Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/1e6c54-503c-4b55-93b5-a094ddea0c1a/1/Vug9Zq_p1A0iCty5sMVL1UVdhoU.roa
File: Vug9Zq_p1A0iCty5sMVL1UVdhoU.roa (raw, json)
Hash identifier: gcy2YaiU2hkdy3ztpaNQDC8zEu+Zb4/s7F5aSxrI06I=
Subject key identifier: 56:E8:3D:66:AF:E9:D4:0D:22:0A:DC:B9:B0:C5:4B:D5:45:5D:86:85
Certificate issuer: /CN=25778b203d7bcc64a960dc7d16c8211287401652
Certificate serial: 01856C8A5820E12852C279EB20483CFB702B
Authority key identifier: 25:77:8B:20:3D:7B:CC:64:A9:60:DC:7D:16:C8:21:12:87:40:16:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JXeLID17zGSpYNx9FsghEodAFlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/1e6c54-503c-4b55-93b5-a094ddea0c1a/1/Vug9Zq_p1A0iCty5sMVL1UVdhoU.roa
Signing time: Sun 01 Jan 2023 08:54:43 +0000
ROA not before: Sun 01 Jan 2023 08:54:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50284
IP address blocks: 88.151.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:8a:58:20:e1:28:52:c2:79:eb:20:48:3c:fb:70:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25778b203d7bcc64a960dc7d16c8211287401652
Validity
Not Before: Jan 1 08:54:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=56e83d66afe9d40d220adcb9b0c54bd5455d8685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:90:e7:1b:8e:d8:64:cf:08:0e:5f:11:64:ee:
4a:39:f0:be:69:d0:8b:55:e8:70:fb:26:0e:86:a9:
32:10:c8:96:b9:0b:11:2c:d6:59:60:ee:ba:e1:5d:
0c:e6:de:0b:07:e6:3b:6b:96:0f:37:4e:88:20:17:
21:aa:f5:85:7c:0d:85:94:e4:bf:63:7a:de:42:92:
1e:85:50:8f:fb:7e:1a:a0:5e:e3:f1:63:3e:42:bb:
ff:61:0c:43:f3:71:05:68:ce:d4:d5:cd:13:8d:5f:
9e:31:3f:c1:a7:28:26:5c:61:9a:9b:2a:5e:08:58:
2a:5f:08:5b:69:a1:8e:4b:6c:7a:30:83:d5:24:e7:
ff:9b:fd:1e:85:c1:da:b5:a5:97:13:90:00:17:78:
c7:cb:c0:29:cd:76:11:d0:dc:80:33:67:8c:af:13:
9a:9d:3d:c1:8b:9b:79:da:a7:6f:21:f8:48:60:3f:
a4:34:63:20:80:15:c7:46:05:76:c1:a5:36:bf:ab:
24:e5:ab:1b:68:c5:23:f0:ae:aa:84:e6:2d:59:a7:
40:89:92:5b:05:ef:95:61:0f:4c:dd:cb:32:af:d1:
03:b3:6a:24:d8:60:40:ab:cd:fd:c3:47:06:9f:e3:
a1:31:60:aa:d1:51:aa:3d:03:b5:dc:d2:84:c8:70:
ab:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E8:3D:66:AF:E9:D4:0D:22:0A:DC:B9:B0:C5:4B:D5:45:5D:86:85
X509v3 Authority Key Identifier:
keyid:25:77:8B:20:3D:7B:CC:64:A9:60:DC:7D:16:C8:21:12:87:40:16:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JXeLID17zGSpYNx9FsghEodAFlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1e6c54-503c-4b55-93b5-a094ddea0c1a/1/Vug9Zq_p1A0iCty5sMVL1UVdhoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1e6c54-503c-4b55-93b5-a094ddea0c1a/1/JXeLID17zGSpYNx9FsghEodAFlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.117.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:2e:10:64:6f:b9:07:a2:e4:42:17:aa:21:ed:79:a8:72:90:
63:fd:cd:0c:66:f4:c4:63:9d:aa:a6:d6:60:2e:9b:65:59:bc:
2f:95:4f:a9:2b:62:3e:14:2a:93:3d:af:e0:37:d6:ca:df:2e:
aa:ff:bc:ec:ea:aa:5a:30:5f:da:1f:d1:73:99:7b:10:8b:2e:
6a:3c:ba:19:63:f6:a8:76:d5:05:e1:fd:8d:90:5b:ce:52:fa:
f5:8e:df:8d:d4:7e:88:09:3d:5e:29:f1:a6:12:da:47:90:32:
37:e7:37:fb:35:8b:9d:48:3c:32:e1:8b:36:a9:84:f8:f9:96:
ad:c5:74:2c:0b:05:99:8d:3a:32:66:41:d9:21:23:bc:33:2f:
ce:40:84:52:1f:f2:65:73:23:a4:71:1f:bd:80:23:79:36:2a:
85:7c:15:e4:7d:a8:8c:a4:b2:bc:d2:62:4b:53:95:5a:f0:73:
51:af:bd:79:79:f7:a6:f3:4c:d7:99:6c:23:d0:0e:41:85:8e:
cf:f0:20:c1:50:a0:46:e3:91:a7:0d:9a:e7:68:f5:09:a4:00:
18:76:c5:0f:2d:af:8c:be:a4:3f:7a:91:b8:c5:e0:a2:0a:a2:
ab:a4:37:10:83:ec:30:f9:af:7d:50:e1:0f:52:ec:56:50:80:
cb:3b:db:a0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVsilgg4ShSwnnrIEg8+3ArMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1Nzc4YjIwM2Q3YmNjNjRhOTYwZGM3ZDE2YzgyMTEyODc0
MDE2NTIwHhcNMjMwMTAxMDg1NDQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NmU4M2Q2NmFmZTlkNDBkMjIwYWRjYjliMGM1NGJkNTQ1NWQ4Njg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5DnG47YZM8IDl8RZO5KOfC+adCL
Vehw+yYOhqkyEMiWuQsRLNZZYO664V0M5t4LB+Y7a5YPN06IIBchqvWFfA2FlOS/
Y3reQpIehVCP+34aoF7j8WM+Qrv/YQxD83EFaM7U1c0TjV+eMT/BpygmXGGamype
CFgqXwhbaaGOS2x6MIPVJOf/m/0ehcHataWXE5AAF3jHy8ApzXYR0NyAM2eMrxOa
nT3Bi5t52qdvIfhIYD+kNGMggBXHRgV2waU2v6sk5asbaMUj8K6qhOYtWadAiZJb
Be+VYQ9M3csyr9EDs2ok2GBAq839w0cGn+OhMWCq0VGqPQO13NKEyHCr/wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFboPWav6dQNIgrcubDFS9VFXYaFMB8GA1UdIwQY
MBaAFCV3iyA9e8xkqWDcfRbIIRKHQBZSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlhlTElEMTd6R1NwWU54OUZzZ2hFb2RBRmxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8xZTZjNTQtNTAzYy00YjU1LTkzYjUt
YTA5NGRkZWEwYzFhLzEvVnVnOVpxX3AxQTBpQ3R5NXNNVkwxVVZkaG9VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi8xZTZjNTQtNTAzYy00YjU1LTkzYjUtYTA5NGRkZWEwYzFh
LzEvSlhlTElEMTd6R1NwWU54OUZzZ2hFb2RBRmxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWJd1MA0G
CSqGSIb3DQEBCwUAA4IBAQAbLhBkb7kHouRCF6oh7XmocpBj/c0MZvTEY52qptZg
LptlWbwvlU+pK2I+FCqTPa/gN9bK3y6q/7zs6qpaMF/aH9FzmXsQiy5qPLoZY/ao
dtUF4f2NkFvOUvr1jt+N1H6ICT1eKfGmEtpHkDI35zf7NYudSDwy4Ys2qYT4+Zat
xXQsCwWZjToyZkHZISO8My/OQIRSH/JlcyOkcR+9gCN5NiqFfBXkfaiMpLK80mJL
U5Va8HNRr715efem80zXmWwj0A5BhY7P8CDBUKBG45GnDZrnaPUJpAAYdsUPLa+M
vqQ/epG4xeCiCqKrpDcQg+ww+a99UOEPUuxWUIDLO9ug
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:29:32 2025 by rpki-client