Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/vYpftoIYl0802LMSZotEkwGtO1k.roa
File: vYpftoIYl0802LMSZotEkwGtO1k.roa (raw, json)
Hash identifier: AuWrLadvB2ERH3IjebmtnUJ/nP6gZejuogzS6BRYY2s=
Subject key identifier: BD:8A:5F:B6:82:18:97:4F:34:D8:B3:12:66:8B:44:93:01:AD:3B:59
Certificate issuer: /CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Certificate serial: 0194228DD04B2D86E1303491D57DD23C329B
Authority key identifier: 1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/vYpftoIYl0802LMSZotEkwGtO1k.roa
Signing time: Wed 01 Jan 2025 15:48:26 +0000
ROA not before: Wed 01 Jan 2025 15:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 53356
IP address blocks: 91.234.22.0/24 maxlen: 24
194.59.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:d0:4b:2d:86:e1:30:34:91:d5:7d:d2:3c:32:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Validity
Not Before: Jan 1 15:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bd8a5fb68218974f34d8b312668b449301ad3b59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4f:22:ed:ff:c1:d2:4b:fc:9b:30:68:2e:9c:
a4:ff:ba:29:e9:2e:dd:f9:08:84:87:e7:84:fa:58:
5e:6a:c5:ef:45:a0:6e:58:1d:1f:b7:30:bd:95:ba:
8b:be:95:1f:04:da:af:80:cc:1a:e2:88:4e:74:12:
32:8b:d1:5f:db:6f:15:4b:cc:38:6f:af:eb:41:0b:
ea:bf:43:16:62:5a:2b:21:ea:67:53:7b:07:94:fe:
68:13:e3:bd:ca:0b:4a:c0:1c:48:7d:b4:98:ca:75:
cc:24:51:9a:5b:12:94:4b:73:3e:cd:c8:1b:de:17:
f7:9c:2e:4a:c4:ec:39:16:26:3f:bd:61:fd:14:3e:
61:3d:b8:08:de:0a:dc:80:8b:0a:45:4c:6c:0f:34:
e4:25:df:94:fb:cc:1e:bc:12:2c:e6:5c:16:75:b3:
f7:d6:a9:60:9f:f0:91:e6:c6:5a:6c:7c:5e:36:01:
a9:ed:8c:13:f4:48:a3:59:56:b2:95:37:f1:ca:c5:
27:13:2d:2e:ce:af:75:f2:25:65:0a:1f:60:c6:1d:
90:05:66:45:29:5b:27:79:51:c8:1c:98:45:0c:0d:
18:02:cd:f5:c2:4e:43:f1:97:f4:d1:95:0c:c8:31:
36:21:11:41:07:c2:90:2b:cb:61:57:e2:2a:83:0b:
68:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:8A:5F:B6:82:18:97:4F:34:D8:B3:12:66:8B:44:93:01:AD:3B:59
X509v3 Authority Key Identifier:
keyid:1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/vYpftoIYl0802LMSZotEkwGtO1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.22.0/24
194.59.7.0/24
Signature Algorithm: sha256WithRSAEncryption
66:b6:89:23:03:b1:38:b7:25:17:00:e0:2f:b1:06:86:b3:7c:
d5:ba:66:74:fe:d2:90:ee:f7:ea:6c:45:e8:d6:0d:f9:2e:ee:
f2:78:1c:69:fa:df:67:97:63:8a:72:c5:2f:7a:07:cd:14:e9:
77:31:19:35:09:70:4e:cd:23:f3:31:3b:11:3c:cc:96:ba:1d:
59:a5:30:8b:33:69:d3:48:93:56:ba:70:cc:a6:c3:81:07:be:
09:cd:24:7f:af:36:cd:c7:d2:4b:d6:98:9d:f4:7a:f6:37:c2:
c6:c1:b0:b4:5f:f7:e0:64:5c:b6:63:07:9a:92:08:99:98:8e:
ee:ef:26:e4:f6:77:fd:ca:95:9b:3f:65:4d:92:66:80:b5:92:
02:00:78:ec:39:f3:ff:51:64:47:e6:0c:72:45:5c:14:5a:76:
a4:05:3c:67:9a:88:81:de:c3:2d:c8:66:93:2d:fe:c5:b1:cd:
00:47:99:f8:a8:25:d5:d3:9a:42:35:97:1b:70:52:8d:6e:f2:
64:a7:5e:74:58:2f:ca:0c:68:ed:4b:a6:d4:9b:97:b8:25:34:
9e:1f:3c:e2:d7:11:1c:5a:c6:fe:72:cc:60:7f:52:ce:d8:72:
fc:3f:37:6a:b6:03:9b:6f:64:59:75:ab:92:e3:0f:16:66:76:
bd:75:e3:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:12 2025 by rpki-client