Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b5559e-950b-48f4-a2ab-b26f1a70af0d/1/VnRQ8C8QXZSlLiPv3ntpPix0MBc.roa
File: VnRQ8C8QXZSlLiPv3ntpPix0MBc.roa (raw, json)
Hash identifier: GsTYSMVbMlYjzB/yj1A15/Pa7xUVFVUn8yyhUswywB0=
Subject key identifier: 56:74:50:F0:2F:10:5D:94:A5:2E:23:EF:DE:7B:69:3E:2C:74:30:17
Certificate issuer: /CN=e31722d79bff4384a597cb544d9e7974490d8734
Certificate serial: 019424B2BB6D7C60C18127CF72475C4A0692
Authority key identifier: E3:17:22:D7:9B:FF:43:84:A5:97:CB:54:4D:9E:79:74:49:0D:87:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xci15v_Q4Sll8tUTZ55dEkNhzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b5559e-950b-48f4-a2ab-b26f1a70af0d/1/VnRQ8C8QXZSlLiPv3ntpPix0MBc.roa
Signing time: Thu 02 Jan 2025 01:48:00 +0000
ROA not before: Thu 02 Jan 2025 01:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 63023
IP address blocks: 91.239.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:bb:6d:7c:60:c1:81:27:cf:72:47:5c:4a:06:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e31722d79bff4384a597cb544d9e7974490d8734
Validity
Not Before: Jan 2 01:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=567450f02f105d94a52e23efde7b693e2c743017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:f3:e6:a3:fc:c4:d5:e3:b2:0c:67:03:97:99:
3b:40:00:73:e5:1e:59:2e:27:7c:33:e7:c2:74:5d:
54:8b:be:83:45:d7:d0:62:5e:09:44:17:ba:01:09:
6b:1b:6d:a8:92:af:9f:aa:88:64:6e:4c:80:5b:f5:
22:90:3c:54:cc:f6:a9:66:ee:72:8b:df:87:ea:6c:
cb:0a:74:b0:ed:a6:db:d7:3e:09:39:ed:55:7f:6e:
9a:42:58:29:4f:ba:b4:e7:67:c2:e7:fa:84:c6:67:
18:b0:e8:a2:9f:48:8f:38:5f:bf:22:4f:51:93:89:
88:a8:d0:98:a1:57:5e:15:f4:44:db:3a:84:86:5f:
e0:80:64:0d:2f:e7:28:f9:a5:0a:eb:ad:f5:6c:f3:
ea:2b:0d:4c:b0:b8:85:68:16:3c:d1:dd:bc:b8:c2:
4e:50:2f:f9:c1:a1:8a:e6:8f:42:45:af:b8:71:bf:
cd:4d:a1:66:69:30:16:32:67:5a:6c:e0:c0:16:1f:
38:60:ec:4a:1e:51:7e:93:24:f8:7a:d3:28:14:37:
2f:d5:6e:9f:ac:64:e1:6c:fc:45:e1:b9:b7:4b:73:
6b:5d:52:44:71:a5:84:8e:bf:01:d3:c9:23:57:8a:
3e:dd:3d:fa:d7:19:da:ec:db:46:14:1d:15:c5:b9:
46:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:74:50:F0:2F:10:5D:94:A5:2E:23:EF:DE:7B:69:3E:2C:74:30:17
X509v3 Authority Key Identifier:
keyid:E3:17:22:D7:9B:FF:43:84:A5:97:CB:54:4D:9E:79:74:49:0D:87:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xci15v_Q4Sll8tUTZ55dEkNhzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b5559e-950b-48f4-a2ab-b26f1a70af0d/1/VnRQ8C8QXZSlLiPv3ntpPix0MBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b5559e-950b-48f4-a2ab-b26f1a70af0d/1/4xci15v_Q4Sll8tUTZ55dEkNhzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.53.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:42:1a:fd:3f:f5:a8:2f:45:8b:30:7a:48:92:67:05:04:e5:
e0:74:74:a5:2e:8c:46:f0:24:c5:39:1b:5d:30:79:c3:3f:2d:
41:30:a1:51:a0:53:a7:24:54:19:1d:36:61:2d:84:e0:3b:91:
ad:da:8d:8f:89:fd:e9:67:62:23:00:92:3f:c8:d3:3e:d1:f6:
ec:a9:c2:7a:fa:77:7a:04:48:90:b8:7a:bd:40:d7:4d:e5:43:
b3:e8:64:f3:87:74:9c:4b:9d:e6:6c:d7:bf:fa:12:6a:dc:7e:
96:f6:a6:f5:c2:30:3d:81:8b:08:c4:d4:78:f4:91:db:8d:ec:
4c:36:06:98:4c:5c:97:82:48:51:1b:20:a5:5e:43:24:d6:88:
60:27:52:dd:9f:ac:63:60:84:23:6b:84:36:d3:fe:80:af:11:
0d:a1:32:b5:b2:bb:5d:21:eb:fe:78:0c:47:0b:17:85:be:14:
36:88:ce:ba:a0:ab:06:2b:46:05:71:61:e5:92:62:da:31:f0:
0e:16:7b:1f:4f:40:53:d8:23:36:d3:a6:56:7a:64:90:99:89:
d5:1a:b2:2e:97:f2:65:1b:a0:13:34:60:a8:17:c9:47:40:30:
f5:dc:38:c4:95:43:cd:0b:df:31:22:a9:26:55:6f:10:e5:38:
2c:7e:28:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:30:56 2025 by rpki-client