Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/VDp2XndX6JtfGoVwkuuoCgKyVMU.roa
File: VDp2XndX6JtfGoVwkuuoCgKyVMU.roa (raw, json)
Hash identifier: Rhw0fwZkj0N5t7R6u0JuhOm1mEK44+j2oimY3iLluL4=
Subject key identifier: 54:3A:76:5E:77:57:E8:9B:5F:1A:85:70:92:EB:A8:0A:02:B2:54:C5
Certificate issuer: /CN=62c66267943d413cdf760dc6850104c1c0fc1d65
Certificate serial: 01942746E45BAC3F01E885319B0195F22EF7
Authority key identifier: 62:C6:62:67:94:3D:41:3C:DF:76:0D:C6:85:01:04:C1:C0:FC:1D:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/VDp2XndX6JtfGoVwkuuoCgKyVMU.roa
Signing time: Thu 02 Jan 2025 13:49:04 +0000
ROA not before: Thu 02 Jan 2025 13:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15598
IP address blocks: 89.31.140.0/24 maxlen: 24
89.31.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:e4:5b:ac:3f:01:e8:85:31:9b:01:95:f2:2e:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62c66267943d413cdf760dc6850104c1c0fc1d65
Validity
Not Before: Jan 2 13:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=543a765e7757e89b5f1a857092eba80a02b254c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:99:1b:20:ce:20:fa:1e:b2:78:37:70:a7:f2:
9f:68:46:e0:55:2e:3e:9a:21:38:78:4f:4e:e2:89:
f7:a7:ac:44:19:af:96:62:19:25:2b:83:63:88:0a:
f6:d1:ac:e5:88:9d:c6:8d:1a:5e:c6:4b:ba:3b:b3:
eb:06:72:68:51:6b:bb:fc:7e:37:fb:98:b3:03:ab:
fb:4c:48:04:47:9f:66:17:6e:f1:39:2b:9f:3a:46:
8e:28:da:a5:37:72:48:15:d1:eb:c6:af:b3:ce:9a:
e1:cf:12:1d:58:ff:10:df:28:76:ba:2e:32:a9:d6:
33:60:85:a9:7f:08:ee:86:95:e2:f4:73:cc:b9:3f:
99:d9:ae:b1:6f:37:2b:05:2e:83:db:60:ac:cf:d3:
aa:58:d6:0e:d5:29:1f:13:40:ae:bb:37:f6:4b:9c:
76:17:a8:01:b1:3e:74:24:5c:53:a5:b0:5f:08:7d:
75:77:6b:1a:e0:bc:b4:37:7e:9e:11:a3:3f:60:a0:
52:63:c1:ed:e9:f3:ac:98:c2:53:a9:4c:b4:86:26:
b8:c4:f7:e9:b4:38:c4:d7:27:ed:3c:d0:5b:57:f9:
6d:01:cf:83:67:97:61:d6:50:71:14:af:7b:70:3f:
2e:b5:e7:dd:66:58:2a:29:ac:47:a8:af:c1:2e:17:
6b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:3A:76:5E:77:57:E8:9B:5F:1A:85:70:92:EB:A8:0A:02:B2:54:C5
X509v3 Authority Key Identifier:
keyid:62:C6:62:67:94:3D:41:3C:DF:76:0D:C6:85:01:04:C1:C0:FC:1D:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/VDp2XndX6JtfGoVwkuuoCgKyVMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.31.140.0/24
89.31.143.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:4c:76:9f:6e:19:e9:8b:fc:32:96:f9:62:47:62:44:ea:78:
1f:f7:fa:82:06:f3:e0:03:b0:21:19:1c:39:53:bc:67:9e:29:
a3:06:db:67:89:e8:c9:d3:cd:4d:2a:2f:3a:fa:4d:2c:6f:83:
8b:43:cf:8f:f9:10:51:f8:3f:3c:5a:7f:62:bd:d9:9b:8e:f4:
b8:be:a3:92:ed:38:2e:dd:81:a8:20:30:10:d9:7a:58:f1:1f:
86:3b:89:36:3d:f2:d9:07:1b:02:9d:da:bb:e3:d6:87:a2:9e:
41:ce:ae:29:0d:85:b8:cb:05:d3:64:6c:f7:2b:0a:fd:c3:c9:
43:e4:7d:65:ad:da:fb:09:ed:84:b3:35:82:b7:4b:b1:5f:73:
d7:6f:2f:8f:9f:3f:0b:60:64:8e:72:65:14:be:78:88:10:9a:
cf:35:f0:7f:a8:06:26:ee:49:36:b3:1f:63:57:94:1e:ed:40:
6b:da:62:f7:e9:6a:02:a9:ab:4e:9d:76:71:14:ea:85:a7:d1:
49:b1:96:5d:a2:0e:53:88:db:d2:b5:39:da:94:4d:50:2f:5e:
d6:ca:fe:42:79:99:0e:0f:06:a7:48:eb:a5:d2:10:c7:3f:4a:
3c:54:66:ab:ed:27:14:80:e7:2f:ac:75:53:49:51:02:de:47:
56:de:f7:23
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQnRuRbrD8B6IUxmwGV8i73MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyYzY2MjY3OTQzZDQxM2NkZjc2MGRjNjg1MDEwNGMxYzBm
YzFkNjUwHhcNMjUwMTAyMTM0OTA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NDNhNzY1ZTc3NTdlODliNWYxYTg1NzA5MmViYTgwYTAyYjI1NGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZkbIM4g+h6yeDdwp/KfaEbgVS4+
miE4eE9O4on3p6xEGa+WYhklK4NjiAr20azliJ3GjRpexku6O7PrBnJoUWu7/H43
+5izA6v7TEgER59mF27xOSufOkaOKNqlN3JIFdHrxq+zzprhzxIdWP8Q3yh2ui4y
qdYzYIWpfwjuhpXi9HPMuT+Z2a6xbzcrBS6D22Csz9OqWNYO1SkfE0Cuuzf2S5x2
F6gBsT50JFxTpbBfCH11d2sa4Ly0N36eEaM/YKBSY8Ht6fOsmMJTqUy0hia4xPfp
tDjE1yftPNBbV/ltAc+DZ5dh1lBxFK97cD8utefdZlgqKaxHqK/BLhdr4wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFQ6dl53V+ibXxqFcJLrqAoCslTFMB8GA1UdIwQY
MBaAFGLGYmeUPUE833YNxoUBBMHA/B1lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXNaaVo1UTlRVHpmZGczR2hRRUV3Y0Q4SFdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81MGY0ZjctNDljYy00YzgyLTkzMjQt
YTlkN2FkNDQyYjNiLzEvVkRwMlhuZFg2SnRmR29Wd2t1dW9DZ0t5Vk1VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS81MGY0ZjctNDljYy00YzgyLTkzMjQtYTlkN2FkNDQyYjNi
LzEvWXNaaVo1UTlRVHpmZGczR2hRRUV3Y0Q4SFdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWR+MAwQA
WR+PMA0GCSqGSIb3DQEBCwUAA4IBAQANTHafbhnpi/wylvliR2JE6ngf9/qCBvPg
A7AhGRw5U7xnnimjBttniejJ081NKi86+k0sb4OLQ8+P+RBR+D88Wn9ivdmbjvS4
vqOS7Tgu3YGoIDAQ2XpY8R+GO4k2PfLZBxsCndq749aHop5Bzq4pDYW4ywXTZGz3
Kwr9w8lD5H1lrdr7Ce2EszWCt0uxX3PXby+Pnz8LYGSOcmUUvniIEJrPNfB/qAYm
7kk2sx9jV5Qe7UBr2mL36WoCqatOnXZxFOqFp9FJsZZdog5TiNvStTnalE1QL17W
yv5CeZkODwanSOul0hDHP0o8VGar7ScUgOcvrHVTSVEC3kdW3vcj
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:26:55 2025 by rpki-client