Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/VH_4csstjoLaXUNMt0WuNAHGc7M.roa
File: VH_4csstjoLaXUNMt0WuNAHGc7M.roa (raw, json)
Hash identifier: CfzqlCsFn+Zc10YoYvRzUSMfZ+3oTSrZbWtJoJSmJ/8=
Subject key identifier: 54:7F:F8:72:CB:2D:8E:82:DA:5D:43:4C:B7:45:AE:34:01:C6:73:B3
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01945F322F65FCD09B3CC2BFFBFECC95CDD3
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/VH_4csstjoLaXUNMt0WuNAHGc7M.roa
Signing time: Mon 13 Jan 2025 10:25:11 +0000
ROA not before: Mon 13 Jan 2025 10:25:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48090
IP address blocks: 195.178.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:5f:32:2f:65:fc:d0:9b:3c:c2:bf:fb:fe:cc:95:cd:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 13 10:25:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=547ff872cb2d8e82da5d434cb745ae3401c673b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fe:cb:9a:30:5f:91:c2:42:f1:0b:3a:d2:0d:
07:ae:48:16:fa:63:ee:e7:ee:d8:c6:f8:78:5e:0c:
2e:6f:89:54:6d:aa:2d:13:60:2e:3f:39:d5:79:21:
94:dc:07:76:84:99:e2:77:66:04:8d:33:90:36:b2:
a2:37:1b:ae:d6:0f:6f:0c:cc:ff:cf:be:d0:66:d3:
8f:a3:ec:20:ac:5b:58:bb:c0:09:f8:6c:ea:2f:40:
4f:90:46:dd:81:1f:6c:46:c5:01:a9:08:1e:f4:80:
fc:83:36:d0:4e:81:ad:c4:90:5c:0c:ae:6f:9a:3f:
db:fa:b9:9f:96:ed:30:10:a7:ce:ef:da:6a:fd:6f:
54:ca:4b:dd:a9:e8:26:6d:31:bc:2e:00:d9:33:64:
f3:76:95:9b:07:ab:bf:58:8d:c7:fa:9b:33:8b:9b:
5a:fc:60:0b:e8:3f:cb:8c:dd:34:25:77:0e:d8:39:
49:29:42:53:cb:0c:7e:f0:96:c3:49:9f:fb:6e:a1:
91:04:ce:17:8b:cd:c1:f5:e3:a6:eb:d9:26:7a:4e:
fc:bd:62:ba:7a:62:0b:e5:59:79:43:fb:11:65:79:
5c:14:75:fb:cf:1a:40:af:34:63:4b:5a:e1:04:45:
82:8b:9a:0f:74:f3:3a:60:9a:b3:27:39:b9:83:4c:
d8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:7F:F8:72:CB:2D:8E:82:DA:5D:43:4C:B7:45:AE:34:01:C6:73:B3
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/VH_4csstjoLaXUNMt0WuNAHGc7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.178.110.0/24
Signature Algorithm: sha256WithRSAEncryption
91:64:2a:08:56:c9:c3:77:76:49:1a:eb:26:b8:98:b3:31:1f:
25:7a:e5:f2:ed:d4:19:b3:96:68:4f:08:a5:e8:01:37:a3:a4:
ce:68:af:60:3d:57:16:40:e0:7f:bd:9d:19:25:d7:86:1b:ee:
f8:bb:39:32:d1:1b:60:2b:2e:fe:d3:86:e8:58:43:b7:90:6e:
ea:ff:92:79:dd:4b:94:c8:3b:5d:ca:4b:fc:a8:3c:c6:a4:1a:
7b:84:ed:71:eb:d2:18:62:80:1b:a0:2f:6d:8e:59:81:b5:0e:
56:71:24:3c:12:7e:ae:92:0e:14:54:5b:ca:1e:8e:76:45:3a:
cf:26:27:38:4c:79:9c:85:74:ec:24:60:9a:60:87:c2:a9:f0:
6b:af:0e:6a:de:3f:76:84:5e:bf:d5:e0:27:de:e5:b1:f1:87:
51:ed:e2:e1:f6:78:06:4d:8b:2c:3b:48:f2:ce:a0:7a:59:e7:
f8:e1:48:17:21:f0:70:ca:a0:3c:60:39:3a:87:f2:c1:08:b0:
93:52:52:2f:c7:e6:11:70:f8:e3:ef:48:0c:68:bc:96:5f:bd:
d8:32:4d:8c:63:2a:fa:3c:43:55:ec:1a:5d:e3:dd:4c:53:5a:
2a:29:d5:e5:45:17:7f:94:ad:aa:06:ba:2c:fa:4b:1e:fb:9d:
ad:04:41:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:02:07 2025 by rpki-client