Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/60447d-d305-4dea-9daa-26837038c688/1/VBl-ShtkY5AIJWsXxjtVR-loSP4.roa
File: VBl-ShtkY5AIJWsXxjtVR-loSP4.roa (raw, json)
Hash identifier: UuFGS1s0gPMKN8UjwJZO3gcLtja3SP+rxmHIDo2PFTE=
Subject key identifier: 54:19:7E:4A:1B:64:63:90:08:25:6B:17:C6:3B:55:47:E9:68:48:FE
Certificate issuer: /CN=1bbc841b779a2bb2c28a8daee2b2d10d5a7c34d5
Certificate serial: 0194221FCEB5D7BDF439634ECC82F65194DE
Authority key identifier: 1B:BC:84:1B:77:9A:2B:B2:C2:8A:8D:AE:E2:B2:D1:0D:5A:7C:34:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G7yEG3eaK7LCio2u4rLRDVp8NNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/60447d-d305-4dea-9daa-26837038c688/1/VBl-ShtkY5AIJWsXxjtVR-loSP4.roa
Signing time: Wed 01 Jan 2025 13:48:17 +0000
ROA not before: Wed 01 Jan 2025 13:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56813
IP address blocks: 91.237.88.0/23 maxlen: 24
2001:67c:299c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:ce:b5:d7:bd:f4:39:63:4e:cc:82:f6:51:94:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bbc841b779a2bb2c28a8daee2b2d10d5a7c34d5
Validity
Not Before: Jan 1 13:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=54197e4a1b64639008256b17c63b5547e96848fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ed:06:0d:3c:89:78:10:7b:dd:93:d6:e5:2c:
65:78:b4:05:a3:ad:15:93:07:ee:ee:ab:04:3e:ea:
6b:be:13:e9:9a:9e:d7:6b:e7:e6:5a:f3:7c:a2:c7:
4e:15:eb:47:11:d7:7d:41:63:b2:10:af:60:f2:70:
60:6c:8f:3e:fb:9c:14:0a:fc:e7:ab:1c:cd:96:f0:
e9:ea:e9:1e:b6:9e:5b:3d:5a:0b:ea:bb:26:11:fa:
83:35:16:be:e7:65:b6:35:1c:97:d1:ad:2e:2e:36:
bc:0e:23:db:e3:80:12:f5:47:18:65:5b:2e:a3:4e:
f5:59:7d:bd:95:34:9c:81:89:03:26:00:34:cf:52:
71:de:7a:f2:e8:ab:58:b9:75:06:15:5d:20:ac:75:
b9:cf:7f:2c:e4:5d:27:b4:a2:51:5c:6f:6a:45:67:
ec:e1:9d:b5:9b:df:bf:b4:d9:35:86:ce:02:7c:10:
d2:f2:a9:56:00:96:5d:47:ce:82:cd:f1:94:b6:7b:
56:bc:4c:c4:73:4a:db:de:79:42:3d:bc:92:a6:49:
8c:d4:4d:ca:24:c9:7c:e7:96:43:43:54:56:d6:88:
f5:e3:29:08:73:f7:86:f2:04:8c:e2:32:dd:1a:1d:
63:cc:c7:5a:13:63:37:e1:c2:ec:21:08:7a:7e:b9:
4c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:19:7E:4A:1B:64:63:90:08:25:6B:17:C6:3B:55:47:E9:68:48:FE
X509v3 Authority Key Identifier:
keyid:1B:BC:84:1B:77:9A:2B:B2:C2:8A:8D:AE:E2:B2:D1:0D:5A:7C:34:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G7yEG3eaK7LCio2u4rLRDVp8NNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/60447d-d305-4dea-9daa-26837038c688/1/VBl-ShtkY5AIJWsXxjtVR-loSP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/60447d-d305-4dea-9daa-26837038c688/1/G7yEG3eaK7LCio2u4rLRDVp8NNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.88.0/23
IPv6:
2001:67c:299c::/48
Signature Algorithm: sha256WithRSAEncryption
26:dd:dd:49:05:59:d3:b7:93:5a:33:bc:4f:66:4a:2c:c5:05:
25:9a:6d:96:93:b4:7e:53:c7:e2:f8:27:62:dc:e2:b5:38:71:
0f:d1:d8:b7:7f:77:ec:3a:3a:11:bc:ce:a9:39:bf:f8:33:6f:
f9:0e:54:c6:2c:8f:d9:e2:4e:86:25:92:4f:1d:18:7a:a2:ba:
ac:17:42:f6:7e:58:65:76:15:a4:73:49:9b:0f:01:4c:7d:aa:
70:a9:9f:29:4c:a6:f9:f7:3b:1d:d4:10:9d:e5:5b:c0:84:2c:
32:81:c5:61:91:90:7b:94:58:a4:4f:e6:6e:95:1f:84:b4:d1:
3d:8e:f1:c4:a0:36:e6:56:b9:aa:e5:9c:50:f0:bb:7c:8b:b7:
aa:6f:4e:83:45:e6:cb:59:21:6a:82:4d:25:8e:a0:d4:31:19:
41:9b:c8:b4:98:6d:11:94:35:04:ef:9e:4c:a3:74:ac:ce:77:
96:12:cd:30:c3:64:1f:ee:54:44:6e:40:5a:9c:02:bf:f8:e2:
e0:43:9a:ea:99:22:e4:67:c3:8b:13:63:08:fd:86:73:43:64:
05:ee:c1:6f:d7:5d:f9:38:67:04:cd:50:23:c6:04:07:ef:91:
16:eb:b9:d0:5c:a3:32:42:d2:e4:fa:51:02:37:06:09:66:f0:
2e:3e:3f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:42:32 2025 by rpki-client