Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/VHke2dRAU413gG-qOq91BqFotnA.roa
File: VHke2dRAU413gG-qOq91BqFotnA.roa (raw, json)
Hash identifier: tCtViRscoxX/FUXZsRP79cmOS8/23LI5c9CHWFx8Vhg=
Subject key identifier: 54:79:1E:D9:D4:40:53:8D:77:80:6F:AA:3A:AF:75:06:A1:68:B6:70
Certificate issuer: /CN=e2454c456ce68ba8fecad542aab9610b1ecc12e2
Certificate serial: 01941FFAAEA5720EE62D32E5D60EF0558BFB
Authority key identifier: E2:45:4C:45:6C:E6:8B:A8:FE:CA:D5:42:AA:B9:61:0B:1E:CC:12:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kVMRWzmi6j-ytVCqrlhCx7MEuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/VHke2dRAU413gG-qOq91BqFotnA.roa
Signing time: Wed 01 Jan 2025 03:48:29 +0000
ROA not before: Wed 01 Jan 2025 03:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2119
IP address blocks: 193.161.208.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:ae:a5:72:0e:e6:2d:32:e5:d6:0e:f0:55:8b:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2454c456ce68ba8fecad542aab9610b1ecc12e2
Validity
Not Before: Jan 1 03:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=54791ed9d440538d77806faa3aaf7506a168b670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ff:48:31:ce:1b:f2:cf:28:a1:6a:93:cf:77:
5e:56:ab:22:89:dc:6e:ce:4a:77:de:62:b2:4a:47:
fb:b1:41:09:1d:dc:a3:ca:94:a4:6b:39:96:4c:95:
67:ad:d3:ba:0f:2a:4a:30:88:4c:04:47:cc:6c:57:
30:95:f9:93:6d:82:f1:9a:26:04:c2:d8:c3:69:5f:
c7:88:54:e5:8c:4d:8c:70:1f:2e:af:d6:87:c3:12:
c0:f1:2d:3e:07:98:c7:c5:7d:56:ad:20:4f:2b:ed:
90:ed:12:13:6c:6a:d7:03:64:19:a7:10:05:44:67:
d9:47:06:fe:59:a0:32:59:7a:f4:57:ba:6d:f4:9a:
47:74:47:f3:27:cf:2f:95:f3:73:b6:1d:2b:17:20:
68:38:53:a8:c1:17:1e:c9:6d:50:b2:f7:25:95:19:
e8:9a:7c:04:13:6b:b1:a1:d1:ce:37:a3:22:20:98:
b0:89:49:00:c3:75:28:15:09:ef:aa:5c:8f:df:ce:
d7:37:cb:a3:91:ab:01:ed:39:74:70:01:38:c2:d9:
3d:e7:83:6f:6b:be:1d:9c:b6:87:58:05:88:18:68:
2c:34:5b:b5:4e:f5:79:16:05:fa:35:de:03:d7:66:
0b:2e:18:16:68:0b:3e:4b:3c:16:80:9f:8e:ad:e4:
c5:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:79:1E:D9:D4:40:53:8D:77:80:6F:AA:3A:AF:75:06:A1:68:B6:70
X509v3 Authority Key Identifier:
keyid:E2:45:4C:45:6C:E6:8B:A8:FE:CA:D5:42:AA:B9:61:0B:1E:CC:12:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kVMRWzmi6j-ytVCqrlhCx7MEuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/VHke2dRAU413gG-qOq91BqFotnA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.161.208.0/22
Signature Algorithm: sha256WithRSAEncryption
51:f6:db:52:8c:f2:39:03:de:ca:d0:3d:c1:07:38:67:02:16:
40:7a:22:ac:d3:8b:61:b8:69:78:14:e5:38:01:44:de:46:21:
f9:77:5f:cb:b0:16:15:cf:76:73:d3:71:50:f1:c3:d1:c5:ea:
70:63:49:8f:4f:8b:83:b6:28:dd:80:e0:8b:c6:50:6c:fc:7c:
b3:2f:16:3a:02:74:f1:33:28:ed:fc:4d:0f:05:30:a3:a4:a6:
32:80:8c:b1:df:b3:4f:d3:ab:3c:cc:2c:2e:17:ce:15:32:5b:
d7:3f:c4:ff:4e:a0:5e:c4:cd:2b:f7:bb:1c:0d:54:17:f4:97:
11:05:af:67:0b:e5:c5:37:1a:87:ee:c1:5e:f5:5b:f9:41:44:
e6:04:cf:3e:9c:a8:98:91:3f:2d:b1:cb:bd:b7:75:53:88:b7:
c1:fa:9f:8b:c6:ea:38:36:66:45:58:f3:dc:b4:3c:8d:3b:c1:
88:0f:0e:8e:03:b5:ca:a6:a3:dd:3f:b0:e6:7d:bb:9b:df:45:
72:70:aa:b3:aa:d3:6b:7c:e1:ca:8c:64:03:ba:01:9c:0f:ce:
a6:37:ce:c9:d9:b8:b9:cf:02:33:ea:84:1a:b2:cf:ec:36:71:
2b:da:d3:24:b0:75:4e:86:05:67:37:e9:f6:5c:d8:83:b5:0a:
9d:4f:46:95
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQf+q6lcg7mLTLl1g7wVYv7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyNDU0YzQ1NmNlNjhiYThmZWNhZDU0MmFhYjk2MTBiMWVj
YzEyZTIwHhcNMjUwMTAxMDM0ODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NDc5MWVkOWQ0NDA1MzhkNzc4MDZmYWEzYWFmNzUwNmExNjhiNjcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2v9IMc4b8s8ooWqTz3deVqsiidxu
zkp33mKySkf7sUEJHdyjypSkazmWTJVnrdO6DypKMIhMBEfMbFcwlfmTbYLxmiYE
wtjDaV/HiFTljE2McB8ur9aHwxLA8S0+B5jHxX1WrSBPK+2Q7RITbGrXA2QZpxAF
RGfZRwb+WaAyWXr0V7pt9JpHdEfzJ88vlfNzth0rFyBoOFOowRceyW1QsvcllRno
mnwEE2uxodHON6MiIJiwiUkAw3UoFQnvqlyP387XN8ujkasB7Tl0cAE4wtk954Nv
a74dnLaHWAWIGGgsNFu1TvV5FgX6Nd4D12YLLhgWaAs+SzwWgJ+OreTFPQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFR5HtnUQFONd4BvqjqvdQahaLZwMB8GA1UdIwQY
MBaAFOJFTEVs5ouo/srVQqq5YQsezBLiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGtWTVJXem1pNmoteXRWQ3FybGhDeDdNRXVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS82NGVkNjItYThlZi00ODAyLWExYjQt
OWY5N2IwZmM0ODMyLzEvVkhrZTJkUkFVNDEzZ0ctcU9xOTFCcUZvdG5BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS82NGVkNjItYThlZi00ODAyLWExYjQtOWY5N2IwZmM0ODMy
LzEvNGtWTVJXem1pNmoteXRWQ3FybGhDeDdNRXVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwaHQMA0G
CSqGSIb3DQEBCwUAA4IBAQBR9ttSjPI5A97K0D3BBzhnAhZAeiKs04thuGl4FOU4
AUTeRiH5d1/LsBYVz3Zz03FQ8cPRxepwY0mPT4uDtijdgOCLxlBs/HyzLxY6AnTx
Myjt/E0PBTCjpKYygIyx37NP06s8zCwuF84VMlvXP8T/TqBexM0r97scDVQX9JcR
Ba9nC+XFNxqH7sFe9Vv5QUTmBM8+nKiYkT8tscu9t3VTiLfB+p+Lxuo4NmZFWPPc
tDyNO8GIDw6OA7XKpqPdP7Dmfbub30VycKqzqtNrfOHKjGQDugGcD86mN87J2bi5
zwIz6oQass/sNnEr2tMksHVOhgVnN+n2XNiDtQqdT0aV
-----END CERTIFICATE-----
Generated at Mon Apr 7 06:59:04 2025 by rpki-client