Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/Vr-8cum3iiEqb_oNyMDGsCny_s0.roa
File: Vr-8cum3iiEqb_oNyMDGsCny_s0.roa (raw, json)
Hash identifier: aqpCnyTJRlTXoL5WXBiIClukBljfvPYhNF/r+Erq3C0=
Subject key identifier: 56:BF:BC:72:E9:B7:8A:21:2A:6F:FA:0D:C8:C0:C6:B0:29:F2:FE:CD
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 01942369C800C9EDF51DB2449035CC597A96
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/Vr-8cum3iiEqb_oNyMDGsCny_s0.roa
Signing time: Wed 01 Jan 2025 19:48:42 +0000
ROA not before: Wed 01 Jan 2025 19:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42899
IP address blocks: 84.54.52.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:c8:00:c9:ed:f5:1d:b2:44:90:35:cc:59:7a:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Jan 1 19:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=56bfbc72e9b78a212a6ffa0dc8c0c6b029f2fecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:7b:bd:5f:e0:be:cc:32:cf:d1:7b:c3:8e:30:
50:4a:28:a3:fb:b6:61:e0:69:f3:b4:70:87:e3:48:
66:ec:a6:06:3e:79:4e:34:35:f1:78:4b:73:bb:65:
3d:fb:5b:0b:7d:c0:f5:94:02:4d:85:a3:dd:18:92:
56:08:d0:44:9c:8c:b9:77:fd:11:4e:2c:4a:44:a8:
cd:36:4d:b5:aa:9d:f8:c5:1f:f5:07:26:eb:71:72:
a8:5a:2a:26:12:91:0d:29:66:4f:aa:73:53:ac:13:
56:bd:b7:c2:ff:c2:fd:0f:e6:7e:39:ac:ff:05:83:
5e:6e:18:2b:9d:3d:37:c1:c5:e5:ae:af:bd:84:57:
7a:93:fa:e4:20:53:6e:70:84:3b:98:c5:b3:f6:03:
a6:c2:04:07:bb:3b:35:a4:ba:f0:b8:dc:67:69:b5:
39:fe:68:aa:f3:bf:51:8f:b1:5d:00:cd:af:11:8f:
83:5f:c9:04:8c:4c:67:27:59:f6:00:77:c1:d7:ef:
52:1b:18:ae:79:78:85:bf:05:a2:c6:46:1f:16:f9:
fb:3e:cd:a6:4a:00:5f:0f:97:b1:da:ec:ff:7a:ca:
22:bf:51:73:1b:ef:c0:d7:fe:86:1f:f4:bd:10:d5:
28:71:ac:eb:29:b4:2d:b9:49:01:6a:8b:64:41:e5:
cd:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:BF:BC:72:E9:B7:8A:21:2A:6F:FA:0D:C8:C0:C6:B0:29:F2:FE:CD
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/Vr-8cum3iiEqb_oNyMDGsCny_s0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.52.0/24
Signature Algorithm: sha256WithRSAEncryption
98:b8:c3:36:f1:f3:51:f4:ed:7d:98:f5:a9:36:bf:13:ee:e8:
76:8b:6c:75:43:85:c9:d5:70:80:a1:c3:c7:8e:2d:39:ad:f4:
b8:2a:69:61:4f:87:91:99:0d:a5:0f:31:59:a8:19:26:1f:3e:
09:94:2d:ec:5d:02:14:17:02:e3:f1:d6:4d:38:2f:33:21:1f:
33:36:1a:e5:41:c5:69:23:70:11:67:f8:15:84:da:7c:a1:01:
4f:40:64:f0:1c:07:7e:b3:00:0c:e6:8f:cf:09:f0:ee:51:a1:
18:47:14:07:bc:24:72:19:f5:38:89:31:3e:17:63:fb:99:0a:
d3:f3:ed:8c:3e:dd:dd:87:3b:1b:79:41:0c:31:07:ed:77:6a:
95:39:bf:66:5d:03:a7:74:a6:d8:69:51:72:0c:b1:06:be:12:
c9:43:15:9c:ca:7d:3a:95:0f:16:f5:8f:c8:fc:d0:32:af:28:
6e:d7:b5:f7:7b:5a:98:60:65:ff:1b:f0:a0:3c:50:07:10:55:
9b:03:79:1e:7c:5c:51:cf:38:bb:7a:f9:29:f5:4e:71:c2:eb:
08:d9:7e:cc:2b:62:4d:35:6c:c1:a3:ff:17:c2:15:32:c1:35:
34:9f:cd:62:8e:0d:f8:a4:8b:da:04:ca:ff:5e:30:cf:f5:0c:
c7:07:37:23
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQjacgAye31HbJEkDXMWXqWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlYmJmMzE3ZTVmYWY1ZWYwMmM5Y2NlNzk1MjdkNWU3NGI4
YWJjYzUwHhcNMjUwMTAxMTk0ODQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NmJmYmM3MmU5Yjc4YTIxMmE2ZmZhMGRjOGMwYzZiMDI5ZjJmZWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA53u9X+C+zDLP0XvDjjBQSiij+7Zh
4GnztHCH40hm7KYGPnlONDXxeEtzu2U9+1sLfcD1lAJNhaPdGJJWCNBEnIy5d/0R
TixKRKjNNk21qp34xR/1BybrcXKoWiomEpENKWZPqnNTrBNWvbfC/8L9D+Z+Oaz/
BYNebhgrnT03wcXlrq+9hFd6k/rkIFNucIQ7mMWz9gOmwgQHuzs1pLrwuNxnabU5
/miq879Rj7FdAM2vEY+DX8kEjExnJ1n2AHfB1+9SGxiueXiFvwWixkYfFvn7Ps2m
SgBfD5ex2uz/esoiv1FzG+/A1/6GH/S9ENUocazrKbQtuUkBaotkQeXNPwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFa/vHLpt4ohKm/6DcjAxrAp8v7NMB8GA1UdIwQY
MBaAFO678xfl+vXvAsnM55Un1edLirzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMt
NmZlOWJmNjA1NjFjLzEvVnItOGN1bTNpaUVxYl9vTnlNREdzQ255X3MwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMtNmZlOWJmNjA1NjFj
LzEvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVDY0MA0G
CSqGSIb3DQEBCwUAA4IBAQCYuMM28fNR9O19mPWpNr8T7uh2i2x1Q4XJ1XCAocPH
ji05rfS4KmlhT4eRmQ2lDzFZqBkmHz4JlC3sXQIUFwLj8dZNOC8zIR8zNhrlQcVp
I3ARZ/gVhNp8oQFPQGTwHAd+swAM5o/PCfDuUaEYRxQHvCRyGfU4iTE+F2P7mQrT
8+2MPt3dhzsbeUEMMQftd2qVOb9mXQOndKbYaVFyDLEGvhLJQxWcyn06lQ8W9Y/I
/NAyryhu17X3e1qYYGX/G/CgPFAHEFWbA3kefFxRzzi7evkp9U5xwusI2X7MK2JN
NWzBo/8XwhUywTU0n81ijg34pIvaBMr/XjDP9QzHBzcj
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:15:36 2025 by rpki-client