Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/1VADO_17q_s1vi4sUX8qvyaTKS8.roa
File: 1VADO_17q_s1vi4sUX8qvyaTKS8.roa (raw, json)
Hash identifier: mWvBqtGQDs1pA/HxiZ8AHfsR4oNjr1Yi2fZMV/jNGTc=
Subject key identifier: D5:50:03:3B:FD:7B:AB:FB:35:BE:2E:2C:51:7F:2A:BF:26:93:29:2F
Certificate issuer: /CN=60ceeb253845c6dca190d3616dba23f37d8b6397
Certificate serial: 01944A4CDDC5F9BE74A3A24149D3BD622302
Authority key identifier: 60:CE:EB:25:38:45:C6:DC:A1:90:D3:61:6D:BA:23:F3:7D:8B:63:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YM7rJThFxtyhkNNhbboj832LY5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/1VADO_17q_s1vi4sUX8qvyaTKS8.roa
Signing time: Thu 09 Jan 2025 09:02:18 +0000
ROA not before: Thu 09 Jan 2025 09:02:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6730
IP address blocks: 91.213.227.0/24 maxlen: 24
185.38.64.0/24 maxlen: 24
185.38.65.0/24 maxlen: 24
2001:67c:1128::/48 maxlen: 48
2a04:7640::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4a:4c:dd:c5:f9:be:74:a3:a2:41:49:d3:bd:62:23:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ceeb253845c6dca190d3616dba23f37d8b6397
Validity
Not Before: Jan 9 09:02:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d550033bfd7babfb35be2e2c517f2abf2693292f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:18:15:76:cb:e5:33:39:58:e2:00:7c:d4:cd:
77:bf:22:66:26:16:91:c7:47:5e:7b:a7:e1:a4:f0:
0c:9a:5d:41:4c:a1:72:ed:2e:27:b2:53:ea:4b:96:
6a:b0:96:da:19:a0:ec:34:f4:85:4c:04:89:b0:91:
82:30:e4:93:11:91:8f:60:8f:68:ad:85:95:88:0f:
94:2e:c4:ef:f7:c5:7c:91:48:cf:a2:22:4f:7f:ca:
9c:9e:ad:a7:28:85:af:5c:d9:d2:5a:75:ca:7a:19:
b0:f7:1d:56:3b:6b:f5:07:3e:ec:d2:b6:e4:12:5d:
da:a9:b6:be:ab:c4:24:cf:4a:eb:db:5c:cb:4b:20:
8a:8f:8d:b0:7b:2e:43:1b:48:b5:77:2e:89:8f:c7:
b2:1c:6e:9d:5b:61:27:92:84:20:cf:d0:01:7b:3f:
ad:0c:94:c4:9a:4e:ef:66:72:3a:d4:8b:1b:e6:8e:
db:97:1f:20:69:64:f3:29:e4:b4:fd:6a:f5:b4:61:
4e:65:cf:09:9d:bd:cd:a8:1a:24:b2:b3:14:d4:d7:
bb:f6:31:09:92:76:a3:79:82:86:d3:74:e2:1c:8c:
7b:a2:50:7d:1c:65:9b:8e:ad:55:44:fc:97:4e:f3:
7a:5e:79:d8:a5:3c:c7:1d:af:7e:9e:d9:c0:28:82:
25:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:50:03:3B:FD:7B:AB:FB:35:BE:2E:2C:51:7F:2A:BF:26:93:29:2F
X509v3 Authority Key Identifier:
keyid:60:CE:EB:25:38:45:C6:DC:A1:90:D3:61:6D:BA:23:F3:7D:8B:63:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YM7rJThFxtyhkNNhbboj832LY5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/1VADO_17q_s1vi4sUX8qvyaTKS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.227.0/24
185.38.64.0/23
IPv6:
2001:67c:1128::/48
2a04:7640::/48
Signature Algorithm: sha256WithRSAEncryption
19:35:43:13:54:7b:81:b4:45:0a:3a:11:8c:95:d9:7c:12:9b:
50:32:40:7a:0c:60:fa:a2:11:ac:a8:cb:89:7c:02:84:a4:c7:
23:ab:41:4b:74:7e:33:4f:5a:aa:e6:09:d5:ba:5b:16:c8:d2:
16:51:0a:89:d4:e0:a6:23:e7:1c:60:e0:99:d9:2b:07:75:13:
dc:02:95:ab:8f:f1:b8:6f:2d:38:85:97:03:0a:7a:08:d4:8d:
3f:a1:00:f3:5e:39:30:03:80:db:3e:d2:d2:c9:07:70:ee:e8:
d0:30:4f:74:30:b1:f6:62:12:3d:85:54:62:ae:7f:94:ba:d7:
39:b4:72:e0:95:d6:00:a2:21:e1:6a:5b:b8:ab:f9:5b:e6:c2:
1f:5e:46:a7:33:cf:7d:2c:37:27:2d:b1:99:37:14:b7:b5:e7:
fb:ff:37:87:72:b7:b4:69:a6:9a:10:ad:93:26:f1:50:ba:e1:
53:43:a9:13:54:ac:5f:da:40:50:66:aa:1e:76:1c:88:32:e2:
0e:74:4d:7b:b1:6c:da:aa:d6:a8:df:48:b7:09:8f:1d:54:08:
e5:87:21:08:cc:07:bd:73:69:5a:ad:fc:11:ab:37:ca:f5:42:
c1:8e:f9:63:3e:5a:22:72:50:fd:0b:d4:b2:80:86:87:2e:71:
02:3e:b3:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:46:21 2025 by rpki-client