byxQvtCr9iBqfpmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.189.40.0/21
185.3.48.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:fd:6c:2b:55:12:d0:9b:90:56:07:e9:b9:11:51:84:a0:78:
0f:30:ed:08:f5:fe:71:65:74:ca:07:2a:90:3e:6c:c6:35:62:
69:e7:9b:74:c9:c1:0f:16:d8:8d:a3:75:93:97:d4:10:92:0c:
53:ad:e3:a8:1f:c1:c2:d3:db:33:de:cb:f2:26:3d:0c:74:48:
f6:69:8a:53:ec:6c:ea:6b:8c:24:f2:f0:23:ae:2f:55:3e:65:
d7:ac:ad:51:e1:53:15:48:29:6a:c5:df:d8:eb:cf:32:87:dd:
21:2e:dd:39:c7:88:05:af:75:97:01:9e:74:be:88:4a:83:66:
92:54:9f:e4:64:5a:d0:a5:50:2c:3d:ac:24:0c:81:bd:b8:26:
87:af:ba:d2:9e:b7:34:65:21:20:a2:bd:da:d4:ee:cb:67:af:
fa:c0:16:a6:0c:04:05:b6:b2:06:e9:a2:90:29:80:44:13:9d:
d7:3b:10:4d:c6:54:d0:5f:15:ff:69:d7:d7:75:bb:8c:fe:a1:
d7:f9:48:ff:ac:df:86:d7:d3:f7:d6:4c:df:e3:bd:2c:eb:bc:
ab:92:1b:d0:f9:89:d0:fa:0f:2b:82:3f:1f:5e:be:b2:96:98:
b5:6d:63:f9:99:d2:a1:e9:71:cc:11:92:5d:4b:e1:8a:56:42:
23:c6:a3:00
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEB4J9kDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
NTU2YTZjNzgxY2JhNGNlNWJjYjE0MmZiNDJhZmQ4ODFhOWZhNjY3MB4XDTIyMDEw
MTAwNTg1NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYmU5YjM3Y2I1ZTkz
NzA0NDM3YzA5NWU1NWVjN2Q3MWJjNWIzZTU3NzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMgfzMvfgfXD+/1R5j0zzD0eFnuQw7dAdTu18o6Bns1FmLnd
SvzCm3IpMhN8eMdBgVVnIWpa6jysh8rNMt5ygDQGWmSNWva8jGRmPkmCUqrSLil/
e2XTlDzXHpnDJKWNJXm8aFaY3dSn7jsS0knDZqWr5KDXCrQANBi2SJjE0O+OGYUD
Ox5Aa+2y2fMfcjzSZRfMhR2cC+uQpAuiApuCOpmOZX/8cqr5fF+tyg1nfZbtCjid
0xWVMb0SL9fNt9Znp1DgN+zxBjCijqBBA5sCKK6HDALtGtp90l3KySj9yn/yWfu6
BPEQTno3PFjJXDuRYbTpsoU4+A8EmHZlIPKaAJsCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBS+mzfLXpNwRDfAleVex9cbxbPldzAfBgNVHSMEGDAWgBTFVqbHgcukzlvL
FC+0Kv2IGp+mZzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3hWYW14NEhMcE01Ynl4UXZ0Q3I5aUJxZnBtYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODMvNzk5ZjI4LTUyNzAtNDkyOS05OTBhLTA5MDliNDFmNTVmMS8x
L3ZwczN5MTZUY0VRM3dKWGxYc2ZYRzhXejVYYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODMv
Nzk5ZjI4LTUyNzAtNDkyOS05OTBhLTA5MDliNDFmNTVmMS8xL3hWYW14NEhMcE01
Ynl4UXZ0Q3I5aUJxZnBtYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEA1u9KAMEArkDMDANBgkqhkiG9w0B
AQsFAAOCAQEAL/1sK1US0JuQVgfpuRFRhKB4DzDtCPX+cWV0ygcqkD5sxjViaeeb
dMnBDxbYjaN1k5fUEJIMU63jqB/BwtPbM97L8iY9DHRI9mmKU+xs6muMJPLwI64v
VT5l16ytUeFTFUgpasXf2OvPMofdIS7dOceIBa91lwGedL6ISoNmklSf5GRa0KVQ
LD2sJAyBvbgmh6+60p63NGUhIKK92tTuy2ev+sAWpgwEBbayBumikCmARBOd1zsQ
TcZU0F8V/2nX13W7jP6h1/lI/6zfhtfT99ZM3+O9LOu8q5Ib0PmJ0PoPK4I/H16+
spaYtW1j+ZnSoelxzBGSXUvhilZCI8ajAA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:44 2025 by rpki-client