Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b523db-842d-4267-be87-e6df8edabfb8/1/VFj5aKDFYxJGvJI6tYAdBkRUUKI.roa
File: VFj5aKDFYxJGvJI6tYAdBkRUUKI.roa (raw, json)
Hash identifier: gWEnNe9T8U6TtdthLKRFfDmS/LnKXxsDWRpdZGNSQs4=
Subject key identifier: 54:58:F9:68:A0:C5:63:12:46:BC:92:3A:B5:80:1D:06:44:54:50:A2
Certificate issuer: /CN=794f253abffa3214cda8dc99599e5e7c664abf4a
Certificate serial: 01953A4F7C950E5EEFB67110AC5E42E6631F
Authority key identifier: 79:4F:25:3A:BF:FA:32:14:CD:A8:DC:99:59:9E:5E:7C:66:4A:BF:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eU8lOr_6MhTNqNyZWZ5efGZKv0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b523db-842d-4267-be87-e6df8edabfb8/1/VFj5aKDFYxJGvJI6tYAdBkRUUKI.roa
Signing time: Mon 24 Feb 2025 23:34:02 +0000
ROA not before: Mon 24 Feb 2025 23:34:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212733
IP address blocks: 93.157.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3a:4f:7c:95:0e:5e:ef:b6:71:10:ac:5e:42:e6:63:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=794f253abffa3214cda8dc99599e5e7c664abf4a
Validity
Not Before: Feb 24 23:34:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5458f968a0c5631246bc923ab5801d06445450a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:98:85:83:c1:38:b1:0d:13:93:65:5d:eb:53:
8f:86:ba:57:0f:57:d9:6d:b3:95:be:30:26:3d:6c:
5e:41:93:29:1a:e0:d9:f2:5f:3c:0f:67:c9:ac:29:
7d:51:07:2f:4a:4c:a5:3e:5d:0a:df:f1:a5:dd:c0:
3a:e0:75:0f:c6:37:bc:08:e6:7d:dd:1a:4a:2e:16:
2c:3a:5a:28:b5:ca:c8:0a:69:b4:6e:11:49:59:e0:
ac:2a:3b:49:64:52:4f:05:96:f4:42:bc:76:c3:bb:
09:ab:63:8c:d7:b8:c8:35:7d:e3:0b:27:96:dd:fd:
a3:30:2d:cf:af:7f:11:66:dd:0f:f1:62:c8:c5:6d:
81:8a:b6:86:c7:81:fc:fb:9e:bb:52:da:3d:b8:5d:
8e:5d:59:c9:91:01:4f:4d:a2:eb:9b:21:d5:95:cb:
e1:70:e4:d3:ff:73:35:a5:bd:2d:d2:b6:2d:46:ca:
e5:6d:3e:00:38:98:8e:a0:e3:30:22:0c:f5:4a:7d:
0b:aa:06:3c:cf:d4:f2:08:87:c4:02:de:4c:98:f7:
57:7f:6b:52:ca:3a:6e:49:59:12:3f:58:e7:88:50:
99:34:9e:9f:c4:d6:c6:ef:38:62:7d:72:92:19:d9:
11:8d:cb:6d:4b:e4:49:3c:9e:33:fd:c3:45:f5:21:
4e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:58:F9:68:A0:C5:63:12:46:BC:92:3A:B5:80:1D:06:44:54:50:A2
X509v3 Authority Key Identifier:
keyid:79:4F:25:3A:BF:FA:32:14:CD:A8:DC:99:59:9E:5E:7C:66:4A:BF:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eU8lOr_6MhTNqNyZWZ5efGZKv0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b523db-842d-4267-be87-e6df8edabfb8/1/VFj5aKDFYxJGvJI6tYAdBkRUUKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b523db-842d-4267-be87-e6df8edabfb8/1/eU8lOr_6MhTNqNyZWZ5efGZKv0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.157.141.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:b8:ee:54:b4:10:3e:e5:05:8f:c7:f4:e8:70:04:67:75:b5:
69:c8:ec:9a:6d:d8:ec:fa:63:eb:b7:24:1d:6b:6e:84:6b:9a:
9f:9d:ee:2b:44:74:66:a1:79:b0:73:9b:f0:ed:ec:79:12:9c:
53:d5:c5:e8:76:2a:c7:60:1b:89:9f:b2:42:7c:8a:1c:f0:9c:
ef:c4:0b:12:f4:7f:8f:c5:23:46:68:3d:6c:82:c2:09:15:40:
cb:39:9e:7d:68:29:36:4b:39:68:d0:4a:39:ac:1a:76:0b:4f:
19:fb:ea:5e:c3:69:33:2a:40:27:cb:6b:d1:e4:ac:b6:25:d9:
6f:85:4f:53:f2:a9:6b:f9:8f:1d:95:06:de:b4:e1:23:62:d3:
47:45:fa:23:6e:30:97:cb:e7:30:3b:31:6e:57:bf:c1:40:f5:
ba:92:fd:56:69:fe:d7:e6:20:d3:1c:d9:e1:10:6b:7f:d7:b3:
05:1e:61:13:a5:ed:24:6e:73:5b:75:ae:80:34:91:34:51:cf:
64:0d:15:ce:9c:f7:3a:97:a0:f5:77:57:aa:62:4f:2b:df:a4:
bb:84:5e:43:97:e8:2c:34:8c:62:f7:52:69:b4:4c:c3:9d:97:
5f:7e:4e:3d:7b:a2:de:12:11:a9:fe:e3:13:52:47:73:0f:3e:
0a:52:7e:71
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZU6T3yVDl7vtnEQrF5C5mMfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5NGYyNTNhYmZmYTMyMTRjZGE4ZGM5OTU5OWU1ZTdjNjY0
YWJmNGEwHhcNMjUwMjI0MjMzNDAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NDU4Zjk2OGEwYzU2MzEyNDZiYzkyM2FiNTgwMWQwNjQ0NTQ1MGEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpiFg8E4sQ0Tk2Vd61OPhrpXD1fZ
bbOVvjAmPWxeQZMpGuDZ8l88D2fJrCl9UQcvSkylPl0K3/Gl3cA64HUPxje8COZ9
3RpKLhYsOlootcrICmm0bhFJWeCsKjtJZFJPBZb0Qrx2w7sJq2OM17jINX3jCyeW
3f2jMC3Pr38RZt0P8WLIxW2BiraGx4H8+567Uto9uF2OXVnJkQFPTaLrmyHVlcvh
cOTT/3M1pb0t0rYtRsrlbT4AOJiOoOMwIgz1Sn0LqgY8z9TyCIfEAt5MmPdXf2tS
yjpuSVkSP1jniFCZNJ6fxNbG7zhifXKSGdkRjcttS+RJPJ4z/cNF9SFO1wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFRY+WigxWMSRrySOrWAHQZEVFCiMB8GA1UdIwQY
MBaAFHlPJTq/+jIUzajcmVmeXnxmSr9KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVU4bE9yXzZNaFROcU55WldaNWVmR1pLdjBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9iNTIzZGItODQyZC00MjY3LWJlODct
ZTZkZjhlZGFiZmI4LzEvVkZqNWFLREZZeEpHdkpJNnRZQWRCa1JVVUtJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9iNTIzZGItODQyZC00MjY3LWJlODctZTZkZjhlZGFiZmI4
LzEvZVU4bE9yXzZNaFROcU55WldaNWVmR1pLdjBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXZ2NMA0G
CSqGSIb3DQEBCwUAA4IBAQB8uO5UtBA+5QWPx/TocARndbVpyOyabdjs+mPrtyQd
a26Ea5qfne4rRHRmoXmwc5vw7ex5EpxT1cXodirHYBuJn7JCfIoc8JzvxAsS9H+P
xSNGaD1sgsIJFUDLOZ59aCk2Szlo0Eo5rBp2C08Z++pew2kzKkAny2vR5Ky2Jdlv
hU9T8qlr+Y8dlQbetOEjYtNHRfojbjCXy+cwOzFuV7/BQPW6kv1Waf7X5iDTHNnh
EGt/17MFHmETpe0kbnNbda6ANJE0Uc9kDRXOnPc6l6D1d1eqYk8r36S7hF5Dl+gs
NIxi91JptEzDnZdffk49e6LeEhGp/uMTUkdzDz4KUn5x
-----END CERTIFICATE-----
Generated at Tue Apr 8 17:06:59 2025 by rpki-client