Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/vj_VJ7c4UiwkU_5yyGsly7O6qIk.roa
File: vj_VJ7c4UiwkU_5yyGsly7O6qIk.roa (raw, json)
Hash identifier: RoD9r1uYXNwcvEQVZCci6nqFAbGm9X9wv8JUg9I5naM=
Subject key identifier: BE:3F:D5:27:B7:38:52:2C:24:53:FE:72:C8:6B:25:CB:B3:BA:A8:89
Certificate issuer: /CN=74864f5023ec6263ef9f16f90187f5f28061d115
Certificate serial: 019420D5D1CA814409914C198F140CF5536D
Authority key identifier: 74:86:4F:50:23:EC:62:63:EF:9F:16:F9:01:87:F5:F2:80:61:D1:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dIZPUCPsYmPvnxb5AYf18oBh0RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/vj_VJ7c4UiwkU_5yyGsly7O6qIk.roa
Signing time: Wed 01 Jan 2025 07:47:51 +0000
ROA not before: Wed 01 Jan 2025 07:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198470
IP address blocks: 91.235.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:d1:ca:81:44:09:91:4c:19:8f:14:0c:f5:53:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74864f5023ec6263ef9f16f90187f5f28061d115
Validity
Not Before: Jan 1 07:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=be3fd527b738522c2453fe72c86b25cbb3baa889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1a:78:c7:28:6a:c3:d6:e0:d5:42:97:a4:a4:
d7:cb:0c:ea:67:c7:74:6e:e9:5a:1f:ee:fa:e2:3f:
3d:37:10:ae:1e:b2:81:32:a4:18:31:34:bf:ed:73:
ee:71:e8:d3:7b:1c:9f:be:91:31:82:e6:53:7d:df:
8a:c4:84:c8:f3:96:d8:1a:fb:5b:82:ea:70:49:57:
ac:52:f6:25:9f:ae:67:bb:6b:53:20:67:13:09:01:
c3:ec:22:15:b4:71:df:da:32:ca:68:a4:60:a2:65:
3f:a0:be:6e:0d:cd:5b:ab:a6:e3:f9:ab:c1:e0:b5:
06:be:28:53:5b:c3:32:bb:5b:24:e3:09:6e:f0:99:
47:b5:2a:df:0a:d7:79:5f:51:1a:57:08:20:13:fb:
c7:2c:ce:1c:13:0e:53:89:76:9f:33:a0:72:4b:66:
26:61:ee:cf:56:74:16:53:24:eb:77:61:e1:0f:d6:
92:c5:6b:a0:ed:f0:af:35:a5:5c:1e:0c:11:81:bb:
35:fa:bb:68:34:c8:0d:9f:5d:20:ee:c8:04:d5:c6:
f9:0f:9e:31:cb:63:0b:6b:e4:ac:c0:cd:9b:4f:b3:
c2:fa:4e:00:c6:46:21:e5:57:09:2f:f8:cc:9a:92:
3a:80:f8:0f:4d:b6:f0:7d:af:44:2e:70:d8:b0:76:
94:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:3F:D5:27:B7:38:52:2C:24:53:FE:72:C8:6B:25:CB:B3:BA:A8:89
X509v3 Authority Key Identifier:
keyid:74:86:4F:50:23:EC:62:63:EF:9F:16:F9:01:87:F5:F2:80:61:D1:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dIZPUCPsYmPvnxb5AYf18oBh0RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/vj_VJ7c4UiwkU_5yyGsly7O6qIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/dIZPUCPsYmPvnxb5AYf18oBh0RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.82.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:3e:11:80:4f:1f:4e:14:5e:bf:a3:a0:83:58:2a:48:23:e7:
58:52:64:0c:52:4a:43:52:b7:bd:3d:c1:ce:25:fd:79:ca:29:
5a:94:0b:2c:08:00:71:f8:78:de:27:03:69:9c:e7:de:ae:43:
b2:88:b4:67:fc:7e:7c:41:81:be:74:7e:e4:a8:15:cd:56:5e:
f3:2d:4d:c9:3a:16:25:12:c6:af:6d:6a:ac:70:b5:1e:e9:7a:
9b:e5:1d:33:c4:50:56:86:f5:b8:dd:3f:b8:57:ab:e8:c6:f6:
fa:01:fb:7c:8b:47:84:93:a5:09:d7:87:10:08:2a:c5:64:df:
50:2d:a2:94:9f:8e:8d:b4:6e:f9:ed:bb:4b:bd:fa:bc:e4:b0:
7d:a5:5e:37:d3:f1:93:d8:4b:fe:07:77:56:f3:90:d1:0b:3c:
54:7a:4a:d9:1f:9b:db:53:e8:d2:b2:19:95:57:ce:d5:78:d4:
87:20:13:89:6e:31:4f:3a:52:16:3a:5c:9b:93:77:06:28:fd:
1f:b8:1e:2a:9e:c2:10:0e:a4:e3:5c:40:16:e1:9d:d4:16:43:
88:fb:06:de:65:13:ed:59:8e:70:32:5c:54:fd:87:90:71:df:
81:ef:da:6d:dc:70:bc:f1:31:37:d1:c5:08:3a:4c:23:c2:4c:
dd:77:ed:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:50:36 2025 by rpki-client