Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b8c0cc-7a67-4ac9-bc81-a5fe484616ad/1/VuytbJWnX4HD7PpdwN7icMORJow.roa
File: VuytbJWnX4HD7PpdwN7icMORJow.roa (raw, json)
Hash identifier: BrUMMRwqEQ5pwpgROK+rfe5Glg3t81keS5wtXfQUg74=
Subject key identifier: 56:EC:AD:6C:95:A7:5F:81:C3:EC:FA:5D:C0:DE:E2:70:C3:91:26:8C
Certificate issuer: /CN=139ca3799553b9e180d334442323003513485e2d
Certificate serial: 019425FCED86EFF44DC12ED8B70D618A4220
Authority key identifier: 13:9C:A3:79:95:53:B9:E1:80:D3:34:44:23:23:00:35:13:48:5E:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E5yjeZVTueGA0zREIyMANRNIXi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b8c0cc-7a67-4ac9-bc81-a5fe484616ad/1/VuytbJWnX4HD7PpdwN7icMORJow.roa
Signing time: Thu 02 Jan 2025 07:48:40 +0000
ROA not before: Thu 02 Jan 2025 07:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8823
IP address blocks: 45.141.188.0/22 maxlen: 22
2a0e:cf40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:ed:86:ef:f4:4d:c1:2e:d8:b7:0d:61:8a:42:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=139ca3799553b9e180d334442323003513485e2d
Validity
Not Before: Jan 2 07:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=56ecad6c95a75f81c3ecfa5dc0dee270c391268c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:81:5b:91:e2:6f:e4:73:8d:20:0d:21:05:88:
d2:8b:e2:b2:27:85:0e:65:b9:e5:e4:3c:1b:46:88:
be:6d:7c:7b:bb:22:25:24:1c:e3:60:79:01:78:e2:
86:ad:87:c4:ca:89:7e:87:4b:98:8b:b7:a8:d3:6b:
f6:96:82:6d:0b:19:5c:32:d2:64:63:66:9c:c3:10:
67:b4:36:a5:73:09:ed:1d:9a:35:3f:a2:c3:4d:72:
9c:ba:2e:23:96:7d:85:ea:f2:90:2e:2a:f3:af:25:
bc:65:5e:6d:82:46:99:75:e4:23:72:51:5f:3d:10:
8b:9d:28:95:26:85:20:4b:ea:33:38:af:78:85:69:
50:f3:1c:a7:11:7c:bd:2f:f3:c2:5b:85:1e:2d:5a:
4b:24:12:1d:5c:ae:71:bf:e9:fb:0d:fa:29:ff:11:
72:e3:f2:43:c2:58:46:af:4f:69:42:59:8c:52:c3:
8b:57:96:6b:4e:25:e7:10:79:a8:cf:fc:9c:75:f5:
81:eb:b7:24:5e:a8:02:bd:f4:a5:09:3a:73:41:aa:
67:5c:1d:67:2b:8e:6c:10:91:f8:97:db:d5:1d:5f:
ca:23:75:94:eb:49:69:d5:1a:52:50:b7:a8:e3:f5:
16:37:8a:7c:5d:64:0f:33:c6:f8:35:d6:f8:bd:a2:
8f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:EC:AD:6C:95:A7:5F:81:C3:EC:FA:5D:C0:DE:E2:70:C3:91:26:8C
X509v3 Authority Key Identifier:
keyid:13:9C:A3:79:95:53:B9:E1:80:D3:34:44:23:23:00:35:13:48:5E:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E5yjeZVTueGA0zREIyMANRNIXi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b8c0cc-7a67-4ac9-bc81-a5fe484616ad/1/VuytbJWnX4HD7PpdwN7icMORJow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b8c0cc-7a67-4ac9-bc81-a5fe484616ad/1/E5yjeZVTueGA0zREIyMANRNIXi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.188.0/22
IPv6:
2a0e:cf40::/29
Signature Algorithm: sha256WithRSAEncryption
18:d7:83:9b:bf:c2:0c:e5:05:9f:5b:99:34:cf:b7:87:21:a2:
ab:11:25:c9:01:f5:ac:11:43:e5:77:af:2e:4d:24:4f:26:d3:
90:41:81:bc:2d:55:e5:84:0c:56:4f:5c:17:3b:11:1a:78:59:
27:b8:44:c1:3f:0c:98:86:6a:1f:4b:f4:47:6b:db:a1:7e:db:
4a:12:46:1c:74:ce:d1:6e:83:fc:b8:25:84:e2:0b:aa:c5:c5:
eb:d1:cf:07:e0:34:fd:13:9a:8f:a3:7f:ac:5a:b5:20:55:14:
19:bd:51:11:f6:04:55:7f:cb:c5:6a:1e:71:09:16:de:43:71:
e3:00:e4:61:df:a4:f1:e6:c6:d2:fd:b9:cf:24:4f:f6:12:a8:
fd:1d:cb:6d:00:c0:71:ec:ae:98:e2:5e:60:7d:b4:fb:b0:69:
dd:34:be:43:95:92:a3:ac:9b:57:35:99:fd:83:2d:1a:77:4a:
70:18:2f:d9:6f:13:13:0e:30:d5:4c:d4:51:b9:f2:f5:2d:51:
45:84:fd:d8:a7:93:85:c2:45:0b:5f:5e:b6:bc:09:1d:f1:56:
68:21:c4:00:89:9b:49:86:10:05:12:04:18:94:f0:af:10:c3:
88:eb:92:88:09:91:b1:61:0c:d5:14:00:7a:b6:5e:9f:da:57:
33:a4:9b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 03:49:08 2025 by rpki-client