Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/VV03O10Ak9GphsezqITF8UBndo4.roa
File: VV03O10Ak9GphsezqITF8UBndo4.roa (raw, json)
Hash identifier: /Uvf5KDYlZcfuz0KI0o0tgIwygpPPgdM7QOdmxpaBwY=
Subject key identifier: 55:5D:37:3B:5D:00:93:D1:A9:86:C7:B3:A8:84:C5:F1:40:67:76:8E
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 019427B565D8340B012324559C13987FBD19
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/VV03O10Ak9GphsezqITF8UBndo4.roa
Signing time: Thu 02 Jan 2025 15:49:47 +0000
ROA not before: Thu 02 Jan 2025 15:49:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61223
IP address blocks: 89.23.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:65:d8:34:0b:01:23:24:55:9c:13:98:7f:bd:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Jan 2 15:49:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=555d373b5d0093d1a986c7b3a884c5f14067768e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:99:05:a6:3b:cd:91:0f:3c:b6:e7:51:dd:a9:
a3:8a:16:cc:2a:52:d3:05:bf:7b:0b:64:89:3b:a4:
79:48:89:22:5e:7d:b4:28:57:6c:ce:7d:a9:99:36:
ac:13:e4:b5:b8:94:d0:e8:dc:2b:95:a5:ef:96:65:
81:59:b6:32:ed:57:ca:4b:55:8a:6f:8b:50:ec:7e:
46:49:78:74:b2:5f:17:89:4b:07:ce:59:67:e2:f4:
12:20:e3:35:6a:ad:39:8c:c7:0b:ea:a0:ad:bd:11:
bc:39:5c:64:be:46:f9:96:bd:38:ae:f6:eb:50:19:
67:34:8a:8e:e1:65:86:51:ab:43:a3:84:2d:63:ac:
f9:c9:08:ed:d0:e4:62:31:fa:40:95:14:39:d7:10:
14:5d:b3:01:cc:64:63:6f:f6:94:44:6d:b6:61:41:
be:a2:98:5c:1f:ec:3d:73:00:22:06:3f:4b:94:0a:
12:99:f6:4b:c6:1b:c3:62:27:22:8f:4b:cc:c9:f8:
6a:56:b5:43:db:4d:5d:0e:f2:14:64:03:64:ed:f9:
f4:16:aa:5c:ea:25:bc:60:06:e7:e2:5b:88:4f:17:
26:6b:e0:30:36:48:1d:79:8d:77:c2:41:69:3c:a6:
1b:c1:36:98:eb:9b:63:9b:75:18:47:56:41:6f:02:
cb:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:5D:37:3B:5D:00:93:D1:A9:86:C7:B3:A8:84:C5:F1:40:67:76:8E
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/VV03O10Ak9GphsezqITF8UBndo4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.104.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:fb:9c:1a:9d:17:25:ba:56:7d:55:e5:12:9c:69:85:51:96:
64:5b:7c:74:39:53:77:87:88:ce:72:eb:b1:7f:c7:bd:06:b7:
ba:0d:5f:42:ca:04:41:d0:ae:bd:4e:86:93:3d:78:e9:e3:f7:
a1:34:2a:46:21:d2:36:f6:a6:0b:c0:42:d7:b5:17:e6:4e:4d:
40:d2:7a:4e:25:df:03:68:98:fa:e5:29:0e:01:9f:96:5f:18:
c1:06:f0:72:b0:b5:1e:09:25:35:20:5d:1b:05:bb:e4:10:68:
22:82:ad:22:56:4b:da:d3:04:2a:a5:2d:ee:19:3b:f3:54:45:
b2:67:e8:3a:df:f7:21:75:3e:c7:84:9f:76:6b:45:0b:8d:30:
60:bf:84:c9:65:b9:90:b0:c1:04:68:f3:c0:64:fb:8a:81:c3:
2c:39:8c:1b:84:62:bd:e4:3c:6d:45:ea:5d:11:73:da:41:d4:
54:f4:af:f4:35:d4:2f:89:8d:82:e4:f4:57:b3:42:9b:a8:9b:
11:69:eb:4d:32:8e:78:64:91:11:37:44:4d:a4:19:5f:23:d5:
16:7b:ab:dd:dd:a4:21:88:d3:8d:b2:aa:ad:9e:b9:ee:0c:8e:
8d:5c:98:0c:91:58:5c:f3:29:37:ee:ab:05:13:46:06:37:e2:
58:bd:df:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:08:26 2025 by rpki-client