Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/V-Zw-R39fa3vjmQTK3pi-ruJAOM.roa
File: V-Zw-R39fa3vjmQTK3pi-ruJAOM.roa (raw, json)
Hash identifier: svw00iQ8XqkVPen4oB7uX29LsRKx9ZNkxy68U1tQQ8A=
Subject key identifier: 57:E6:70:F9:1D:FD:7D:AD:EF:8E:64:13:2B:7A:62:FA:BB:89:00:E3
Certificate issuer: /CN=724994bb7a6a3f4333d668c498fb965b172c3455
Certificate serial: 0194221FE83FC7012D207120D76D32023080
Authority key identifier: 72:49:94:BB:7A:6A:3F:43:33:D6:68:C4:98:FB:96:5B:17:2C:34:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/V-Zw-R39fa3vjmQTK3pi-ruJAOM.roa
Signing time: Wed 01 Jan 2025 13:48:23 +0000
ROA not before: Wed 01 Jan 2025 13:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215585
IP address blocks: 91.195.36.0/24 maxlen: 24
2a13:5c40::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:e8:3f:c7:01:2d:20:71:20:d7:6d:32:02:30:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=724994bb7a6a3f4333d668c498fb965b172c3455
Validity
Not Before: Jan 1 13:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=57e670f91dfd7dadef8e64132b7a62fabb8900e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a8:60:41:f3:c5:74:cc:a6:12:01:40:f1:6c:
79:4b:47:7f:6c:7e:ee:eb:62:14:9f:68:01:0a:d7:
71:3c:2a:f2:51:52:d7:4f:14:b6:47:81:99:10:59:
73:bb:79:49:4f:9d:51:14:5e:2c:af:a5:63:1e:80:
65:96:e6:f2:f9:2d:2b:ef:bd:70:a0:f2:bc:7a:d3:
4c:0a:26:37:23:a0:9a:52:aa:62:25:81:14:50:c9:
b1:e1:9c:d3:92:3f:b1:8e:0c:0e:ba:91:c6:94:46:
8d:ec:db:98:8b:76:03:b7:a3:d4:3c:a5:40:62:35:
3d:e3:9c:84:95:6d:99:9b:b8:d8:1e:68:90:f7:01:
b4:6e:91:49:c2:22:bf:cf:75:ff:83:85:32:99:67:
5d:f1:10:03:9c:03:37:20:c8:49:37:25:66:a1:c3:
ac:ea:e0:68:a5:1d:b5:2a:e6:bf:b1:22:f6:6b:80:
e3:09:56:9f:8f:ec:47:ec:b6:6e:f8:74:ae:3b:20:
b6:28:58:f2:1e:ca:0d:13:50:60:a6:dc:24:63:48:
f0:57:c0:4a:09:b8:2b:d1:9b:d9:fb:16:28:cb:cc:
ce:c3:1a:7e:15:cf:79:c3:8b:6f:a5:d8:dd:16:db:
d7:9f:64:76:2a:76:29:8d:66:b7:91:8c:c7:42:d4:
dd:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:E6:70:F9:1D:FD:7D:AD:EF:8E:64:13:2B:7A:62:FA:BB:89:00:E3
X509v3 Authority Key Identifier:
keyid:72:49:94:BB:7A:6A:3F:43:33:D6:68:C4:98:FB:96:5B:17:2C:34:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/V-Zw-R39fa3vjmQTK3pi-ruJAOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.195.36.0/24
IPv6:
2a13:5c40::/29
Signature Algorithm: sha256WithRSAEncryption
0e:a0:ac:15:44:b1:43:11:fc:e6:ba:8e:d4:ef:bf:82:93:69:
09:d0:df:78:1d:04:03:e9:ec:bd:ce:ed:0c:19:b1:e8:c3:46:
e1:ad:e4:3c:e4:e0:21:b5:d6:5d:d0:82:dc:ba:29:6a:14:b8:
5b:d7:35:94:b9:b0:0c:bc:5c:52:9d:85:a5:02:e4:58:9e:3c:
a3:7f:92:d7:c6:9d:60:9d:34:f6:af:89:6f:0e:7b:d8:77:ef:
49:72:00:4a:96:67:bf:36:d4:bb:36:45:17:29:55:5f:d6:8f:
6a:70:3b:f0:b3:a9:ba:b7:9e:46:a0:e5:a6:3c:b4:bb:75:10:
8b:f8:2e:5d:95:53:d3:80:63:46:1f:f3:e4:87:23:26:45:5c:
c8:b0:60:5b:8c:1e:58:b6:89:f3:70:d7:8f:c2:37:a7:11:14:
51:75:57:89:d3:4e:2b:06:75:85:3e:ba:29:12:46:85:b6:dc:
e5:06:6e:8f:1f:31:b8:a4:da:ff:c6:2b:40:16:4b:89:fa:d8:
a4:bf:1a:a8:b3:70:7c:77:db:18:91:52:28:7f:14:9b:6b:52:
d2:98:ae:c0:4a:87:66:95:98:b3:00:e4:57:b2:8e:27:18:d5:
c8:44:18:b0:01:23:d7:79:ee:a6:04:f9:a6:0d:87:ec:da:b8:
fd:36:2c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:54:41 2025 by rpki-client