Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/VPet34irWtspq3ThDohOt-vtW50.roa
File: VPet34irWtspq3ThDohOt-vtW50.roa (raw, json)
Hash identifier: cEsC9giL4f/cBnJP5opixC6jm42IWJ7tU6NkFf3K4L8=
Subject key identifier: 54:F7:AD:DF:88:AB:5A:DB:29:AB:74:E1:0E:88:4E:B7:EB:ED:5B:9D
Certificate issuer: /CN=0032534e8d560d73553c632bba10344a7c816614
Certificate serial: 01856D9D472142FCC7F7C21C46072ED9179F
Authority key identifier: 00:32:53:4E:8D:56:0D:73:55:3C:63:2B:BA:10:34:4A:7C:81:66:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ADJTTo1WDXNVPGMruhA0SnyBZhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/VPet34irWtspq3ThDohOt-vtW50.roa
Signing time: Sun 01 Jan 2023 13:55:01 +0000
ROA not before: Sun 01 Jan 2023 13:55:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24685
IP address blocks: 91.202.108.0/24 maxlen: 32
194.28.198.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:9d:47:21:42:fc:c7:f7:c2:1c:46:07:2e:d9:17:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0032534e8d560d73553c632bba10344a7c816614
Validity
Not Before: Jan 1 13:55:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=54f7addf88ab5adb29ab74e10e884eb7ebed5b9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f3:bd:64:e4:cd:27:a1:be:c8:bd:96:e8:9d:
a9:14:45:d8:6c:98:cf:c6:d5:0b:0b:79:fc:d7:72:
c8:18:2e:93:53:03:ba:07:9d:cd:d8:2d:06:c4:a5:
b4:63:bc:68:31:04:aa:85:ff:36:2e:73:90:e6:f8:
97:80:92:e1:f5:ae:19:17:6d:92:b5:b8:5a:0e:96:
0a:a4:2d:d2:7a:6b:75:74:a0:03:16:df:f9:21:23:
1f:eb:41:5d:55:b2:73:76:a8:6d:06:94:c7:79:98:
7e:c3:33:30:1b:73:d6:2d:2c:f5:e5:40:17:f9:3e:
bf:c3:19:4e:a0:82:ad:58:63:b3:eb:ec:dc:82:54:
bb:97:85:a0:38:07:01:7a:f6:b8:d6:5e:c1:93:b3:
73:6f:98:4b:06:f9:5c:c6:a0:27:ec:a5:39:63:4b:
bc:70:33:3d:e9:74:55:a8:de:dd:93:c9:32:99:de:
fa:b4:1d:7b:11:6a:f6:7d:f8:a9:27:bd:78:6f:d0:
58:bd:a4:70:2f:48:49:ba:9e:35:f2:9c:07:2a:df:
bd:a8:4a:71:64:bf:e7:99:85:2e:d2:7d:ae:7b:33:
12:73:83:8f:d4:ac:77:c4:0b:f2:8e:87:7e:10:b2:
d3:91:6b:cb:3f:e4:8e:11:8d:98:d2:19:85:ad:37:
52:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:F7:AD:DF:88:AB:5A:DB:29:AB:74:E1:0E:88:4E:B7:EB:ED:5B:9D
X509v3 Authority Key Identifier:
keyid:00:32:53:4E:8D:56:0D:73:55:3C:63:2B:BA:10:34:4A:7C:81:66:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ADJTTo1WDXNVPGMruhA0SnyBZhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/VPet34irWtspq3ThDohOt-vtW50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/ADJTTo1WDXNVPGMruhA0SnyBZhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.202.108.0/24
194.28.198.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:64:13:1d:37:79:fe:c8:78:dd:d2:80:0e:db:38:34:0b:91:
61:73:6c:68:b1:08:31:17:1c:42:31:06:a4:55:d8:ad:32:56:
01:d3:4b:e7:d0:f4:16:c9:32:f7:df:40:57:46:b4:25:43:e3:
9a:6f:35:eb:08:1f:d1:e6:0e:86:0d:c4:5a:5f:1f:fd:4a:8e:
d4:a0:76:d3:89:75:76:d9:15:6d:85:7a:52:ff:d5:08:01:a6:
0f:05:fb:4d:a7:63:3b:e5:f8:bb:c4:e8:17:38:6b:3b:4c:c1:
38:ba:85:68:dc:23:97:94:98:94:f0:93:5a:25:95:3e:42:f5:
1e:65:fb:c0:d8:48:af:85:f2:c4:f7:44:65:7c:d9:56:4c:49:
69:e9:b5:91:19:54:37:59:16:a9:6d:27:03:39:22:c2:42:7f:
42:b2:f8:e8:4c:6f:31:6d:50:8d:0b:70:b6:7b:d3:22:eb:36:
da:42:5e:80:ce:6b:d2:70:e0:e8:37:1a:35:eb:3e:ce:38:64:
27:ef:dc:31:4a:ff:55:cf:e1:3e:6f:65:19:cb:fb:9c:f7:e0:
1d:0b:71:a5:65:96:d7:31:33:20:36:ea:c0:fc:bf:c1:19:b9:
3a:e2:1e:db:91:a3:7d:e6:c6:fa:32:93:49:b5:50:eb:e1:0d:
74:03:45:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:22:49 2025 by rpki-client